Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
File: 6aqxRGEAqPzgPfGddV4GMp7iRxM.mft (raw, json)
Hash identifier: sC3x+gHTh8tRRoqOsATuVTBee3/Uzhji4Erhvvjal+I=
Subject key identifier: E0:04:FF:D8:4F:70:4B:4F:6F:DE:1E:A1:E7:F3:77:C1:81:85:50:E1
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019F84FA6E47D12171D3BF0FA35307F4BC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
Manifest number: 19D7
Signing time: Tue 21 Jul 2026 14:00:32 +0000
Manifest this update: Tue 21 Jul 2026 14:00:32 +0000
Manifest next update: Wed 22 Jul 2026 14:00:32 +0000
Files and hashes: 1: 6aqxRGEAqPzgPfGddV4GMp7iRxM.crl (hash: ia/AtvFxNme8UKaujFSW6oRLlhuzhRQQkiKW1nTFmzY=)
2: JlHGBE70CjYUjMlPy-yN4dzG-cs.roa (hash: eJeCGZHCYQ5pmVVEGiFVOguyq7hsvoBtUeukZnmh3W4=)
3: _GwYJ0PKXJK6fqA4cXd9zGiQJsk.roa (hash: TYTF9XrM81uGdSP5QXPvN15cnh9G39fwkeUY9WQ9Rbg=)
4: cxDAVDgNr82cHnIJJB4UwFs2cGU.roa (hash: sgT8v5E2LVdbt2FX0DJ7W7uBv5rW5PIhx+eS3wQDvSs=)
5: dwRGeRiPxu8Ert93hewpcLQlQPs.roa (hash: EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=)
6: nSCF5qcvbkhkVZeNhESQPgQzsYw.roa (hash: Y9RP3rduyUtto1z3zNhzoo4HTEI6paw2VNckcRzLK4g=)
7: vSQI8aeWI14r_sJ8b9o2QgEO_BI.roa (hash: oiaQsMRtgp1rem+ZyltK5SLqiX97thYBgEBpvq3aaYc=)
8: wyPR3DQqTcPeXSMxj_8q1QvGp98.roa (hash: gpZ7dcu9+au0qJAS/mbf494bt1LZl0k6YCG8tQBUn4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:6e:47:d1:21:71:d3:bf:0f:a3:53:07:f4:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jul 21 14:00:32 2026 GMT
Not After : Jul 22 14:00:32 2026 GMT
Subject: CN=e004ffd84f704b4f6fde1ea1e7f377c1818550e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:e3:3e:43:cd:cb:c9:03:b3:a8:66:2f:55:
8c:52:da:0f:76:7a:3f:55:5f:fa:1f:31:22:93:58:
42:04:00:a7:d5:58:eb:38:55:50:c6:03:72:d7:99:
4f:d7:9b:23:2f:af:fd:00:14:4c:06:1e:9b:0a:68:
39:c8:93:fa:3e:16:c9:81:f9:a1:93:3a:70:97:ba:
1b:2b:90:61:9d:73:42:a2:72:92:11:ff:0e:2c:05:
20:b3:62:31:f3:04:84:7e:49:25:85:05:ec:ef:f5:
c9:01:5a:22:45:3b:a4:6d:a1:b3:d9:a9:91:00:e3:
34:f4:76:8b:88:4b:78:44:45:49:f4:b2:d7:ec:8e:
8a:0c:e3:3f:e4:cc:89:df:0d:ff:a1:74:ae:ad:f7:
c2:19:ac:ec:48:b2:b9:0d:1d:8e:87:90:96:59:46:
be:c8:93:bf:04:fa:07:03:3e:0f:f1:ee:f2:7d:0e:
00:0f:48:97:5c:28:0c:a0:e1:3d:f2:f3:08:b5:80:
f7:44:94:ee:eb:10:6d:30:10:e4:76:f0:f5:06:2a:
