Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: 3kbF1lHhdkA5JwYh/3S1WoKq1EcE9ebQ8RgqTljpIRo=
Subject key identifier: 8A:E4:B6:25:7D:D2:F8:88:6E:DD:B9:F3:22:94:F6:CE:FB:75:96:63
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019FA3E091B5AAE814770B4480F9F2DBBC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 152D
Signing time: Mon 27 Jul 2026 14:00:31 +0000
Manifest this update: Mon 27 Jul 2026 14:00:31 +0000
Manifest next update: Tue 28 Jul 2026 14:00:31 +0000
Files and hashes: 1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: b42tbLOeUv7NciNUhZG4Vb0B0KLX3cWcj3yFvw9Bk6c=)
3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:91:b5:aa:e8:14:77:0b:44:80:f9:f2:db:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jul 27 14:00:31 2026 GMT
Not After : Jul 28 14:00:31 2026 GMT
Subject: CN=8ae4b6257dd2f8886eddb9f32294f6cefb759663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:83:5c:3b:5d:de:04:d7:40:2c:21:12:42:
42:c1:c6:e8:c4:2e:8f:50:50:40:61:0c:fa:2a:20:
05:cb:13:fa:ca:d5:15:b0:32:92:4f:5e:7b:5b:75:
b5:7c:9a:d0:7e:fb:bd:cd:00:36:d9:32:ba:d2:d1:
4b:97:d9:82:07:53:d7:d1:8b:73:f0:fb:b9:c3:95:
91:6c:3b:6b:2b:8e:d7:ce:66:1c:8d:cb:39:d6:4f:
6d:c1:b5:2d:ad:66:4c:06:d5:40:e7:ee:89:be:7a:
e1:79:23:e7:c2:62:3f:80:8a:13:5e:a1:f1:eb:9c:
ff:df:16:cb:db:b1:a4:83:0f:fd:bc:da:1b:13:5d:
21:bc:58:bc:31:cf:e1:b0:f5:0e:38:c1:2e:08:a8:
8a:f8:d8:61:28:79:bf:d6:a7:c9:6c:81:48:d0:a3:
ec:ff:ad:63:49:bc:c2:bb:f0:35:e9:61:26:d2:8b:
36:91:6b:29:e5:2f:37:15:63:8a:fc:ce:ff:b0:2e:
6d:d2:34:36:81:68:50:79:a4:fe:17:92:23:88:e1:
11:0f:60:41:72:71:f2:cf:43:e4:67:b6:49:fa:88:
34:2d:a0:6c:34:e4:e9:e5:75:4d:d3:d2:7a:b7:60:
28:13:a5:a7:61:33:84:e0:85:0d:04:7d:bc:79:10:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:B6:25:7D:D2:F8:88:6E:DD:B9:F3:22:94:F6:CE:FB:75:96:63
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:a4:f4:ad:96:71:a0:d4:a3:84:d7:d4:00:08:4b:d9:fc:
f6:20:fd:dd:29:53:e8:f5:29:ad:af:53:09:a0:22:5d:68:97:
f1:33:31:aa:84:40:2d:a0:20:bf:0d:d6:85:03:f4:2d:11:6d:
17:49:00:1f:d2:bd:d5:f4:03:a6:08:76:f5:a3:be:ea:67:08:
fa:0b:fd:66:d8:64:7a:3a:2c:13:a1:8f:98:4b:44:6b:5e:17:
39:67:e4:ec:be:b2:fb:3b:74:df:40:68:65:40:f8:27:f3:71:
b3:77:79:dd:18:cc:7a:12:32:ba:1f:ee:0d:4a:3a:7e:3d:69:
b8:fa:6a:07:7e:d3:93:ab:47:ac:11:6a:c7:de:01:e3:36:ab:
24:fc:c7:e5:fa:a3:dc:e1:0b:31:0e:aa:82:fd:19:b2:93:6b:
1b:81:e8:26:ac:24:5d:5f:8b:94:23:01:15:e9:57:2f:55:a9:
95:17:06:55:d7:6b:9c:45:4b:c9:b4:eb:6e:e7:5f:af:fe:34:
7f:86:76:be:1b:ff:14:fe:66:cc:2d:28:33:cf:a0:16:13:56:
70:4e:af:13:87:6e:47:2e:ab:56:0a:94:f3:1f:d2:0f:3f:0b:
ca:f1:d2:ac:9e:89:cb:da:cf:29:b0:a2:cb:4b:0c:fa:4c:a1:
78:65:8a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4JG1qugUdwtEgPny27wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjYwNzI3MTQwMDMxWhcNMjYwNzI4MTQwMDMxWjAzMTEwLwYDVQQD
Eyg4YWU0YjYyNTdkZDJmODg4NmVkZGI5ZjMyMjk0ZjZjZWZiNzU5NjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ODXDtd3gTXQCwhEkJCwcboxC6P
UFBAYQz6KiAFyxP6ytUVsDKST157W3W1fJrQfvu9zQA22TK60tFLl9mCB1PX0Ytz
8Pu5w5WRbDtrK47XzmYcjcs51k9twbUtrWZMBtVA5+6JvnrheSPnwmI/gIoTXqHx
65z/3xbL27Gkgw/9vNobE10hvFi8Mc/hsPUOOMEuCKiK+NhhKHm/1qfJbIFI0KPs
/61jSbzCu/A16WEm0os2kWsp5S83FWOK/M7/sC5t0jQ2gWhQeaT+F5IjiOERD2BB
cnHyz0PkZ7ZJ+og0LaBsNOTp5XVN09J6t2AoE6WnYTOE4IUNBH28eRCi3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrktiV90viIbt258yKU9s77dZZjMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjr6k9K2W
caDUo4TX1AAIS9n89iD93SlT6PUpra9TCaAiXWiX8TMxqoRALaAgvw3WhQP0LRFt
F0kAH9K91fQDpgh29aO+6mcI+gv9ZthkejosE6GPmEtEa14XOWfk7L6y+zt030Bo
ZUD4J/Nxs3d53RjMehIyuh/uDUo6fj1puPpqB37Tk6tHrBFqx94B4zarJPzH5fqj
3OELMQ6qgv0ZspNrG4HoJqwkXV+LlCMBFelXL1WplRcGVddrnEVLybTrbudfr/40
f4Z2vhv/FP5mzC0oM8+gFhNWcE6vE4duRy6rVgqU8x/SDz8LyvHSrJ6Jy9rPKbCi
y0sM+kyheGWKOQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 21:32:15 2026 by rpki-client