
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: k8yDbLV6eb03HkyQ1sqvLg/aCmTF7wgtAXhTdeRoFks=
Subject key identifier: A3:15:B9:CF:4C:36:17:C0:AF:28:23:51:9B:92:7E:AA:45:8A:6F:52
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019FAAF52C011A614045D5FD899988AE8513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0284
Signing time: Tue 28 Jul 2026 23:00:21 +0000
Manifest this update: Tue 28 Jul 2026 23:00:21 +0000
Manifest next update: Wed 29 Jul 2026 23:00:21 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: XAk0JR+sqepaI++FPcwJ7mTyjHGfgbrCwwpyUDCUMnw=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:2c:01:1a:61:40:45:d5:fd:89:99:88:ae:85:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Jul 28 23:00:21 2026 GMT
Not After : Jul 29 23:00:21 2026 GMT
Subject: CN=a315b9cf4c3617c0af2823519b927eaa458a6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:56:87:ca:de:35:19:59:86:fb:0a:46:59:
90:e0:e0:30:26:73:84:16:26:7d:79:1a:4e:48:e2:
70:bc:38:31:e5:72:ad:70:ef:21:25:97:69:5d:d7:
bb:41:c1:9a:e1:b7:ff:9b:82:5a:c1:6f:ad:a9:d8:
31:51:cb:b9:6f:15:20:e5:4f:0f:00:38:b0:56:72:
53:75:75:b3:4b:d4:ce:6e:26:02:4a:52:f8:e8:82:
38:bb:71:7e:39:d9:df:3b:e2:7b:63:ad:87:d5:68:
ac:45:33:30:99:80:2f:68:63:7f:92:03:fd:10:aa:
e9:9a:30:43:fd:4c:29:b5:48:f1:c3:b4:e7:47:7e:
f9:c2:a2:70:c6:40:0a:63:5c:13:c9:46:f5:f1:a6:
52:1f:e5:95:6e:0f:71:29:14:26:16:f3:36:08:f1:
8f:41:66:2c:b6:13:f7:29:50:17:6e:64:d8:7a:26:
81:11:fb:0e:c9:18:b1:04:c9:59:cb:b6:2f:16:86:
10:ea:6c:51:01:b0:33:e2:83:92:5f:4e:6d:57:fb:
e0:49:d9:cd:fd:6b:57:b5:03:db:a5:89:7b:dd:47:
80:40:e5:ec:c6:ad:d1:56:4f:2e:8c:9a:5b:94:fb:
b1:46:28:20:d8:fc:68:58:83:87:f9:d4:13:e4:ba:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:15:B9:CF:4C:36:17:C0:AF:28:23:51:9B:92:7E:AA:45:8A:6F:52
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3f:97:f7:dd:60:45:d9:9f:c1:c9:4e:f2:65:2e:fc:26:95:
e7:88:b2:69:49:db:d7:9f:07:1e:e9:1d:6f:77:d1:1b:73:3a:
85:60:22:fa:d0:51:8d:46:dc:c8:c7:79:a8:f7:54:9f:c1:ef:
1a:bc:5b:96:b4:02:26:7e:54:1f:fa:0e:d8:57:e6:b4:ad:06:
a3:1d:2e:cb:2e:01:52:97:8f:7e:41:e0:ca:94:70:0a:ba:4d:
7c:97:f6:03:f1:c3:95:4a:35:1f:75:9e:74:d8:b6:e2:03:45:
c1:8e:a7:e5:18:9c:eb:9a:f4:d9:cb:59:eb:80:9b:76:fb:12:
88:66:7f:fd:8b:ce:4e:cb:a8:85:0b:22:c1:b4:d5:8f:3a:95:
bc:88:88:de:b3:cf:4f:bf:e7:a4:3f:5b:2b:4d:e9:0e:5c:f5:
eb:62:12:81:a7:d7:30:25:c1:e9:10:d2:5b:ab:7c:33:9d:72:
c4:4a:66:ff:dd:5f:7e:98:16:f6:a9:ec:c0:24:96:cd:f1:5e:
dc:b2:ea:3a:e2:28:c9:e1:c9:02:79:ea:ea:5c:d3:b1:74:68:
0d:42:93:ae:a3:61:9f:35:8e:e9:57:56:79:5a:ec:ce:e4:93:
56:d0:f7:9b:d1:5b:e3:ba:e3:ed:f5:1f:a8:d5:60:94:7b:be:
ea:8e:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:49 2026 by rpki-client