13:a6:72:09:c7:3f:52:cd:91:7f:db:db:38:4a:e0:
04:af:d6:62:59:22:56:ac:9b:f7:c6:1b:3b:70:90:
53:98:29:c1:32:b1:58:28:d3:51:a9:b4:3f:17:38:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:FF:D8:4F:70:4B:4F:6F:DE:1E:A1:E7:F3:77:C1:81:85:50:E1
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:eb:0b:b7:57:cc:54:ed:64:02:89:9e:b5:a8:b6:0d:53:9e:
96:82:db:8b:70:16:9d:1c:67:d9:77:78:97:a9:fe:03:33:fa:
da:4f:16:d4:28:11:52:8e:59:fa:79:24:26:93:3f:08:e2:c9:
c9:8b:5f:af:75:c8:64:26:44:3c:50:14:9d:59:d7:e2:f5:97:
d9:6f:ef:5c:7b:ce:b7:ff:0e:f7:f9:0a:dd:25:91:bf:d1:67:
1a:5c:6b:b8:eb:a6:88:28:f2:d7:db:0d:55:64:3c:bb:ed:03:
a7:5c:88:6d:de:6f:fb:37:9e:c1:80:04:2f:4a:8b:54:52:c2:
3c:c9:ea:2c:fb:80:cf:6d:28:b5:4d:c7:71:01:20:3f:b6:c4:
df:00:a5:25:9e:e5:b9:15:dd:45:3a:0e:da:a7:d1:6f:c5:88:
81:24:6a:40:30:74:8a:97:23:3d:f8:62:51:a7:b3:bb:2e:d0:
e4:46:55:8d:35:ad:65:fc:10:77:f2:34:80:fe:a8:fe:e7:d7:
13:01:8d:17:38:89:34:e5:ee:3b:99:df:41:69:a1:67:bb:0f:
33:a4:48:52:15:e7:a5:9d:8a:89:d0:70:44:d3:23:8e:4e:10:
e5:7d:60:f3:14:77:5c:5e:a6:93:14:39:0c:18:cf:13:c6:83:
65:28:37:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+m5H0SFx078Po1MH9LwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjYwNzIxMTQwMDMyWhcNMjYwNzIyMTQwMDMyWjAzMTEwLwYDVQQD
EyhlMDA0ZmZkODRmNzA0YjRmNmZkZTFlYTFlN2YzNzdjMTgxODU1MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEXjPkPNy8kDs6hmL1WMUtoPdno/
VV/6HzEik1hCBACn1VjrOFVQxgNy15lP15sjL6/9ABRMBh6bCmg5yJP6PhbJgfmh
kzpwl7obK5BhnXNConKSEf8OLAUgs2Ix8wSEfkklhQXs7/XJAVoiRTukbaGz2amR
AOM09HaLiEt4REVJ9LLX7I6KDOM/5MyJ3w3/oXSurffCGazsSLK5DR2Oh5CWWUa+
yJO/BPoHAz4P8e7yfQ4AD0iXXCgMoOE98vMItYD3RJTu6xBtMBDkdvD1BioTpnIJ
xz9SzZF/29s4SuAEr9ZiWSJWrJv3xhs7cJBTmCnBMrFYKNNRqbQ/FziC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAE/9hPcEtPb94eoefzd8GBhVDhMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+sLt1fM
VO1kAometai2DVOeloLbi3AWnRxn2Xd4l6n+AzP62k8W1CgRUo5Z+nkkJpM/COLJ
yYtfr3XIZCZEPFAUnVnX4vWX2W/vXHvOt/8O9/kK3SWRv9FnGlxruOumiCjy19sN
VWQ8u+0Dp1yIbd5v+zeewYAEL0qLVFLCPMnqLPuAz20otU3HcQEgP7bE3wClJZ7l
uRXdRToO2qfRb8WIgSRqQDB0ipcjPfhiUaezuy7Q5EZVjTWtZfwQd/I0gP6o/ufX
EwGNFziJNOXuO5nfQWmhZ7sPM6RIUhXnpZ2KidBwRNMjjk4Q5X1g8xR3XF6mkxQ5
DBjPE8aDZSg3NA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:13:08 2026 by rpki-client