Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: 5tDfeL91QgiUvy2VTGGzfoqHQTBGt+bfYCWy67sFN4w=
Subject key identifier: 6A:08:04:34:6E:1B:EB:5D:5C:26:32:DE:A7:22:AF:70:E3:9B:CC:0C
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 019FA41828B3107438C03AD930D0042024BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 11D5
Signing time: Mon 27 Jul 2026 15:01:14 +0000
Manifest this update: Mon 27 Jul 2026 15:01:14 +0000
Manifest next update: Tue 28 Jul 2026 15:01:14 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: IX6prS2H4TWTNG3vAJAH77wkay5R5K/bn2OETckHo0o=)
2: BDoL8rUpvbaK_16BWlbfMCNWUSU.roa (hash: GfKO3arzoWGyw+NdQY8Rv86I2fy83YtHFt/TTLJyJno=)
3: hvVtewn6w22bnIW8yznhNvKtiF4.roa (hash: m3PFir5NovTfkiQPZLXiwU+9sgPb6SDjnc3/rkv8wo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:18:28:b3:10:74:38:c0:3a:d9:30:d0:04:20:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Jul 27 15:01:14 2026 GMT
Not After : Jul 28 15:01:14 2026 GMT
Subject: CN=6a0804346e1beb5d5c2632dea722af70e39bcc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:c0:b1:41:c7:a6:0d:ae:41:cd:71:53:d6:
fd:53:e4:77:22:67:60:9b:34:ff:f8:83:72:80:49:
f8:dd:08:3c:86:43:09:10:dc:4f:10:1d:be:5a:1d:
a5:bf:7f:17:a9:a5:58:1d:65:24:12:71:92:c6:3f:
df:3b:2e:8a:4a:67:a6:f3:0f:79:ac:5b:3a:96:09:
ff:ef:00:84:1c:29:54:0c:04:20:13:0d:f3:53:55:
d9:ea:ae:de:d3:a2:87:eb:85:61:e8:25:0f:5a:76:
12:ed:d6:2b:fd:bd:20:8f:25:20:73:36:37:72:0a:
20:0e:11:2e:32:bd:6c:da:1f:e6:e0:0d:b5:af:e0:
ca:20:e6:c8:b6:52:d2:c3:0a:e4:ef:ad:1b:51:95:
12:98:99:a3:44:94:5e:15:23:c7:fd:a1:31:de:aa:
cf:c8:92:0f:ed:1b:45:77:c7:cf:b2:7e:35:0e:9d:
28:56:f6:da:c2:f9:aa:4e:76:9b:9b:27:9f:90:0c:
e3:50:4c:fe:99:e1:c5:7b:55:fe:c2:10:21:cf:34:
a5:20:72:93:43:9e:50:01:31:20:34:5f:56:4d:76:
cb:2a:08:4a:c6:ae:27:c5:8b:fc:06:84:c0:28:6c:
1d:80:62:ee:86:9f:96:dc:63:aa:a9:f8:ca:7a:b2:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:04:34:6E:1B:EB:5D:5C:26:32:DE:A7:22:AF:70:E3:9B:CC:0C
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:59:2d:7d:b9:8d:ef:a4:fa:2c:e4:06:31:75:0f:12:35:
45:3d:31:b2:ee:4d:75:6b:d1:00:41:b8:8f:f5:71:64:05:71:
29:f2:b3:b8:be:cc:e0:ad:d8:31:31:33:61:35:c0:c0:61:60:
10:6f:f2:c6:0c:9f:c7:59:3c:08:c7:5f:54:43:f2:f3:24:1a:
92:07:39:ba:4a:20:20:92:97:be:32:35:4a:c6:ec:d3:f0:fa:
82:f7:56:19:28:15:ed:b6:7e:c8:f8:cc:d0:f0:47:bf:59:a8:
ef:00:24:f4:f3:0e:ee:cd:74:05:49:e1:47:5b:a3:be:07:f9:
15:11:18:d2:c5:ff:82:db:5c:4d:07:38:04:8e:cd:84:cc:d7:
d2:b5:a6:59:4d:91:bd:6f:da:86:06:4b:bc:fc:4a:41:01:8c:
28:82:46:4f:d2:b0:80:67:41:9e:2a:b9:c3:5f:9d:4d:0a:2a:
e0:a1:9c:a0:17:f2:0c:54:86:1a:7e:c6:fb:1a:e6:5c:68:c4:
fe:83:5f:f4:5e:39:1e:33:0f:14:4f:55:75:42:46:a4:76:e8:
41:be:5c:e8:22:58:1c:03:98:ae:d3:60:c4:70:df:ba:2a:d2:
2f:3c:28:62:21:96:ea:f8:a2:53:a3:c4:59:76:a9:bf:3a:bf:
14:2a:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:50:10 2026 by rpki-client