
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier: Kei73N76jdvF3Ou3DaD6OGLDB+KOOltwwNaTAkIzd8k=
Subject key identifier: B2:CE:AA:E4:23:96:0A:F0:7C:34:A9:BC:CD:72:6A:18:DC:4C:B5:0E
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer: /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial: 019FA606066FAF57E2D2EE566296D29E1B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 00:00:40 +0000
Manifest this update: Tue 28 Jul 2026 00:00:40 +0000
Manifest next update: Wed 29 Jul 2026 00:00:40 +0000
Files and hashes: 1: 3f5hSAbyuRxrV6ERS_8K3eov-zs.roa (hash: i4VKC4WTXw6bm8VI4lFI1xoR94400lDFZbrMtGI0T7Q=)
2: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: Ycnj3xLLkh9UqlNlPhcmKmHpMCe9h78BG8IYPF/cS3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:06:06:6f:af:57:e2:d2:ee:56:62:96:d2:9e:1b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Validity
Not Before: Jul 28 00:00:40 2026 GMT
Not After : Jul 29 00:00:40 2026 GMT
Subject: CN=b2ceaae423960af07c34a9bccd726a18dc4cb50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:5d:b5:35:8b:98:2c:76:fc:02:de:e8:fe:
29:53:fc:6c:2a:b5:82:51:ae:af:bd:ca:da:c7:59:
ca:e9:8d:13:be:1e:44:e8:00:72:02:9c:ff:8d:88:
de:6c:91:27:e7:66:c3:79:13:9b:f5:7d:2d:64:04:
8d:c2:95:f7:6c:e5:30:09:53:f4:c2:67:f2:a4:b2:
c6:9e:a3:ac:86:47:39:d1:bd:02:fe:07:27:54:59:
25:42:26:4b:7b:d2:55:24:dd:f0:de:82:97:97:a2:
4e:9b:8b:98:7c:f7:7a:1b:c8:6f:42:17:83:2f:50:
1b:8a:b0:11:30:c4:6d:37:86:77:b1:a7:b8:e0:6d:
2a:a5:7c:97:c3:9b:76:aa:93:9a:73:28:a3:bc:96:
22:73:d9:48:e0:d9:4b:9c:34:45:53:d7:aa:b1:8c:
49:18:f8:77:0d:70:39:a0:c6:de:19:31:de:02:8f:
68:0d:4b:10:f7:8c:4f:af:cb:7e:5c:1b:da:e8:a7:
70:de:f3:4f:5f:ba:52:96:60:95:dc:ed:fb:73:50:
fd:77:59:a2:61:0b:5b:8b:ad:a2:ff:d3:f8:7c:e7:
d6:c9:de:40:27:06:c9:2b:3f:8a:c3:5d:52:9d:34:
86:e4:09:66:39:c1:0e:3d:92:3b:48:f8:40:f0:b5:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:AA:E4:23:96:0A:F0:7C:34:A9:BC:CD:72:6A:18:DC:4C:B5:0E
X509v3 Authority Key Identifier:
keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a7:15:42:f4:7f:e9:93:4e:62:85:ff:57:10:c1:47:f4:9f:
e3:16:d9:64:32:be:46:7e:9e:24:e9:a1:05:21:7c:72:5a:a4:
ca:20:40:72:ca:e1:4d:73:fe:20:ea:4f:64:c0:51:11:80:cb:
d2:cf:96:7c:1f:5f:61:4d:8f:06:32:be:0a:50:95:55:04:b0:
c4:26:35:94:87:fc:e2:11:72:8e:df:6d:35:03:ee:67:b7:1f:
ca:a9:26:85:9d:5a:ea:f1:3c:7e:68:21:f2:54:f2:99:85:11:
fa:d3:22:98:a4:ab:f8:e2:28:0d:0c:96:7c:e4:39:00:e7:5e:
85:cd:c9:89:9e:92:c4:2e:ea:11:1e:a5:e7:3f:84:b8:00:87:
8d:c4:74:54:18:66:28:73:54:25:0f:66:7e:26:ea:b8:74:98:
aa:04:ca:d2:79:ca:2d:c2:22:b6:3e:b5:10:6a:4b:1f:d5:d7:
f9:50:8b:3b:ac:16:af:fd:a6:b3:e7:7a:32:fb:7f:9a:32:05:
35:16:06:0a:ce:82:0f:42:df:07:8a:34:c4:2b:17:7f:33:0b:
9c:53:7d:92:57:d0:04:32:68:a6:9d:dd:47:65:bd:08:66:6f:
53:3c:bd:52:04:19:41:b8:b4:75:ed:1b:7f:b9:d4:f6:b6:e9:
ea:56:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:55:01 2026 by rpki-client