Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier: aNe/8FOUMLYWBSmdPAdAIDMz+D98WBfC1hjnm/glTAM=
Subject key identifier: D6:18:A8:03:5C:4E:81:77:E9:17:E1:4B:04:8E:2B:C9:D1:90:53:4D
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer: /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial: 019FA786DC92D823C47EE1DEAA4E30A050E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 07:01:00 +0000
Manifest this update: Tue 28 Jul 2026 07:01:00 +0000
Manifest next update: Wed 29 Jul 2026 07:01:00 +0000
Files and hashes: 1: 4Af87rg4Bx7SgQQ5MxEN8mZ2YrY.asa (hash: Kzv9NX9qtlVE38MFIIf9pptzKBSLZ3APX1zKA5bjFE8=)
2: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: VHYp3xFnBU1AMnuJ4dyX9U1QCR9dbh3SyQPyJ4uANbs=)
3: TC9K931IzwUdFmAUvzTbFXIZADA.roa (hash: UXVxdmIaXGeZhlCpGUNMtQmCisj0HfLJfUz0lrC+bHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:dc:92:d8:23:c4:7e:e1:de:aa:4e:30:a0:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Validity
Not Before: Jul 28 07:01:00 2026 GMT
Not After : Jul 29 07:01:00 2026 GMT
Subject: CN=d618a8035c4e8177e917e14b048e2bc9d190534d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:b5:f7:7e:3c:c7:32:33:87:e9:b9:b5:05:
73:89:75:9c:e3:8a:fa:02:76:cb:02:a0:8e:fa:6d:
3f:a0:86:31:91:12:d7:aa:e4:c4:e3:04:18:54:43:
b1:80:7a:9c:12:56:a1:ec:ad:09:4f:f0:e8:24:9c:
09:18:55:3f:b0:2c:03:07:98:e0:ec:f5:1f:71:4c:
8c:08:53:4a:1b:4c:bf:d3:4b:0c:4a:62:68:2c:50:
01:30:c0:d6:1b:33:d1:c5:2e:8c:59:c5:72:60:b0:
47:e8:b8:f5:11:67:de:dd:1f:08:77:9e:9f:ba:89:
bc:33:aa:38:b9:de:8b:da:a9:32:9d:f2:97:52:7a:
b1:b1:b3:98:e9:75:c8:64:3e:75:80:40:ce:96:59:
2b:3c:f0:55:e1:ec:d0:53:b7:90:4e:58:8b:f8:79:
d3:96:3f:2a:6a:7c:0f:45:b8:40:f8:9e:33:fc:66:
21:f5:78:10:b7:b8:d9:f1:d2:a1:72:64:1a:58:74:
46:d9:45:9d:3f:1d:8a:b1:06:4d:26:55:fc:fa:a4:
bf:23:fa:c6:61:53:bd:c4:fd:38:0e:44:df:8e:25:
40:69:50:7d:93:b0:20:3d:a6:05:0d:19:50:58:7e:
34:81:4e:d7:1a:0e:6e:79:5d:f5:ee:e5:15:7e:00:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:A8:03:5C:4E:81:77:E9:17:E1:4B:04:8E:2B:C9:D1:90:53:4D
X509v3 Authority Key Identifier:
keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:de:e7:59:eb:b4:61:8a:3a:dc:92:ec:fe:1f:34:ba:4a:
13:88:59:b8:f8:3b:c0:f7:e2:ab:10:2a:43:85:2f:aa:f2:2c:
af:99:50:21:32:7e:6b:13:21:a1:bc:02:2e:66:0a:ec:34:d7:
56:f8:3f:2e:8c:2c:07:f3:48:66:3e:ea:87:66:91:8b:e1:79:
3d:6e:b3:13:9f:05:95:fb:70:2d:87:80:7e:aa:29:5b:b6:74:
b6:33:30:52:53:81:88:c0:9d:c3:01:3d:d1:3c:8a:9e:5d:f1:
72:a2:af:a5:e5:97:46:e1:ae:a9:dd:59:00:9f:db:81:d1:9d:
b1:41:6c:d7:04:49:e6:a6:3c:6e:54:e7:01:63:42:c8:c8:0d:
fb:eb:8a:96:7e:6c:0b:c3:d1:a5:89:70:6a:6a:8d:8a:d7:1b:
17:64:38:b7:b7:39:2d:0d:12:47:05:0e:f4:41:40:0c:ed:12:
93:63:83:72:28:16:b3:3e:89:65:a3:b9:37:72:4a:9c:6d:9b:
64:4e:85:d1:0f:e9:f3:92:a3:ce:1e:54:34:7d:94:00:06:f2:
64:ee:f0:f7:91:af:07:dd:66:f5:89:e9:ab:5c:5d:51:b6:57:
5f:37:d1:7a:61:1d:55:3e:e9:98:21:b9:80:63:ef:a7:ff:7d:
5c:e7:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:36 2026 by rpki-client