Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: qUI4iFwaCggWSUrw/Nr0XgVMke7uooR1j1bw9ZHJ/I0=
Subject key identifier: B8:53:A9:1E:E1:3C:D7:2B:B6:52:DD:E7:26:A1:12:60:98:02:00:29
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019FACE4A101A775ABF45AC390D8990A1CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 08:01:32 +0000
Manifest this update: Wed 29 Jul 2026 08:01:32 +0000
Manifest next update: Thu 30 Jul 2026 08:01:32 +0000
Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: bs8J8/fzd8kMKeilZdl5hEp4ciwlhXWly2efITKZwFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:a1:01:a7:75:ab:f4:5a:c3:90:d8:99:0a:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jul 29 08:01:32 2026 GMT
Not After : Jul 30 08:01:32 2026 GMT
Subject: CN=b853a91ee13cd72bb652dde726a1126098020029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:37:18:49:8e:d9:4a:80:02:23:fb:8f:82:
f2:e1:c0:2e:99:5b:46:68:17:7c:af:be:a6:df:8a:
12:17:7f:71:40:a0:05:6f:94:9e:cc:e8:e8:f2:03:
4e:37:05:ea:c0:df:a0:02:7e:56:a8:d1:de:94:a0:
16:70:4a:cf:9a:81:48:1a:99:5f:c7:1f:56:e6:bf:
9c:5a:ca:0c:ae:8d:07:f7:f9:f2:c6:0e:86:9c:67:
c2:5d:10:97:b9:df:a2:90:45:7b:57:d0:f5:d6:9e:
3a:54:41:3e:09:a1:fd:5d:a1:cc:97:bb:29:dc:9b:
0f:6a:a4:91:86:d9:d4:2e:5e:50:40:8d:36:f1:f7:
a9:e6:70:3a:ef:10:e6:5d:79:53:33:e1:4d:99:7c:
1f:21:a7:74:2c:97:b9:71:de:e2:9b:8f:0c:c1:09:
de:4d:59:0a:97:0a:3f:14:a3:a9:8e:d1:1d:3d:61:
3f:85:57:6a:b8:f6:a0:f4:2d:c4:a4:27:6b:53:01:
fe:da:b4:10:5c:06:92:37:69:09:41:bb:36:c3:ab:
43:d4:88:78:49:9f:e5:76:72:15:bb:e6:b9:e6:15:
da:a0:95:6b:f7:18:4a:f9:39:c7:a9:26:d7:a1:c7:
0e:bc:bd:06:a7:d1:8a:b8:26:28:27:ad:aa:71:df:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:A9:1E:E1:3C:D7:2B:B6:52:DD:E7:26:A1:12:60:98:02:00:29
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:cb:3a:0e:73:44:5c:fd:ad:28:49:d8:6e:1a:f0:af:30:
66:5a:d6:90:22:63:37:5e:a0:33:ec:c7:1e:51:e0:2c:91:34:
08:bf:f2:8b:cc:a7:19:83:a6:8b:e1:92:92:1e:7c:5f:d2:e4:
52:8c:ab:8a:e3:6b:0d:ff:e0:b3:af:8e:76:91:46:bb:cd:98:
85:9b:7a:58:06:c2:4f:e7:a3:2e:7a:a3:9d:c8:44:9e:69:b9:
6e:fe:30:7a:1a:11:bd:46:f3:61:76:54:23:41:bc:1d:36:6e:
eb:39:fd:9a:ee:49:6a:13:7b:cc:e3:ef:1c:84:7c:06:27:40:
59:1e:22:62:4f:d7:42:53:c9:f4:58:dc:b4:2e:11:f9:91:6a:
70:e5:b4:af:5f:b8:56:06:bb:61:68:f7:29:bb:f4:c3:7b:e7:
92:1a:d6:4b:e3:f0:2f:bc:20:2f:e5:b6:60:0e:6c:19:08:1e:
27:48:af:66:b6:f4:36:38:e0:22:18:4d:8f:f6:df:01:55:d3:
11:b3:20:c6:7a:03:9c:76:b5:b3:d4:c4:3c:9d:05:c0:8f:42:
a4:5c:65:16:77:3b:88:91:0d:d8:50:02:35:09:af:7f:67:35:
b7:b3:a7:23:05:91:7e:0e:52:2f:04:98:bf:fb:2c:4b:e2:9a:
ee:82:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:41 2026 by rpki-client