Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File: 6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier: uzjesdZPh6PZOcjp3YsEY7G3tQIu9aPQCumRuvYEenE=
Subject key identifier: 9E:32:96:02:0D:29:A8:5A:61:F8:64:D2:49:59:63:35:D1:27:F8:09
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 019FAC7643DF5297CCA45DCACE4108904D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:59 +0000
Manifest this update: Wed 29 Jul 2026 06:00:59 +0000
Manifest next update: Thu 30 Jul 2026 06:00:59 +0000
Files and hashes: 1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: dpJq2GfZUxnfpLoLQaRXX1bFMK8zI/RUl9UXfUSSRI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:43:df:52:97:cc:a4:5d:ca:ce:41:08:90:4d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Jul 29 06:00:59 2026 GMT
Not After : Jul 30 06:00:59 2026 GMT
Subject: CN=9e3296020d29a85a61f864d249596335d127f809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:a0:fd:ad:72:83:61:9f:8a:2e:ea:2b:82:
85:0e:40:c5:31:31:7c:3f:02:18:ae:08:ae:be:f1:
8b:57:69:0f:46:e5:95:b9:e1:34:c0:f7:86:90:3f:
f6:a6:29:17:e7:e4:98:66:1d:f1:f4:bd:91:c6:f3:
47:e8:38:91:67:08:80:b9:e7:48:e6:94:47:e7:6b:
15:9d:8e:6a:cd:59:7d:7e:55:0a:b7:b4:3f:1f:cd:
4a:af:f7:5b:9e:8b:9a:cf:43:ff:7c:ee:6b:3f:dc:
65:25:df:4c:34:23:64:86:8e:7d:1b:ba:e0:58:45:
30:b9:30:29:ac:39:10:0e:26:27:6b:94:89:f8:5a:
bb:f6:a6:5c:eb:1f:84:c3:78:cf:a4:02:25:43:78:
51:c3:26:34:77:ed:cd:47:2c:41:4c:3b:2d:21:86:
0f:63:a5:a9:68:f5:39:35:66:e6:09:58:7f:a1:8d:
27:18:3b:34:bb:16:40:a2:38:c0:ac:68:e9:70:bd:
89:6a:0e:71:b3:5b:ac:c3:3f:72:e5:33:83:5e:38:
3f:22:4e:24:be:34:a1:32:1d:f1:f3:3f:72:36:4a:
43:1e:9b:d0:8c:f6:1e:44:3f:d2:d0:58:5c:6b:1d:
52:ca:cb:1e:9d:29:02:fd:86:f5:8a:3f:8b:c2:31:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:32:96:02:0D:29:A8:5A:61:F8:64:D2:49:59:63:35:D1:27:F8:09
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:49:26:ee:12:38:4e:86:1a:84:fc:10:06:e2:99:6b:e5:00:
31:37:16:70:4c:34:96:a1:7a:54:a7:39:b7:3f:4b:2e:d6:5a:
16:56:9c:6d:05:f1:2f:13:4c:92:28:fb:45:5c:ed:74:6b:d9:
f5:c6:46:8e:d5:b8:5f:56:ab:12:78:9f:9d:c7:9c:7b:ec:35:
2b:4b:d2:c2:3b:99:66:74:ec:04:cb:71:7c:ed:da:41:9c:3e:
06:50:14:1d:b4:96:00:a6:f0:40:96:26:14:81:25:51:04:88:
f1:d8:c5:49:41:6e:80:ea:ff:f6:86:5d:ab:d9:7d:7e:a9:8f:
6f:a8:91:60:7a:86:ed:3c:53:79:80:2c:18:de:28:da:83:51:
8d:49:88:a1:ba:f6:7f:eb:29:fc:90:68:b9:c4:73:88:1b:ce:
91:ad:3d:15:af:0c:46:87:6f:e5:90:92:4a:6e:41:5d:7b:dc:
e0:47:da:f6:3b:a3:69:30:27:2e:81:1a:c8:8a:24:fe:e4:20:
90:eb:7e:a6:6d:70:09:6d:ec:21:62:0a:2c:c9:af:46:2c:98:
25:2e:07:57:fc:5e:76:11:e7:da:50:17:24:76:23:7a:87:91:
b7:da:61:bc:a2:bf:11:9e:de:0c:4a:7c:f2:c4:37:d1:e1:24:
86:d1:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:04 2026 by rpki-client