Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
File: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft (raw, json)
Hash identifier: tki1kGYBEuoj4+t+S9XdJTMP1dO7oKdC4DRRRA+Ldbg=
Subject key identifier: E8:D1:D6:DC:51:71:3A:E6:29:96:89:0F:8B:C6:2E:6D:9A:54:EE:BB
Authority key identifier: E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
Certificate issuer: /CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Certificate serial: 019FAA1A2CF4C2667FF41BB96D0E11626E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
Manifest number: 0F33
Signing time: Tue 28 Jul 2026 19:01:09 +0000
Manifest this update: Tue 28 Jul 2026 19:01:09 +0000
Manifest next update: Wed 29 Jul 2026 19:01:09 +0000
Files and hashes: 1: 6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl (hash: N1YADepDB10v+AzkpfN/RyQiRtju3iAjg6k+TV3BLxA=)
2: m26SchsQ_1UhkfbeCxw77FeJXCA.roa (hash: mdGSAQzmIJX1JB/CEMcZP3KjJ01KoAYsX4zgkL5y148=)
3: q_u69U7c2vxaq4Nl1v5Yc1MyuWg.roa (hash: 5dnA+LcITpNkdUu4xKxisyKSU227fPcdS2OGxJGeL28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:2c:f4:c2:66:7f:f4:1b:b9:6d:0e:11:62:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f272b13c750143c7ec87e0c802aead8ac6e07
Validity
Not Before: Jul 28 19:01:09 2026 GMT
Not After : Jul 29 19:01:09 2026 GMT
Subject: CN=e8d1d6dc51713ae62996890f8bc62e6d9a54eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:a0:9a:43:37:e3:b6:bf:6e:d8:b0:75:1b:
6b:73:f0:03:8e:0d:1b:31:4e:13:34:21:c5:e4:57:
3e:c3:e7:48:7e:b5:59:64:77:b0:b1:df:79:62:b3:
30:39:79:03:87:c5:12:63:6f:7f:0c:1e:01:7c:a5:
83:ca:6d:a9:de:ed:36:91:31:1e:bc:d1:8e:ca:15:
4a:47:cd:1f:0e:9d:e2:71:ee:05:4a:ed:05:70:f4:
ef:58:5b:e0:03:17:d8:cc:16:1a:59:9e:b2:7c:3e:
d6:52:d5:47:47:06:6f:50:43:be:70:aa:0c:c4:1d:
7c:c8:63:43:ac:6f:f9:a2:3a:e5:2b:56:11:ad:6b:
22:90:9c:ba:f0:5c:fe:da:fe:ed:f4:3b:d4:25:b6:
83:11:91:67:10:8d:e6:3e:6e:54:7d:28:3d:90:bc:
98:9a:09:66:63:01:f0:ae:c2:12:27:10:9d:d4:9a:
af:38:bd:e6:52:14:04:bc:b1:50:83:1f:8f:8d:ed:
ff:58:28:9b:d2:f2:59:75:8d:d7:44:61:2f:95:77:
31:1c:c6:3d:14:08:ca:15:d2:6e:1e:58:86:70:75:
b8:c4:1f:c9:1c:34:59:5f:3d:cf:49:fe:d4:a1:38:
66:d3:f1:49:5b:9e:91:6c:4a:b4:55:46:f3:f8:3c:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:D6:DC:51:71:3A:E6:29:96:89:0F:8B:C6:2E:6D:9A:54:EE:BB
X509v3 Authority Key Identifier:
keyid:E9:1F:27:2B:13:C7:50:14:3C:7E:C8:7E:0C:80:2A:EA:D8:AC:6E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R8nKxPHUBQ8fsh-DIAq6tisbgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d62d22-82f2-4b20-bac4-601a725a00f5/1/6R8nKxPHUBQ8fsh-DIAq6tisbgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1c:0d:53:7c:55:01:ad:e5:b9:e8:0c:d2:de:2a:35:bb:39:
03:d3:56:b3:fa:d5:6e:e6:9a:e3:76:46:ad:db:73:c1:35:43:
2b:be:bb:0d:e8:fe:63:fc:12:27:52:0e:dc:30:f7:d2:c5:b7:
79:40:81:1b:3a:73:bc:33:37:a8:19:d4:73:5f:52:41:17:02:
47:8a:1b:95:6a:c8:32:db:63:74:74:05:00:d1:09:39:02:67:
12:4f:27:61:b6:ac:b6:1e:4d:5e:41:c9:ce:ff:7b:62:1c:78:
38:ce:e4:bd:89:af:bb:0e:a8:50:13:10:b9:a0:a5:21:1a:49:
cf:85:a4:1d:ef:19:24:1b:b8:fa:12:29:6c:cd:d0:01:2b:86:
fc:39:c3:7f:31:c0:2c:56:2c:bf:0a:26:d6:11:81:8d:25:67:
39:2d:88:94:bb:59:7b:8a:55:01:89:44:a5:b8:d9:46:d4:6a:
96:eb:b9:68:56:48:23:d7:52:a9:53:a8:cc:0e:c1:67:ee:6f:
85:78:aa:ae:c8:b3:33:55:49:80:7c:af:01:31:45:e4:df:e7:
fb:bd:a2:08:a2:aa:7a:fc:b7:a5:5c:f2:c8:74:6a:12:f6:0a:
13:33:88:d6:1d:08:1f:4b:dd:22:4c:a1:58:77:36:7b:68:9b:
56:b1:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:41 2026 by rpki-client