Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: qwiNratsxFT2hVP7rVaRxwXvLUq131jdeb/I6UND+8k=
Subject key identifier: 3C:E5:95:E2:7D:0E:A0:D3:AE:92:41:63:94:BF:35:C9:5A:69:91:18
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019FAD1B06E670C324BBF82186492081DC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 018D
Signing time: Wed 29 Jul 2026 09:00:57 +0000
Manifest this update: Wed 29 Jul 2026 09:00:57 +0000
Manifest next update: Thu 30 Jul 2026 09:00:57 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: iMfJWdp4dVir+xrPITy25pE30u0Ihv/l9hwxYq9WJ30=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:06:e6:70:c3:24:bb:f8:21:86:49:20:81:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Jul 29 09:00:57 2026 GMT
Not After : Jul 30 09:00:57 2026 GMT
Subject: CN=3ce595e27d0ea0d3ae92416394bf35c95a699118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:a5:04:73:c4:0b:5c:c1:ef:a6:cf:5c:f4:
b0:b7:fb:fd:98:9a:2a:a3:c9:e1:d3:f4:ff:f4:4d:
89:83:92:9a:bc:e7:63:b9:b4:ab:58:67:52:0d:0d:
a0:4f:a3:a6:e8:d6:96:0e:68:28:11:4c:64:ac:43:
f4:7f:b9:c9:b2:42:1e:55:67:c0:38:3a:02:fb:3a:
21:f0:c3:dd:87:09:b6:fb:b2:68:59:ab:09:7a:79:
e1:31:fd:8d:a1:5d:1c:01:20:a9:b9:d0:b9:9a:52:
d4:27:e2:d4:d3:0a:05:46:01:fb:34:f8:4c:83:99:
70:f3:47:3e:93:0c:59:67:a8:fd:82:cd:03:9e:ab:
7f:18:43:ab:5f:27:1d:2f:14:59:e5:20:87:e4:14:
df:5c:b4:18:88:95:6e:97:d5:5c:0a:bd:1f:96:47:
6d:97:37:14:27:2e:5f:81:7d:18:80:90:60:c2:a9:
e3:df:24:76:c8:d0:37:42:88:88:77:95:64:94:aa:
fd:ee:8a:61:4d:fb:cd:bc:6f:8d:f9:fa:43:c2:11:
48:3a:f6:3c:ea:2f:6a:18:9c:29:dd:17:9b:f5:8a:
89:49:47:16:a5:e7:0b:71:bd:cb:d7:9c:5b:b8:c2:
e2:1d:d9:a3:0b:e7:8c:19:da:d2:b4:4f:76:af:b9:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:95:E2:7D:0E:A0:D3:AE:92:41:63:94:BF:35:C9:5A:69:91:18
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2e:95:f0:bb:9e:bd:9e:37:42:ea:bc:0e:c5:45:ad:66:4e:
ca:38:78:32:ca:6d:17:cc:96:2e:4e:50:60:ab:15:84:d6:2d:
cf:25:fc:ae:1e:06:82:86:e5:37:4e:d0:cc:9d:01:12:04:52:
1b:3d:a9:e3:bd:b5:69:6f:dc:fe:66:96:f2:58:d6:af:02:5a:
ca:cb:23:ce:af:42:2e:d5:90:f9:9d:00:9c:6e:9a:61:88:c2:
ff:50:e5:49:ad:8f:97:b5:70:1d:08:5a:f2:c1:46:d4:f2:45:
a1:8b:8d:af:b2:46:ff:82:0a:b8:4e:9a:db:89:fe:76:14:1f:
00:da:61:14:b9:b9:af:ee:03:1c:d6:20:9f:ba:9a:9b:16:a7:
84:46:8e:bf:66:be:b1:b6:dd:fe:6f:d6:c5:47:75:63:15:07:
b7:ad:1f:17:94:20:ee:69:09:ea:5d:f5:48:82:4f:97:bd:a0:
88:3c:88:b4:d5:56:76:63:d1:e2:12:fb:45:bf:2e:91:4d:4a:
71:50:78:c8:d9:12:76:8e:53:69:74:f8:5b:05:b4:f9:e9:27:
64:2e:c0:53:d9:ec:6f:a1:81:b2:a7:1c:94:e9:14:4e:2a:5a:
9e:30:8d:6b:20:4c:9b:f3:9c:6c:52:e5:0b:4d:87:ad:48:30:
7c:ed:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:55 2026 by rpki-client