Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: DylTVon7yf+NML6w8BWf0yicN5OO9WSeJAFBSXwZM9g=
Subject key identifier: B7:63:A4:BA:22:D1:8E:F1:D8:7B:8A:CB:29:F9:F4:A4:31:A6:E0:6F
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019FAB99DD81E6CD09CFF558D78EADDF5A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1818
Signing time: Wed 29 Jul 2026 02:00:15 +0000
Manifest this update: Wed 29 Jul 2026 02:00:15 +0000
Manifest next update: Thu 30 Jul 2026 02:00:15 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: VzxDA4kkv+5a8ZIKusTLd3Vfh620bVyZT7M94SUPBHE=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:dd:81:e6:cd:09:cf:f5:58:d7:8e:ad:df:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jul 29 02:00:15 2026 GMT
Not After : Jul 30 02:00:15 2026 GMT
Subject: CN=b763a4ba22d18ef1d87b8acb29f9f4a431a6e06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:8c:c9:27:61:fb:67:e4:4b:b1:b8:55:14:
62:ee:42:08:da:91:c5:24:59:f6:2f:56:9a:26:01:
8b:c2:4e:4d:bc:d6:c9:ed:df:ab:ce:f1:af:94:8e:
1d:99:3a:85:b0:37:f9:b1:8a:49:0c:76:b5:40:7f:
68:fd:d2:a7:27:81:cd:6c:a8:0a:8b:89:16:df:15:
18:8f:51:5f:8d:4b:35:d9:9d:15:c1:ba:0a:ac:4a:
4d:4f:c1:76:42:be:60:61:2c:0f:8b:6a:34:be:20:
09:53:66:b6:2a:44:82:c1:bd:dc:1b:94:c5:42:41:
5b:a5:24:d9:21:38:ee:3a:6a:bf:6d:77:37:1e:e4:
6d:74:e8:cc:27:d5:e2:ce:07:29:2d:ad:49:6f:91:
13:a1:8f:d6:33:ac:36:89:cc:60:1e:3d:45:70:17:
01:77:57:63:f9:9a:d5:18:07:83:05:79:ae:48:56:
e6:62:c9:b4:a3:28:1a:65:7a:e3:d2:8a:fe:64:07:
77:0d:e1:3d:33:98:54:f9:21:ab:f8:14:45:23:9d:
25:3b:74:20:83:c6:2f:c8:3a:12:3e:21:2f:26:8c:
17:1d:a0:02:eb:83:65:a0:d5:89:47:da:96:0b:da:
d8:82:bd:1d:66:75:38:15:4d:53:13:99:7f:a1:74:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:A4:BA:22:D1:8E:F1:D8:7B:8A:CB:29:F9:F4:A4:31:A6:E0:6F
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:7b:9c:87:9d:10:ea:cb:b0:69:77:fc:b7:09:0a:3d:ee:
6a:b6:40:14:6c:33:38:d9:8b:a4:80:ba:32:c4:55:58:39:f8:
d6:85:3c:bc:c8:4f:7a:ff:38:fd:1a:b6:cd:91:01:d2:1a:f2:
8b:78:06:1a:81:0b:10:64:be:9f:44:d9:83:61:ee:a7:78:42:
7f:f1:f3:41:79:7d:cd:7e:28:35:00:dc:2c:9e:72:cc:8d:43:
7c:8c:51:d7:a2:8d:43:26:0a:3e:23:33:6f:47:a8:bd:f8:48:
4f:ef:48:e2:97:e0:2c:1b:2c:22:af:3f:93:f5:1f:56:0d:f5:
fd:4b:01:e5:d5:9a:dd:93:9e:ac:80:ba:41:70:88:8f:41:17:
80:27:1e:89:9e:19:22:b0:37:80:21:cf:9b:08:5b:60:bc:9e:
1e:63:03:a8:76:4f:96:2e:a9:d0:5f:e7:2d:d6:19:8f:a0:22:
49:a3:b5:ca:96:1e:40:f6:98:00:66:b5:4a:52:c4:56:73:3d:
84:f1:37:a6:f5:27:d2:9b:22:16:91:42:37:16:1a:c7:ba:cb:
e4:9f:8c:c8:1f:a5:53:dd:66:b6:4e:42:c7:12:91:5d:aa:2e:
6d:fa:7c:62:21:ad:aa:23:71:94:33:95:fb:d7:ca:33:8a:da:
1f:39:6a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmd2B5s0Jz/VY146t31qaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli
M2FmZWYwHhcNMjYwNzI5MDIwMDE1WhcNMjYwNzMwMDIwMDE1WjAzMTEwLwYDVQQD
EyhiNzYzYTRiYTIyZDE4ZWYxZDg3YjhhY2IyOWY5ZjRhNDMxYTZlMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmuMySdh+2fkS7G4VRRi7kII2pHF
JFn2L1aaJgGLwk5NvNbJ7d+rzvGvlI4dmTqFsDf5sYpJDHa1QH9o/dKnJ4HNbKgK
i4kW3xUYj1FfjUs12Z0VwboKrEpNT8F2Qr5gYSwPi2o0viAJU2a2KkSCwb3cG5TF
QkFbpSTZITjuOmq/bXc3HuRtdOjMJ9XizgcpLa1Jb5EToY/WM6w2icxgHj1FcBcB
d1dj+ZrVGAeDBXmuSFbmYsm0oygaZXrj0or+ZAd3DeE9M5hU+SGr+BRFI50lO3Qg
g8YvyDoSPiEvJowXHaAC64NloNWJR9qWC9rYgr0dZnU4FU1TE5l/oXTcVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdjpLoi0Y7x2HuKyyn59KQxpuBvMB8GA1UdIwQY
MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt
MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0
LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblF7nIed
EOrLsGl3/LcJCj3uarZAFGwzONmLpIC6MsRVWDn41oU8vMhPev84/Rq2zZEB0hry
i3gGGoELEGS+n0TZg2Hup3hCf/HzQXl9zX4oNQDcLJ5yzI1DfIxR16KNQyYKPiMz
b0eovfhIT+9I4pfgLBssIq8/k/UfVg31/UsB5dWa3ZOerIC6QXCIj0EXgCceiZ4Z
IrA3gCHPmwhbYLyeHmMDqHZPli6p0F/nLdYZj6AiSaO1ypYeQPaYAGa1SlLEVnM9
hPE3pvUn0psiFpFCNxYax7rL5J+MyB+lU91mtk5CxxKRXaoubfp8YiGtqiNxlDOV
+9fKM4raHzlqiQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:50 2026 by rpki-client