Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: UMpDUSYcizLWcRWylSLc8pu/EB9y85E/FqiUIbGrr/Q=
Subject key identifier: A6:EA:60:C7:AF:7C:B5:93:35:4F:25:2E:B5:5F:E9:B5:E7:67:DB:E6
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019FAAF53E3102F712C5970316B9860E157D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0CDD
Signing time: Tue 28 Jul 2026 23:00:26 +0000
Manifest this update: Tue 28 Jul 2026 23:00:26 +0000
Manifest next update: Wed 29 Jul 2026 23:00:26 +0000
Files and hashes: 1: 3jEzaTAZGbVsoFwdmjg2hTF2_Wk.roa (hash: wm8kNCk7UferWI+OkWWldWOTGXvk5bckydNDUKDAWvo=)
2: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: mtoZSDmThGQAsYNuHlB4OmFOqnu/uI8T89CLwixBfuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:3e:31:02:f7:12:c5:97:03:16:b9:86:0e:15:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Jul 28 23:00:26 2026 GMT
Not After : Jul 29 23:00:26 2026 GMT
Subject: CN=a6ea60c7af7cb593354f252eb55fe9b5e767dbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:37:8f:6a:9f:4c:bf:87:f6:74:2e:15:24:
4b:39:9a:20:75:32:f7:3a:64:bb:71:d5:54:2d:b6:
2e:d1:a3:39:2d:65:69:33:14:c0:83:53:ef:a9:19:
95:80:00:38:82:a4:3d:3b:09:53:a0:0d:b2:3d:67:
53:4b:39:16:a6:cc:06:40:aa:6b:c4:0f:02:37:ec:
7d:28:92:cc:94:ae:89:c1:71:70:0f:34:b1:fc:6b:
44:f8:6a:22:00:db:9e:63:ca:59:aa:6a:02:ce:41:
9d:15:e7:2f:b9:0a:56:5b:f2:ae:8b:84:a5:3c:7e:
7b:76:9f:25:91:5e:5d:d0:e0:e1:cf:20:95:83:c1:
d8:6d:c7:b9:4f:e0:b4:14:41:06:be:c8:f0:6c:41:
50:96:07:f2:a0:7e:ef:48:a4:bc:e9:81:97:c1:1e:
4d:75:92:70:d6:3b:fe:51:55:eb:53:0e:22:c2:fc:
7a:56:ca:2e:51:d7:57:01:1e:f1:c4:6d:6b:b2:c1:
cd:30:88:5a:ef:99:8a:6f:a5:01:c4:12:e0:dc:92:
a4:b3:62:27:5f:47:d7:6d:c6:b8:6a:fc:6a:ca:4c:
25:63:0b:f5:dd:18:c9:31:58:05:03:cb:61:66:17:
fb:d2:bd:16:86:a7:08:86:2a:b8:e8:73:11:cc:8b:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:60:C7:AF:7C:B5:93:35:4F:25:2E:B5:5F:E9:B5:E7:67:DB:E6
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a3:0c:2e:22:7c:60:0a:57:33:a9:b0:07:30:67:51:bd:41:
e3:cd:e3:6c:d9:6b:e7:35:41:8a:0e:d1:e6:1b:dd:c8:8c:e6:
41:b0:ae:e6:29:2e:9a:a4:89:50:7e:29:03:61:c0:0d:1f:24:
3f:8c:15:87:71:09:b1:ec:ac:07:4e:21:f1:cb:13:27:7b:ea:
df:c0:02:73:48:00:40:c6:aa:1c:e7:63:8e:22:75:d3:f5:e9:
c0:2e:3b:2a:ae:a2:5a:8e:51:80:11:be:4a:8b:f1:76:79:8a:
84:58:8a:fa:7b:67:50:43:70:82:29:78:a8:25:0b:d6:1d:6e:
2a:1f:56:35:d7:47:35:fa:36:21:eb:ed:9e:ce:69:0a:38:fe:
4d:70:3f:9f:31:a6:49:56:f7:24:e7:59:57:16:b2:d1:b4:51:
4c:64:11:a3:6f:24:c0:85:5d:e8:b9:1b:e3:6e:32:ec:0f:fa:
b8:c0:60:8a:0a:74:ca:4d:1c:68:60:17:e5:4f:b3:80:3b:d3:
e5:97:85:0b:42:98:91:cf:a2:76:5d:49:f6:8f:dd:89:e0:ba:
a3:0a:c1:f2:71:45:84:e1:61:99:88:01:8c:9b:0e:7a:4c:45:
d0:4e:d9:a2:45:ac:67:03:6c:1d:20:4b:86:b6:f5:11:b6:17:
4a:27:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:36:05 2026 by rpki-client