Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
File: 6QOzpacoCqn-K_-pBlwrKgGld8w.mft (raw, json)
Hash identifier: VY0X4qfZC0pirFbwJA5OSWHxNcpkIFt+YJuQ0jrJmVw=
Subject key identifier: 7B:4C:BA:75:D5:52:B8:8D:0C:A9:3D:D5:EA:B8:75:0E:AF:F9:7B:06
Authority key identifier: E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
Certificate issuer: /CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Certificate serial: 01A0016F8C0757D5107E583853FB382C9FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 18:01:22 +0000
Manifest this update: Fri 14 Aug 2026 18:01:22 +0000
Manifest next update: Sat 15 Aug 2026 18:01:22 +0000
Files and hashes: 1: 6QOzpacoCqn-K_-pBlwrKgGld8w.crl (hash: 3MjvVXjCwYtvcF6Y2kRHcoI6tOvfpOH0Efh0s1csmRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:8c:07:57:d5:10:7e:58:38:53:fb:38:2c:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903b3a5a7280aa9fe2bffa9065c2b2a01a577cc
Validity
Not Before: Aug 14 18:01:22 2026 GMT
Not After : Aug 15 18:01:22 2026 GMT
Subject: CN=7b4cba75d552b88d0ca93dd5eab8750eaff97b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:7e:00:ac:4d:5a:67:3d:6e:a5:5b:c5:64:
f4:0c:b3:59:55:fc:47:e5:8e:34:b3:e7:15:65:06:
c2:99:b0:e2:06:d0:e4:e6:0c:c6:47:c6:6a:2d:6a:
6a:46:bd:b0:0c:ac:fb:ab:d9:2c:bf:f3:84:26:a4:
8f:b1:a5:29:5f:36:e6:73:d5:ea:a9:32:b9:30:9d:
fc:54:ba:52:c7:12:82:06:5e:91:d4:93:af:17:b0:
3f:2e:e2:1c:d8:69:cb:53:dd:31:8c:63:3d:ab:75:
83:a7:70:01:3d:0b:08:73:00:e9:7b:c5:9d:b3:b1:
f1:48:6f:36:8b:35:4f:4f:54:32:e1:8a:b5:85:9d:
b3:41:11:d8:85:dd:89:3f:2d:1c:da:dd:0f:92:aa:
15:f5:5d:d2:7a:78:e1:fc:89:25:64:d4:4c:36:06:
49:7d:34:08:d6:3a:8d:4a:a9:ee:de:d8:d9:d6:c9:
02:3f:3e:c9:ad:f3:d1:54:d3:e9:32:82:13:6d:88:
24:86:05:b6:1e:23:2a:5e:c3:cf:9a:ba:f2:d3:67:
30:fe:f1:87:0b:97:7c:58:b1:01:4b:3f:7a:e8:19:
88:59:f7:f6:46:d0:b1:b0:af:23:70:65:1b:d4:a2:
a0:aa:79:7b:e3:d8:cb:06:92:62:cb:57:a3:02:2d:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:BA:75:D5:52:B8:8D:0C:A9:3D:D5:EA:B8:75:0E:AF:F9:7B:06
X509v3 Authority Key Identifier:
keyid:E9:03:B3:A5:A7:28:0A:A9:FE:2B:FF:A9:06:5C:2B:2A:01:A5:77:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOzpacoCqn-K_-pBlwrKgGld8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58b557-27a9-46aa-9dee-4cec696833ed/1/6QOzpacoCqn-K_-pBlwrKgGld8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:94:96:b6:23:0c:ad:44:18:9d:0f:42:80:28:f9:f4:4b:
