Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
File: bE6tk3_29mwLFfItDUn5N243154.mft (raw, json)
Hash identifier: LNc/3W/NPB1OKtnZ3Dt5YE6xagXjHwq0SLvfjl7xEAI=
Subject key identifier: 5C:8D:7B:01:B0:CF:A7:7C:D4:D6:FA:B2:D4:D3:54:9E:A3:3F:C1:33
Authority key identifier: 6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
Certificate issuer: /CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Certificate serial: 019FA7F41A654D31B242722CC27BD88B9FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
Manifest number: 36
Signing time: Tue 28 Jul 2026 09:00:20 +0000
Manifest this update: Tue 28 Jul 2026 09:00:20 +0000
Manifest next update: Wed 29 Jul 2026 09:00:20 +0000
Files and hashes: 1: HtXE6o5gyDE8p-LeGfVTGKS-HFg.roa (hash: TRqFmFDs3cFEdD+j1MIH3IwsMTCX5wrTHYLogmPYGvU=)
2: bE6tk3_29mwLFfItDUn5N243154.crl (hash: FIsqSNFaHLDaIo52UwZZoSmGrpzDtR23/IEuwoP2M/A=)
3: vTlhAenRPSZUNMMxyWS0DXwQ5N8.asa (hash: PklvSNrA+pjY5wXK2t56S6nxPO2i6UZMi9BUxQ6a3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:1a:65:4d:31:b2:42:72:2c:c2:7b:d8:8b:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4ead937ff6f66c0b15f22d0d49f9376e37d79e
Validity
Not Before: Jul 28 09:00:20 2026 GMT
Not After : Jul 29 09:00:20 2026 GMT
Subject: CN=5c8d7b01b0cfa77cd4d6fab2d4d3549ea33fc133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:3d:f8:64:91:fd:63:d8:12:18:1d:41:7c:
3a:3c:3b:76:34:94:4f:aa:44:d8:cc:72:22:95:95:
a7:93:48:c8:24:5b:d5:20:c8:7d:7f:84:6b:26:43:
21:7b:1a:1f:f9:00:07:92:6d:dc:f4:44:fa:bb:ad:
ac:71:6f:6b:b2:75:5c:98:fb:40:74:60:34:37:8c:
14:28:3a:d3:31:65:f9:17:75:78:bf:3c:96:9c:c6:
49:d7:ec:60:d3:15:98:4d:b9:39:04:3b:1b:e9:30:
7f:84:65:04:56:b2:c8:38:38:76:98:ec:5e:ce:54:
97:cd:50:74:23:28:1f:ef:79:a4:80:8b:90:2c:50:
09:e6:6c:bd:f8:b2:a6:be:8e:6d:d0:8c:ef:c4:02:
a6:d8:50:04:69:97:e1:09:18:45:a0:7b:b7:10:d8:
ad:a8:c1:f9:43:1a:9f:75:63:d9:39:85:98:06:e0:
21:3f:ce:30:cb:a0:7e:58:ef:e2:f3:eb:58:95:bd:
a0:57:4f:3c:a4:04:a7:b4:c7:0e:68:2e:11:9d:08:
4a:86:99:78:f6:b1:00:1e:a7:b5:8a:3d:86:75:5a:
9c:6d:c4:e5:06:c9:c3:a6:e1:f7:2e:61:67:cd:0f:
1a:f5:18:e2:18:db:cf:9a:72:61:6f:f5:86:43:d7:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:7B:01:B0:CF:A7:7C:D4:D6:FA:B2:D4:D3:54:9E:A3:3F:C1:33
X509v3 Authority Key Identifier:
keyid:6C:4E:AD:93:7F:F6:F6:6C:0B:15:F2:2D:0D:49:F9:37:6E:37:D7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE6tk3_29mwLFfItDUn5N243154.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a1f06d-aee2-4057-b875-153a5f3fc33b/1/bE6tk3_29mwLFfItDUn5N243154.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:58:40:92:57:79:e9:aa:07:1a:20:e8:d3:03:23:43:ca:f2:
e4:5f:81:bc:d1:ab:e4:51:67:60:3a:64:9b:99:1b:a7:6c:61:
0b:f7:28:65:4c:83:42:ab:8b:2a:d4:1a:89:2a:1f:02:ef:17:
9d:4f:66:f5:6a:8c:a8:b5:85:d2:f2:7d:11:1b:78:d8:3f:ad:
c0:50:66:63:56:02:b5:e2:0a:1d:4a:68:18:30:ba:68:c0:cd:
f8:e1:a2:13:db:8a:1a:40:91:69:a7:49:1f:4c:c9:d3:a6:c5:
ec:b5:eb:97:c7:50:39:c1:54:c1:50:7b:f5:8a:70:11:ba:d9:
cb:1b:32:bc:be:63:2e:30:27:6f:40:20:ce:3a:6c:69:8f:38:
fd:5b:a3:de:85:64:93:05:1b:46:c2:95:cc:42:80:10:8d:10:
3c:ab:ea:70:5a:66:1d:a8:c1:aa:f6:d9:96:ff:ab:fc:10:01:
1e:77:87:b8:64:bf:0a:ce:8b:c7:70:f4:d6:66:84:a9:18:04:
db:f2:e9:bc:15:b5:03:79:5e:f8:87:36:34:d1:b3:1e:67:93:
f5:7e:30:5d:56:71:73:ae:ef:6b:a5:c6:8c:2c:15:c6:ed:3a:
79:c3:d1:f2:e4:a4:72:aa:38:6c:d2:53:27:b8:d1:bf:4c:3b:
16:40:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:03 2026 by rpki-client