Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: E29DhZHnlTIgzKe3sN7kWZjlueMira+Twx/P1N+csnw=
Subject key identifier: 41:E0:54:61:10:02:F4:54:E8:80:0E:85:3D:40:91:33:29:A6:3E:9A
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 019FAA879C6CBEB6879CD900F1DF6CB46974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 21:00:41 +0000
Manifest this update: Tue 28 Jul 2026 21:00:41 +0000
Manifest next update: Wed 29 Jul 2026 21:00:41 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: 1nyOblFOwXZR2hn0IYbiwyWvusil3jrranV8rHH5Mrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9c:6c:be:b6:87:9c:d9:00:f1:df:6c:b4:69:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Jul 28 21:00:41 2026 GMT
Not After : Jul 29 21:00:41 2026 GMT
Subject: CN=41e054611002f454e8800e853d40913329a63e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:75:ff:f8:fd:d4:dd:98:22:cd:bf:eb:25:
92:73:66:79:8c:67:fb:64:79:e2:55:a1:73:5f:0c:
7b:c5:43:df:b3:19:84:48:48:0f:2f:cb:19:43:b8:
a8:00:cc:19:f3:d0:46:a2:63:e7:7d:7e:96:85:18:
fd:97:87:30:b4:a6:df:d1:8f:cf:96:72:e0:9e:c9:
7f:52:2b:34:a2:ee:cb:3d:df:0d:96:05:6f:de:0b:
92:90:b0:9b:0a:39:80:0d:1b:33:c0:d9:7c:68:49:
4a:df:d3:0b:39:70:f3:2d:67:f9:f0:ae:17:59:9f:
83:04:ef:34:6f:b9:e6:22:e6:79:2f:fb:bc:e2:f9:
c1:26:d7:5c:5c:47:1d:79:29:e6:f2:7b:73:ac:ce:
da:f8:2d:38:46:df:24:d6:4c:e8:90:72:02:34:2f:
58:aa:ce:ac:3f:aa:51:b9:e4:ab:ef:fb:66:8a:8e:
c8:1c:e9:99:d3:0f:5e:a0:63:0d:e4:91:bb:f4:b3:
de:be:3f:40:94:da:9f:a0:9c:40:81:0c:6d:f2:02:
a1:f1:e5:5d:bf:d0:7f:0e:f9:6a:f6:6f:f2:0a:46:
73:49:7d:aa:60:52:1b:a4:5f:9f:0a:66:70:11:41:
a4:d2:51:ad:89:13:47:b7:2f:fc:c7:e4:0d:01:79:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:54:61:10:02:F4:54:E8:80:0E:85:3D:40:91:33:29:A6:3E:9A
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:ee:d4:c3:d0:14:cb:17:c5:8a:d8:ee:af:c0:ce:ef:64:
94:59:07:60:1a:45:99:5d:b1:7c:d5:ba:3d:2f:99:34:0d:4f:
e7:b3:6a:72:0a:81:7d:bd:ba:50:ec:dc:e4:35:0c:d6:51:f5:
63:e8:e7:c1:5c:35:cb:d0:95:7c:0a:ee:fe:f9:f7:51:d7:99:
e0:6d:26:4c:43:44:82:49:c3:c1:ed:79:fa:f6:a8:47:9b:30:
1f:ee:75:6f:50:d8:94:9a:59:ad:f7:44:68:41:f5:81:29:83:
96:a5:b0:dd:ae:36:34:6a:af:87:f4:87:27:39:e5:f4:bb:80:
19:34:9b:80:36:c8:8a:4a:1e:c5:a4:f4:b5:c2:86:78:92:70:
cf:f7:3d:77:36:ed:30:23:d7:db:76:2d:25:46:08:d1:be:c8:
ae:d3:51:df:20:aa:7f:53:94:9f:dc:8b:36:39:22:9a:ca:b5:
6b:81:c4:c0:de:42:9a:b0:59:f6:40:0f:03:56:aa:16:0c:c2:
fb:cb:c3:86:b2:d1:cc:23:b2:b5:d4:ca:11:58:32:ab:0f:5a:
7e:7b:56:b7:7e:69:b3:87:57:31:c9:be:a0:73:3b:e7:64:de:
81:07:f4:64:4b:50:94:57:de:82:0f:f5:34:83:f1:85:81:a1:
83:1c:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:09 2026 by rpki-client