Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: L9da/IgdCQiPNEbojzxdojN1FNZPTFK8k3GoaVgwH2w=
Subject key identifier: 7F:53:33:D0:DA:8A:48:2D:51:CE:CD:97:91:2E:2C:C2:01:74:48:45
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019FA9077F4E71B9DCDD6E8C135CEB05D888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 14:01:08 +0000
Manifest this update: Tue 28 Jul 2026 14:01:08 +0000
Manifest next update: Wed 29 Jul 2026 14:01:08 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: p1kxiPbqzjE4JaAj4a0MXephL2+FCtlUwc4S5Dga4n8=)
2: M2zIxC99QbRxfnET-6NXsK5UatI.roa (hash: rntTwdXiHDwjJTZclnHejjzBJUzAiOfJIRV0G//u/Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:7f:4e:71:b9:dc:dd:6e:8c:13:5c:eb:05:d8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Jul 28 14:01:08 2026 GMT
Not After : Jul 29 14:01:08 2026 GMT
Subject: CN=7f5333d0da8a482d51cecd97912e2cc201744845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:c0:73:32:ad:1e:8b:bd:46:db:96:16:57:
f9:f3:45:68:9a:f2:87:5b:3e:bc:9d:4d:fa:a3:bd:
52:b4:ab:7d:0a:45:46:92:66:5e:cb:d8:7d:ba:35:
e2:95:e2:e6:da:1c:a3:10:36:66:5e:96:47:31:b7:
db:ff:10:26:fa:d4:3c:c1:11:6e:af:7b:79:65:c1:
17:e3:f6:3c:cf:0b:10:5d:90:17:c7:7f:1f:11:39:
94:86:87:1f:a2:f0:d9:f5:df:1a:cc:95:94:bf:bc:
a3:52:2c:48:62:a3:b0:ca:a3:3a:c6:97:45:3f:48:
58:77:fa:77:a6:27:3e:22:39:87:90:43:f6:93:0f:
b4:8e:23:af:6f:26:37:8e:63:de:81:2c:95:0b:54:
1a:9d:ef:9c:57:d7:e1:cc:9a:8b:88:22:af:56:19:
fe:d8:bb:6b:fc:04:55:20:7a:21:d1:de:70:5e:23:
7e:46:4e:d7:7f:57:a0:df:c0:13:35:95:4b:04:e6:
2d:4a:6d:fa:1f:e9:5b:c9:8f:4d:ee:ce:2b:ae:4a:
88:fc:a7:4d:c6:75:d4:34:25:da:dd:6b:63:29:ef:
3a:cd:08:04:02:4e:7c:58:04:1a:ee:2f:d0:15:04:
b3:b1:5e:4e:7a:f6:fe:87:4e:32:5b:b2:40:d1:7c:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:53:33:D0:DA:8A:48:2D:51:CE:CD:97:91:2E:2C:C2:01:74:48:45
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:b5:e3:98:f0:90:70:5f:9c:62:6e:6a:58:ec:dc:18:3f:
92:7e:f1:54:c6:62:b0:ad:e5:40:3d:10:89:72:3b:d9:05:e9:
67:76:91:74:2d:d3:2c:64:71:40:05:d0:d1:e4:f8:b0:b3:de:
05:46:4b:29:49:43:d2:70:17:3b:5f:ad:37:df:3f:65:25:4e:
0a:94:9f:40:db:5c:f0:4a:a0:9d:2c:0a:a8:22:26:82:8f:69:
0f:0d:39:79:43:b0:b7:70:81:e0:f3:e0:9a:6e:48:e6:6a:cf:
ab:89:08:3c:a3:45:b4:ce:88:d8:82:09:a9:d5:44:39:95:31:
2d:bb:ab:bc:69:4b:af:08:32:23:3c:62:5a:71:41:73:d9:98:
84:0b:1f:e3:db:02:51:ed:e0:2d:6f:ee:bd:de:15:14:9e:d3:
d7:ad:60:47:92:ca:d0:0c:3f:c2:bf:87:cf:55:3b:60:be:f0:
a1:4c:13:41:0f:f6:50:d0:2b:76:3f:6d:e8:8e:e6:e9:40:7e:
46:8c:1b:1b:40:e8:0a:b2:dd:c5:84:b8:74:03:08:c9:d9:d6:
5f:50:66:8c:8f:a5:b1:a4:78:65:5e:48:2c:9e:e2:82:77:8a:
45:f4:72:b2:29:9f:92:81:33:9f:f4:1b:0b:c2:1b:f4:05:06:
2c:6a:ef:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB39Ocbnc3W6ME1zrBdiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjYwNzI4MTQwMTA4WhcNMjYwNzI5MTQwMTA4WjAzMTEwLwYDVQQD
Eyg3ZjUzMzNkMGRhOGE0ODJkNTFjZWNkOTc5MTJlMmNjMjAxNzQ0ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw7AczKtHou9RtuWFlf580VomvKH
Wz68nU36o71StKt9CkVGkmZey9h9ujXileLm2hyjEDZmXpZHMbfb/xAm+tQ8wRFu
r3t5ZcEX4/Y8zwsQXZAXx38fETmUhocfovDZ9d8azJWUv7yjUixIYqOwyqM6xpdF
P0hYd/p3pic+IjmHkEP2kw+0jiOvbyY3jmPegSyVC1Qane+cV9fhzJqLiCKvVhn+
2Ltr/ARVIHoh0d5wXiN+Rk7Xf1eg38ATNZVLBOYtSm36H+lbyY9N7s4rrkqI/KdN
xnXUNCXa3WtjKe86zQgEAk58WAQa7i/QFQSzsV5Oevb+h04yW7JA0XyPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9TM9DaikgtUc7Nl5EuLMIBdEhFMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJma145jw
kHBfnGJualjs3Bg/kn7xVMZisK3lQD0QiXI72QXpZ3aRdC3TLGRxQAXQ0eT4sLPe
BUZLKUlD0nAXO1+tN98/ZSVOCpSfQNtc8EqgnSwKqCImgo9pDw05eUOwt3CB4PPg
mm5I5mrPq4kIPKNFtM6I2IIJqdVEOZUxLburvGlLrwgyIzxiWnFBc9mYhAsf49sC
Ue3gLW/uvd4VFJ7T161gR5LK0Aw/wr+Hz1U7YL7woUwTQQ/2UNArdj9t6I7m6UB+
RowbG0DoCrLdxYS4dAMIydnWX1BmjI+lsaR4ZV5ILJ7igneKRfRysimfkoEzn/Qb
C8Ib9AUGLGrvDQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:06 2026 by rpki-client