Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
File: 6jZp6uh20vI7n4Un6IqHAtvUI-M.mft (raw, json)
Hash identifier: xrDKNg3SFeegp9XYL2RW8gt+1sqbTMcvoBjqJjvjtMg=
Subject key identifier: 36:D1:6D:78:29:72:92:6B:D8:8F:87:7E:E3:41:2F:D2:56:86:B6:3E
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 019F86E8FAAA5B5C8FC607F0324E701CAC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
Manifest number: 2D
Signing time: Tue 21 Jul 2026 23:00:43 +0000
Manifest this update: Tue 21 Jul 2026 23:00:43 +0000
Manifest next update: Wed 22 Jul 2026 23:00:43 +0000
Files and hashes: 1: 6jZp6uh20vI7n4Un6IqHAtvUI-M.crl (hash: oXEjpajUsgyUd1wR3qvIyTK/ckjsMd0rihq9xVUOZn0=)
2: Ia8OjyCdPbeOPd8qLz0nmpdFzZM.roa (hash: Uff4R68FmtlJLQg7NtBy9vfrwma4Gr4jpEJQTUvuSQk=)
3: Y-y3-fti_v_aPVLOJ4oC9snzJT8.roa (hash: KlWCd2E8rNMtg6d+tVqvEt28svyCe0d78W1oT7BwxcU=)
4: Zz8GJxbY2tQ10IvtycLrwCwRWKg.roa (hash: 43K5hUNMqV1Aqotz+s7RgYxP/IccL5wMfkH9gV4GvB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:fa:aa:5b:5c:8f:c6:07:f0:32:4e:70:1c:ac:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Jul 21 23:00:43 2026 GMT
Not After : Jul 22 23:00:43 2026 GMT
Subject: CN=36d16d782972926bd88f877ee3412fd25686b63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e4:05:a3:dd:25:3d:7c:3f:3e:4c:b9:19:4c:
9b:27:d2:06:ff:7c:13:e2:cd:ad:97:7d:3b:82:cb:
5c:cb:0c:4d:a9:14:4f:90:66:4f:bd:2c:b0:7d:0a:
5e:9d:0e:0f:fb:48:c2:97:f7:8a:c0:c6:95:9c:d9:
ba:40:22:ed:32:cd:76:ba:a5:86:11:a5:f3:b2:d8:
8e:23:bd:ca:7e:65:8f:1d:5d:44:3c:8a:e2:fe:ee:
ea:30:a7:a1:be:85:7e:bb:36:80:3b:44:3f:57:69:
34:a7:81:0b:d6:63:59:bf:25:4f:68:32:f6:3d:30:
38:28:34:ca:90:c3:7d:3b:ca:52:d8:42:97:14:21:
2c:8a:dd:60:f5:bb:2b:1a:2d:75:fc:f2:e6:ab:6a:
b9:f1:7f:1c:68:b0:98:82:0b:da:6b:50:9e:b9:ea:
aa:e6:3d:4b:74:75:9a:e6:d1:26:46:ef:49:e1:5d:
30:84:85:1b:ad:9b:02:bf:ac:b2:c0:15:c7:6d:59:
b0:c2:f5:65:64:75:b1:bc:ec:08:98:f3:e9:c5:12:
99:7d:01:0c:52:d4:6f:9e:dd:e1:d6:e8:58:3b:6d:
24:b1:cd:b0:f0:22:dd:10:4e:73:15:3f:9c:5b:0f:
a8:20:a9:b9:29:78:c9:8f:8f:d3:e2:71:cf:5e:02:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:6D:78:29:72:92:6B:D8:8F:87:7E:E3:41:2F:D2:56:86:B6:3E
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:69:a5:a9:84:36:66:ca:cb:2f:f0:5f:b4:22:55:f4:c5:e3:
