Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier: HfUIsTWz/JYQSnLSNLqN16JIJW4+ezTYoniY2HmVRz8=
Subject key identifier: 52:D7:F9:7C:97:9A:FD:31:FA:4D:88:D5:E4:3B:63:DA:3F:84:0C:D8
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer: /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial: 019FA89983FEFA7D0CDD60DE011CE293F123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number: 17D0
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: MfxX53mHaTq9bVlWKh5coI8Ax7wZR0qoo+BnA7lj1VI=)
2: wEZCw-VLeU1jpA57GhD5o-3uPdI.roa (hash: 1vJM+R9B72RBGk03v5ie3GqXY2ZDTLcLKiRAG44iQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:83:fe:fa:7d:0c:dd:60:de:01:1c:e2:93:f1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=52d7f97c979afd31fa4d88d5e43b63da3f840cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:4b:73:3a:db:9a:df:69:7d:8f:a7:71:8f:
49:69:bc:04:40:ad:7c:e0:72:34:bb:26:7c:1c:01:
60:c2:af:43:3c:98:dd:6d:50:f1:48:92:dc:a7:51:
12:65:c5:91:4d:6b:e1:15:e5:5c:14:75:8f:c9:8e:
b1:17:ad:d8:cb:1f:77:4a:a1:28:d8:b7:76:77:8f:
22:da:42:12:c6:8f:d2:36:6b:23:5a:7b:a8:a7:52:
0b:e4:26:3c:81:50:5a:16:b2:0c:79:df:1b:cd:97:
ef:ba:ea:54:8f:a3:dc:96:84:74:62:ee:24:7a:24:
b1:ed:5b:8a:02:79:0f:90:7a:5d:c1:b9:2f:41:42:
91:43:4d:87:3d:3b:7b:c2:bd:22:4c:fc:d1:fe:26:
64:b0:74:ee:62:a6:11:46:41:83:4e:96:6b:cf:91:
38:41:e6:a9:43:b6:05:b5:86:8b:c5:0f:ce:e5:a4:
70:19:e4:82:cd:5d:91:ed:fa:9e:d7:55:ae:8f:0b:
b0:b9:48:72:40:57:ca:e0:b0:75:0a:13:71:7a:7e:
51:ff:c7:e1:05:20:45:16:2e:31:74:0b:5f:88:41:
68:ce:56:ec:88:58:89:e5:a5:98:98:a2:f7:4e:c1:
3a:99:dd:8a:eb:87:e8:1d:de:2a:75:7e:7c:dd:d2:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:F9:7C:97:9A:FD:31:FA:4D:88:D5:E4:3B:63:DA:3F:84:0C:D8
X509v3 Authority Key Identifier:
keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:7e:d7:b3:ac:df:9f:d6:fe:c6:14:3c:77:fd:1d:31:fa:
1a:84:c8:8b:c0:02:0b:d7:86:67:24:31:f4:b8:72:c7:ac:fa:
5d:74:42:77:11:9b:22:50:40:5b:93:cf:86:62:23:8d:b6:31:
31:1b:d7:4f:24:7f:70:72:50:f6:33:0d:66:ec:52:e1:57:da:
04:51:ca:13:16:eb:72:9c:c2:23:d2:16:65:db:5f:ac:63:15:
55:17:01:5b:72:b7:92:ec:ae:4d:57:2f:9c:1e:37:44:f4:20:
a9:59:48:5e:49:09:2d:e7:5f:69:fc:85:d7:dd:8c:3f:1f:59:
ee:bc:a1:2e:2a:07:1f:ed:7b:5b:08:63:f9:b8:f3:8f:58:3d:
3d:dd:17:81:06:58:8d:d6:b2:6c:a1:55:9e:64:86:37:00:2d:
a8:86:43:58:d4:89:3c:e5:a4:67:23:83:d5:8f:f5:d5:ed:3d:
d5:a6:b5:7a:55:2d:e2:73:7c:29:99:53:d9:61:b5:4f:c0:71:
22:57:05:3f:ed:6c:93:8c:0d:9a:b5:24:bf:bc:ce:f8:f8:f2:
1d:11:84:e5:b2:4d:f9:13:09:ee:9c:3b:75:47:95:1d:17:c5:
af:c6:5f:43:5c:0e:c9:4a:9c:c9:98:63:38:40:4f:14:50:d0:
b3:d5:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:27 2026 by rpki-client