Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: AghV3pGjQQWdjn7Ou7NhkG224vgpzXA9Ludo4bzGJyA=
Subject key identifier: 38:9B:26:61:25:31:C0:3C:46:25:62:76:D9:E9:74:AB:3F:C1:3E:8D
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019FA8D08DD535135DF2F2A0EA052D869441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 043D
Signing time: Tue 28 Jul 2026 13:01:07 +0000
Manifest this update: Tue 28 Jul 2026 13:01:07 +0000
Manifest next update: Wed 29 Jul 2026 13:01:07 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: OzTmcvgdoxczd8mBaC4FL/F8ojWLhADCZajTK+pQb4A=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:8d:d5:35:13:5d:f2:f2:a0:ea:05:2d:86:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Jul 28 13:01:07 2026 GMT
Not After : Jul 29 13:01:07 2026 GMT
Subject: CN=389b26612531c03c46256276d9e974ab3fc13e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:4c:de:db:52:b4:c5:9e:9d:2e:36:ec:6d:
7b:b4:80:89:3e:b2:8a:a4:6e:d2:b2:94:14:e2:82:
84:d1:31:8b:4d:bf:8e:eb:e3:18:e9:75:c3:30:b7:
00:4a:09:df:d8:ad:b6:3a:a8:91:eb:1c:68:47:52:
2c:c1:44:cc:8f:8c:a1:80:b1:3b:fe:db:f6:b9:e2:
d1:d5:de:76:db:8c:46:c7:ec:95:b0:73:1b:bb:8b:
a0:c7:b6:9a:d4:28:2f:03:fc:8d:02:b5:0f:f4:e9:
75:08:8c:2d:94:8e:90:be:61:c2:a2:69:7b:45:ad:
d3:04:b5:a9:43:0e:e0:84:5d:ea:ba:16:e2:83:c0:
98:34:54:c8:8b:37:61:d0:71:65:4d:52:d3:90:cd:
04:78:ce:c1:76:03:cb:4b:55:ca:e9:5b:b2:2a:eb:
9c:78:76:66:59:72:10:55:af:f4:41:77:3a:8d:ce:
fc:e2:44:56:fa:05:77:d4:65:0b:80:27:f5:2d:03:
2d:1e:dd:81:11:c9:9a:cc:f4:1b:17:e1:23:f3:e2:
dd:51:66:59:a8:38:23:0c:48:1e:19:93:05:4e:21:
87:5d:cf:f1:c7:a9:5e:56:aa:b9:93:6b:03:9d:d4:
15:d2:7c:05:de:d3:54:63:ff:7b:42:b4:07:7c:7d:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:26:61:25:31:C0:3C:46:25:62:76:D9:E9:74:AB:3F:C1:3E:8D
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:9d:7b:c9:9e:b8:43:92:af:5e:ac:b4:7d:50:3b:2b:58:
86:a8:b9:2d:4e:12:c2:8f:05:31:12:6c:cb:0f:a3:f2:67:36:
1b:ba:4e:11:08:bb:4b:2b:aa:3b:8b:f4:8a:21:5b:89:bc:ff:
b9:fb:ad:2d:25:63:0b:8e:9f:e4:a2:5e:ef:1d:0b:f4:3d:7c:
5a:f3:30:81:63:36:b6:ec:b5:5c:27:d1:72:7a:d5:c8:92:0b:
db:cd:fb:d8:be:ea:3f:fa:32:91:44:ba:86:dd:72:46:f5:8c:
e4:b7:07:8d:31:fe:a1:b9:d6:c6:a7:f0:e4:47:00:c8:b2:a1:
c7:45:3e:fa:07:90:d3:72:7e:8d:01:74:12:dd:a6:6a:9e:43:
13:8a:e5:cf:c9:d8:a8:b4:98:d2:15:41:be:8c:c3:b9:4d:da:
b4:74:e5:95:a4:e7:52:f9:1a:fc:27:09:2f:23:bf:68:a3:b7:
9e:57:3f:96:bb:2e:6d:88:3b:9a:1c:fd:33:dd:ef:e6:0b:ba:
c1:71:a0:34:4a:f1:9c:33:d9:f4:bb:0f:42:33:30:51:7b:8d:
09:fd:2e:ac:1f:ab:e6:7d:86:78:3c:86:ba:96:70:50:f3:ad:
b8:55:78:04:9d:a2:c6:cc:2c:8e:41:0b:ad:50:29:e5:15:31:
e6:a1:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:43:48 2026 by rpki-client