cc:f1:55:b9:a7:2b:ed:b4:10:88:2d:2f:3d:ec:36:bc:db:9f:
3c:3d:4b:79:41:0d:b0:4c:84:74:f8:f8:09:dc:eb:21:60:5c:
91:a1:c9:83:6e:a9:e7:e1:e7:62:7b:d5:37:4a:a2:4f:29:03:
71:55:2c:df:6f:ed:f1:d7:3a:98:eb:9d:b8:e7:da:a7:ce:5f:
f1:8f:e8:a2:a2:54:3f:fb:3a:c6:1f:6d:2f:6e:5b:78:9b:f4:
39:dd:8b:d1:cc:0c:e1:80:0f:70:b6:b6:4b:d1:77:28:8c:d7:
5e:ed:7b:63:c0:a2:3a:1d:71:e4:88:5d:27:d1:68:89:e8:e5:
7e:d2:5c:0d:e1:bc:e1:cb:72:40:30:7a:30:00:f3:17:6d:b0:
20:9f:86:b3:92:f9:b5:e4:94:a5:b2:ef:a4:07:8b:96:7a:3d:
7b:3b:f8:f7:83:88:97:94:bd:5a:e3:28:28:f9:de:b2:66:f5:
16:37:72:ec:49:30:5d:4b:cd:79:56:7d:bb:75:c3:81:64:d9:
25:19:0b:9d:03:e4:37:68:f7:33:d1:40:d4:f8:47:9d:74:7f:
0d:64:e0:6a:23:01:0c:cf:92:0b:20:04:d6:ba:47:d1:61:eb:
2d:8d:8f:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+G6PqqW1yPxgfwMk5wHKxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMzY2OWVhZTg3NmQyZjIzYjlmODUyN2U4OGE4NzAyZGJk
NDIzZTMwHhcNMjYwNzIxMjMwMDQzWhcNMjYwNzIyMjMwMDQzWjAzMTEwLwYDVQQD
EygzNmQxNmQ3ODI5NzI5MjZiZDg4Zjg3N2VlMzQxMmZkMjU2ODZiNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uQFo90lPXw/Pky5GUybJ9IG/3wT
4s2tl307gstcywxNqRRPkGZPvSywfQpenQ4P+0jCl/eKwMaVnNm6QCLtMs12uqWG
EaXzstiOI73KfmWPHV1EPIri/u7qMKehvoV+uzaAO0Q/V2k0p4EL1mNZvyVPaDL2
PTA4KDTKkMN9O8pS2EKXFCEsit1g9bsrGi11/PLmq2q58X8caLCYggvaa1Ceueqq
5j1LdHWa5tEmRu9J4V0whIUbrZsCv6yywBXHbVmwwvVlZHWxvOwImPPpxRKZfQEM
UtRvnt3h1uhYO20ksc2w8CLdEE5zFT+cWw+oIKm5KXjJj4/T4nHPXgKH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbRbXgpcpJr2I+HfuNBL9JWhrY+MB8GA1UdIwQY
MBaAFOo2aerodtLyO5+FJ+iKhwLb1CPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjct
M2FjZTFlZmYzYTI0LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NWUzNWEtODQ3Yi00MmUyLWFlMjctM2FjZTFlZmYzYTI0
LzEvNmpacDZ1aDIwdkk3bjRVbjZJcUhBdHZVSS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGmlqYQ2
ZsrLL/BftCJV9MXjzPFVuacr7bQQiC0vPew2vNufPD1LeUENsEyEdPj4CdzrIWBc
kaHJg26p5+HnYnvVN0qiTykDcVUs32/t8dc6mOuduOfap85f8Y/ooqJUP/s6xh9t
L25beJv0Od2L0cwM4YAPcLa2S9F3KIzXXu17Y8CiOh1x5IhdJ9FoiejlftJcDeG8
4ctyQDB6MADzF22wIJ+Gs5L5teSUpbLvpAeLlno9ezv494OIl5S9WuMoKPnesmb1
Fjdy7EkwXUvNeVZ9u3XDgWTZJRkLnQPkN2j3M9FA1PhHnXR/DWTgaiMBDM+SCyAE
1rpH0WHrLY2PqA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:26 2026 by rpki-client