Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: ICEBUf+4RpwNXqjqMZjp+jzA107xoxHXd2STfnyRcpM=
Subject key identifier: CA:1B:8F:33:33:9D:E8:0C:46:CF:E7:20:FA:46:86:F5:E7:92:5F:DD
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019FAABEC684801A18E08B5731C09BD5CEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 19F7
Signing time: Tue 28 Jul 2026 22:00:57 +0000
Manifest this update: Tue 28 Jul 2026 22:00:57 +0000
Manifest next update: Wed 29 Jul 2026 22:00:57 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: mgnUz5NaFdXWf2fztPBovCaJQRZEWQmWpavfzjXgDrg=)
2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
3: I_3jehdl5ph6naOcsERKtRM4rOg.roa (hash: 67rWYEzucKkbcxuazVYk/T4DnXTcgL86L7mCqKUkfKQ=)
4: My2S5v6l75VknZ7EL2SiBdNBLt4.roa (hash: wEWt/qGUMsqIgdXHGGUBkhiVR/ctPqLfFTDFv5pXXM0=)
5: Q185qBCTAslf97Rog3SUyG95EBo.roa (hash: +jTEwCGDvqQHKcWHrPwBJB6gQVTArNQuwOaaAn3R7Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:c6:84:80:1a:18:e0:8b:57:31:c0:9b:d5:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jul 28 22:00:57 2026 GMT
Not After : Jul 29 22:00:57 2026 GMT
Subject: CN=ca1b8f33339de80c46cfe720fa4686f5e7925fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:af:99:fd:17:78:0d:b4:c6:d5:ec:3c:0d:
2b:91:bf:bc:95:3a:d8:8b:48:4a:12:c2:a7:fc:4c:
28:bf:14:68:9f:24:95:39:e2:d2:bb:59:46:e4:4a:
f6:37:35:9e:dc:42:13:66:a1:53:51:ac:d1:2e:de:
e3:fb:42:91:d8:04:ea:6b:09:25:6a:d7:96:95:06:
10:ae:ff:35:6f:21:51:77:83:2f:58:40:dd:77:a2:
6b:cc:f0:47:38:30:8f:85:b8:4f:2b:35:0b:0c:45:
0e:a8:b8:43:75:cc:a9:e7:3e:7d:b4:ff:ad:2e:32:
9c:db:c9:60:c5:2f:a0:01:d4:02:b4:49:7d:4e:78:
32:d8:21:1e:3f:a3:41:45:b7:42:56:ef:2e:73:27:
0e:31:fe:20:65:5e:25:e9:ea:f6:08:ba:4c:ae:2d:
5e:7b:d6:87:f0:44:3a:5d:1f:6d:5c:b0:0c:c8:a9:
91:19:c3:f6:e3:be:52:f1:cb:22:16:d2:9b:85:a4:
89:3f:71:e2:97:d2:a3:e8:5f:6a:f8:04:d1:3f:31:
d7:88:9f:59:79:e6:65:a2:e7:7a:17:37:c9:81:a9:
b8:d4:9f:bc:97:3d:3b:5a:72:1c:86:00:77:46:ca:
51:7d:83:68:52:24:d6:2e:15:52:8e:73:9e:e9:3d:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:8F:33:33:9D:E8:0C:46:CF:E7:20:FA:46:86:F5:E7:92:5F:DD
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:f4:ae:74:28:58:57:1e:47:cc:81:45:30:4f:f5:b8:9c:
06:fd:ff:c8:5a:d1:f6:5c:c1:92:11:6f:36:6c:27:20:34:a6:
9d:39:ab:e1:72:5b:64:5a:c5:01:80:0e:37:47:bc:86:4e:d8:
cb:7f:0f:f0:18:aa:f1:35:5f:ef:2d:95:2c:ed:71:ae:a6:ba:
c5:9c:15:8d:79:4b:ed:3d:b0:ff:fb:e8:15:90:99:d8:a1:e0:
9b:d3:b0:18:f0:fc:be:39:3c:05:f1:33:4d:42:31:45:a3:24:
91:72:99:5d:d2:2a:18:a6:a3:c8:dd:74:85:35:e6:e7:e0:0b:
4e:40:17:49:a8:6c:17:e0:04:52:86:68:d1:2f:4e:21:79:29:
c5:59:68:44:b7:d5:2f:b1:f7:89:9f:c3:6a:69:ea:f0:7f:92:
92:d4:1a:d7:bf:7c:ff:59:1a:62:15:82:ef:76:11:57:f8:7a:
8a:ce:7c:18:a2:ff:9a:98:14:e1:f2:0b:93:ca:40:73:50:9b:
84:1a:79:8e:f1:6d:9e:52:da:2a:ff:c8:c9:14:82:23:ab:37:
9d:28:5a:0b:9c:ff:ba:6d:d6:11:93:40:9e:40:b0:86:45:02:
ee:f4:67:98:5b:66:92:9a:6b:8d:e9:8b:82:01:69:1a:39:01:
fc:d2:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:51 2026 by rpki-client