Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: bkHSwpsH9dUY1yUqce7/mWyGb+yUTxDbBhXv0bY02qc=
Subject key identifier: 0D:79:D8:80:11:C2:B9:E1:13:63:77:A5:F4:82:EF:7E:45:14:2C:28
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019FA93DAE91F690F59040D2CA5317FB169D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0D2A
Signing time: Tue 28 Jul 2026 15:00:19 +0000
Manifest this update: Tue 28 Jul 2026 15:00:19 +0000
Manifest next update: Wed 29 Jul 2026 15:00:19 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: WSGoUjApL0R/6n8Z9dGKHVgCK2mHDplANs8NPvnNRdE=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ae:91:f6:90:f5:90:40:d2:ca:53:17:fb:16:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jul 28 15:00:19 2026 GMT
Not After : Jul 29 15:00:19 2026 GMT
Subject: CN=0d79d88011c2b9e1136377a5f482ef7e45142c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:45:9f:b5:b4:66:9e:8b:8b:8c:2b:9e:74:
e2:b4:ff:a6:e6:ca:25:ab:a6:d4:62:ab:ae:64:0c:
3c:06:c3:d2:5e:d9:fd:67:b4:37:d6:8a:87:95:03:
18:94:a1:3d:c3:b2:2c:f7:e3:b3:3b:86:61:05:5a:
9f:44:01:3f:e8:2d:ae:83:27:aa:57:d5:25:ab:d4:
7d:be:61:00:f5:33:67:5c:72:fc:98:c1:d3:0a:ab:
e3:3e:13:3f:f1:41:0a:01:1d:52:95:dd:b9:ab:55:
e4:02:b1:5a:80:06:03:3c:b0:83:43:33:dd:aa:98:
48:b1:ba:6e:4a:7b:e6:92:73:b7:68:a4:69:22:94:
cd:65:cf:91:92:ea:d9:3d:ec:f0:ab:73:c3:28:5f:
ca:a4:96:0a:a2:63:87:02:d9:3b:3f:56:d2:6b:85:
f7:38:54:74:36:55:28:63:b3:21:54:db:15:b6:dd:
28:e8:f9:d7:a3:4c:06:b7:47:e8:b3:20:31:9f:ea:
9a:00:a5:6c:7c:c3:b9:22:64:0c:26:e4:66:d4:db:
7e:63:10:3c:5f:03:60:7f:b3:37:0b:ab:6d:47:1a:
4f:68:00:c6:7a:3d:75:c1:9c:53:7c:ad:ad:39:71:
01:14:7f:8b:02:60:df:ad:7e:9f:d3:88:15:38:9e:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:D8:80:11:C2:B9:E1:13:63:77:A5:F4:82:EF:7E:45:14:2C:28
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:a6:54:00:dc:f5:b1:68:b5:7f:9d:4f:3b:91:ae:09:cb:
f1:a3:fb:f6:32:de:9b:c3:a1:3e:e6:58:46:7b:c4:09:4b:69:
ac:86:eb:f8:4e:fa:b7:c3:c8:d1:e3:ce:02:6d:55:88:b0:7c:
e3:90:8f:16:42:c6:bb:1a:00:31:9b:e1:db:6b:aa:5a:ea:64:
2d:e1:c7:7f:b4:9d:14:6e:06:c9:24:0a:db:82:79:85:05:54:
bb:10:a7:b5:01:78:95:64:88:80:d1:56:ab:77:1a:4f:b6:ab:
3f:fc:7d:50:1b:b7:af:57:12:4e:50:9e:b6:79:41:07:21:fc:
fe:65:1e:ec:d5:63:c1:6e:76:86:21:e4:5b:7c:cb:7f:e4:ad:
2f:ef:da:b8:1f:1d:ea:2d:64:38:a4:10:fb:eb:90:bc:b8:9c:
e3:6d:5f:46:e9:ab:9c:70:21:59:53:33:0c:8a:dd:3b:69:9e:
78:aa:67:75:de:31:42:a8:10:b4:9b:15:3e:78:a3:a7:8e:a9:
a7:05:95:ac:ef:01:10:af:b9:9d:30:ee:5d:01:e1:51:d8:dd:
30:b9:97:22:bf:7c:91:3c:4e:21:6d:5c:fa:6d:fa:3b:b2:41:
57:15:91:51:3e:a5:9b:3f:21:31:83:24:38:d2:5d:09:6a:0b:
bd:9a:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:50 2026 by rpki-client