Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: t4o50cpxSFVjl21E0QJjqyEAFQkbmmMPq4pqEOV9mx8=
Subject key identifier: D4:95:CF:63:A5:87:10:1C:B5:77:84:D2:31:8B:8E:4A:A5:EB:32:13
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019FA9AB8AD2CD62006D40C78BA9E8188D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:19 +0000
Manifest this update: Tue 28 Jul 2026 17:00:19 +0000
Manifest next update: Wed 29 Jul 2026 17:00:19 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: bQ2h7tlQRy3Yt+k6cFqkmw8YzlYRa88rzrEADx33wTA=)
2: ESyG_uYtG5IcanDmyfXRMGONZ1Y.roa (hash: R7QxOEza/Zy8vZPkOSk/PHJrwRu23ZaevpUcd1rTXKk=)
3: sXZEyLDztNjM23Z0NfTDSffhRV4.roa (hash: j1ThO6JX0t+4KZGC5ITUDqv+a2GExzOx5SfNMj5dHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:8a:d2:cd:62:00:6d:40:c7:8b:a9:e8:18:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Jul 28 17:00:19 2026 GMT
Not After : Jul 29 17:00:19 2026 GMT
Subject: CN=d495cf63a587101cb57784d2318b8e4aa5eb3213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:41:be:5d:7b:f4:95:dc:d7:eb:ac:c1:f2:
86:4d:ac:7c:62:bd:24:40:62:f2:b6:db:1e:2f:5f:
81:70:06:f4:1c:8c:a1:b7:ff:e7:f7:d2:cb:3d:74:
16:7b:55:ff:77:3d:89:a7:1a:2e:3e:c5:8a:7c:c2:
92:5b:94:a2:15:e5:90:16:cc:62:ed:3b:2c:b2:50:
62:60:f5:bf:81:78:86:f5:fe:08:e5:dd:85:f5:00:
56:fb:ed:69:cc:bb:e7:d7:6a:53:91:42:f2:96:3b:
ac:54:bc:6b:00:08:b4:c2:e6:dd:53:f1:41:cd:da:
ea:01:fa:74:74:0a:de:29:02:3f:78:2e:b5:6a:82:
c0:6f:33:6d:95:45:70:ad:a3:94:b8:b0:a1:75:99:
28:cb:3b:7b:d1:7d:eb:49:e0:bb:ed:0e:60:5b:a7:
95:ca:ac:8d:3a:68:27:ec:38:21:c2:f6:36:69:fe:
e1:54:b8:08:66:03:9e:2f:fa:9a:30:76:ce:a7:18:
77:75:34:40:39:8e:38:3f:82:08:81:7a:dd:c7:68:
77:62:39:d0:6d:80:85:1a:53:91:a5:c6:24:fb:99:
b2:50:f7:aa:ca:84:66:7c:11:88:27:a3:88:73:44:
0e:39:42:64:21:93:8c:bd:41:a9:ae:4c:c1:64:81:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:95:CF:63:A5:87:10:1C:B5:77:84:D2:31:8B:8E:4A:A5:EB:32:13
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:50:c0:24:05:9c:5c:23:3a:14:db:e6:6c:8f:69:3e:52:
d9:82:4f:a3:ce:08:8d:69:69:24:77:42:27:f1:dd:dc:e3:de:
e7:f7:7e:18:b6:c8:f2:36:8d:bf:e8:05:a9:6d:71:96:54:7d:
37:43:ab:c3:ca:a5:35:60:26:17:3b:3b:26:15:f6:23:98:38:
82:43:5b:df:0b:e9:46:2a:9c:77:30:d2:0d:15:b3:26:3c:de:
d9:f1:9c:7f:10:10:2e:c1:a7:1f:3c:88:cb:b6:6b:2f:84:21:
e8:bb:56:3a:eb:fd:07:82:b0:09:be:5a:b1:4d:44:d4:d7:1e:
93:af:e9:0f:fb:f0:6c:ca:fd:c4:fa:90:16:5b:b5:f2:71:3a:
90:09:17:3e:d3:70:1b:d8:26:b3:4d:49:e2:70:fa:6d:6f:d8:
91:4a:ac:32:5b:b6:cb:05:68:0e:6f:30:ef:89:6b:cc:8e:70:
ed:e5:8e:09:28:62:0b:34:c8:f4:43:09:81:69:2f:c9:57:ac:
ff:3d:33:9d:dc:77:87:3e:df:62:4a:b5:3b:7f:79:e5:01:a8:
4f:72:6a:42:fb:f9:43:e6:cc:82:85:67:16:ef:09:4d:51:a0:
9b:d5:ab:61:2a:5f:34:29:86:59:24:69:9c:47:75:68:81:98:
0d:0e:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:00 2026 by rpki-client