f5:76:82:0b:66:f7:40:cf:35:c3:54:e6:a4:27:a3:86:f6:58:
59:bd:9a:6c:03:f8:af:09:63:b7:47:8b:74:ca:69:59:78:a5:
9e:fd:93:12:a3:c1:6d:7e:7e:59:bf:56:66:6b:3b:c6:83:82:
05:f0:93:7c:89:e1:ca:5a:bc:a2:e8:d6:81:ef:d7:92:69:44:
74:0f:22:a3:78:26:e6:f0:f3:03:49:69:fc:d0:47:14:80:c5:
69:de:e4:32:14:90:83:29:b8:fa:d0:f2:0c:90:4f:7d:fb:75:
c4:fc:66:6e:f9:be:38:5a:09:80:04:43:ed:03:aa:ff:09:e9:
1c:b8:4e:73:2a:dd:21:78:c0:cd:3b:0a:7b:8c:ca:30:0c:34:
f8:ac:5f:c3:39:65:70:38:b0:5a:29:99:ef:e5:6d:fe:c3:ad:
bc:73:a5:e0:35:73:f2:ac:80:77:6f:a0:02:17:f4:e3:81:a8:
9c:6b:bc:eb:56:e3:ac:06:a9:56:29:c0:92:50:78:6f:0a:2b:
7c:1d:b3:33:e6:bc:44:53:20:c7:5c:9d:b5:56:fb:85:32:16:
f6:04:d2:1a:e3:45:da:be:1f:2e:f0:79:55:67:90:5e:c4:f5:
31:22:23:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb4wHV9UQflg4U/s4LJ/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDNiM2E1YTcyODBhYTlmZTJiZmZhOTA2NWMyYjJhMDFh
NTc3Y2MwHhcNMjYwODE0MTgwMTIyWhcNMjYwODE1MTgwMTIyWjAzMTEwLwYDVQQD
Eyg3YjRjYmE3NWQ1NTJiODhkMGNhOTNkZDVlYWI4NzUwZWFmZjk3YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj1+AKxNWmc9bqVbxWT0DLNZVfxH
5Y40s+cVZQbCmbDiBtDk5gzGR8ZqLWpqRr2wDKz7q9ksv/OEJqSPsaUpXzbmc9Xq
qTK5MJ38VLpSxxKCBl6R1JOvF7A/LuIc2GnLU90xjGM9q3WDp3ABPQsIcwDpe8Wd
s7HxSG82izVPT1Qy4Yq1hZ2zQRHYhd2JPy0c2t0PkqoV9V3Senjh/IklZNRMNgZJ
fTQI1jqNSqnu3tjZ1skCPz7JrfPRVNPpMoITbYgkhgW2HiMqXsPPmrry02cw/vGH
C5d8WLEBSz966BmIWff2RtCxsK8jcGUb1KKgqnl749jLBpJiy1ejAi20HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtMunXVUriNDKk91eq4dQ6v+XsGMB8GA1UdIwQY
MBaAFOkDs6WnKAqp/iv/qQZcKyoBpXfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUt
NGNlYzY5NjgzM2VkLzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGI1NTctMjdhOS00NmFhLTlkZWUtNGNlYzY5NjgzM2Vk
LzEvNlFPenBhY29DcW4tS18tcEJsd3JLZ0dsZDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEluUlrYj
DK1EGJ0PQoAo+fRL9XaCC2b3QM81w1TmpCejhvZYWb2abAP4rwljt0eLdMppWXil
nv2TEqPBbX5+Wb9WZms7xoOCBfCTfInhylq8oujWge/XkmlEdA8io3gm5vDzA0lp
/NBHFIDFad7kMhSQgym4+tDyDJBPfft1xPxmbvm+OFoJgARD7QOq/wnpHLhOcyrd
IXjAzTsKe4zKMAw0+KxfwzllcDiwWimZ7+Vt/sOtvHOl4DVz8qyAd2+gAhf044Go
nGu861bjrAapVinAklB4bworfB2zM+a8RFMgx1ydtVb7hTIW9gTSGuNF2r4fLvB5
VWeQXsT1MSIjZA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:59 2026 by rpki-client