Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: dqOMpkahr1sY6KVlxC5bRQpAH0GqPnykn+IAeb3K5YY=
Subject key identifier: 49:58:C8:B5:DC:31:D9:F0:72:6B:40:99:CB:2D:7D:F6:0D:BA:11:A3
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019F84565B0D27CD8D537068227543D09A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0270
Signing time: Tue 21 Jul 2026 11:01:19 +0000
Manifest this update: Tue 21 Jul 2026 11:01:19 +0000
Manifest next update: Wed 22 Jul 2026 11:01:19 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: F5sbwBdyGhOdCsXXWxOaHGAHkok1xc2slomsvRip+n0=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:5b:0d:27:cd:8d:53:70:68:22:75:43:d0:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Jul 21 11:01:19 2026 GMT
Not After : Jul 22 11:01:19 2026 GMT
Subject: CN=4958c8b5dc31d9f0726b4099cb2d7df60dba11a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:9b:91:b0:f7:0d:83:be:76:c9:bf:b2:b1:
0e:99:85:c0:bc:2d:34:7b:be:70:5e:08:6d:ce:dc:
ad:aa:2f:1b:0a:41:ae:58:95:f6:b5:72:5b:cc:54:
e6:aa:9f:fa:79:e8:0f:ac:56:13:07:66:8b:ae:2a:
09:b5:d7:38:df:fd:bb:42:5d:1c:7c:db:6c:e5:6a:
58:14:6b:77:48:96:43:c0:84:1c:ce:2a:6d:7c:20:
89:f1:87:4b:a9:00:f8:f8:32:72:9c:9a:05:43:a6:
c1:19:c2:a9:32:c6:55:43:a4:28:1c:f4:2f:17:1e:
6a:69:66:a9:1c:b3:47:63:de:fa:b8:94:fb:fe:78:
dd:92:7d:1c:78:7f:ec:95:70:25:c0:cc:a4:47:7a:
4a:e3:40:47:ec:90:64:2d:e9:0d:e7:e3:7c:d8:3e:
ed:c3:00:1e:9a:54:b8:0c:df:c7:63:56:f6:e7:b4:
f2:2d:ac:da:fa:60:53:20:2f:c9:62:8d:ab:16:11:
ea:88:b9:39:91:5a:f9:5a:e3:d9:93:4b:65:71:f1:
e2:7b:e3:7a:4d:05:21:dc:20:67:e0:72:61:e8:ae:
18:78:e9:18:b8:ec:8b:df:19:a3:89:e3:4a:ac:0e:
20:a2:3a:cd:f4:c3:db:89:d2:79:f7:16:4d:22:87:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:C8:B5:DC:31:D9:F0:72:6B:40:99:CB:2D:7D:F6:0D:BA:11:A3
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8a:92:6c:3a:04:cc:9a:17:7f:22:4e:a9:c7:ed:80:80:57:
b2:ec:c1:18:b7:9d:a2:01:c6:18:eb:28:87:cc:62:54:42:a9:
37:d4:ed:3b:3e:46:70:3f:dc:be:ec:63:f2:23:34:5d:c9:95:
c8:80:05:e2:c5:57:4a:e5:a4:7b:98:27:f8:0b:68:d5:ec:a2:
ce:02:c1:9b:04:9b:59:92:fc:0b:a9:a5:d1:8e:79:0e:e5:e9:
6a:69:be:01:9b:c8:d5:d7:af:fa:1a:1f:ca:7e:77:82:13:ee:
b5:c9:f2:35:fe:9e:71:13:af:40:88:16:70:81:2d:3f:db:4b:
67:08:9f:30:19:f2:01:2a:11:13:04:45:8b:a8:ed:08:fd:00:
dc:bc:1b:33:f0:7e:5a:ad:25:87:15:85:ee:56:d1:3f:70:ec:
96:ab:8b:1b:15:a1:d3:70:15:27:ad:24:e3:a0:87:a8:6f:23:
82:0c:6d:4d:d0:4f:de:28:82:f7:aa:6e:9e:98:e2:fc:f8:98:
b4:23:41:f2:07:73:3d:89:3f:cd:27:7c:e7:db:2f:c9:35:33:
e1:56:5a:e4:67:2d:6f:0a:0f:fb:ec:df:c0:5d:d7:14:d5:56:
99:a8:68:68:28:e8:c8:a1:d5:55:5f:90:5e:84:12:5b:41:68:
ac:75:83:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVlsNJ82NU3BoInVD0JoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTAxOWE1YzE5NmJiZDFjYzE3ZDFhOGQzNmM0ZDY1N2Yz
ODE2YTAwHhcNMjYwNzIxMTEwMTE5WhcNMjYwNzIyMTEwMTE5WjAzMTEwLwYDVQQD
Eyg0OTU4YzhiNWRjMzFkOWYwNzI2YjQwOTljYjJkN2RmNjBkYmExMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6bkbD3DYO+dsm/srEOmYXAvC00
e75wXghtztytqi8bCkGuWJX2tXJbzFTmqp/6eegPrFYTB2aLrioJtdc43/27Ql0c
fNts5WpYFGt3SJZDwIQcziptfCCJ8YdLqQD4+DJynJoFQ6bBGcKpMsZVQ6QoHPQv
Fx5qaWapHLNHY976uJT7/njdkn0ceH/slXAlwMykR3pK40BH7JBkLekN5+N82D7t
wwAemlS4DN/HY1b257TyLaza+mBTIC/JYo2rFhHqiLk5kVr5WuPZk0tlcfHie+N6
TQUh3CBn4HJh6K4YeOkYuOyL3xmjieNKrA4gojrN9MPbidJ59xZNIocf0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElYyLXcMdnwcmtAmcstffYNuhGjMB8GA1UdIwQY
MBaAFP+gGaXBlrvRzBfRqNNsTWV/OBagMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzct
OWU1NmY5NzVkN2U2LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzctOWU1NmY5NzVkN2U2
LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYqSbDoE
zJoXfyJOqcftgIBXsuzBGLedogHGGOsoh8xiVEKpN9TtOz5GcD/cvuxj8iM0XcmV
yIAF4sVXSuWke5gn+Ato1eyizgLBmwSbWZL8C6ml0Y55DuXpamm+AZvI1dev+hof
yn53ghPutcnyNf6ecROvQIgWcIEtP9tLZwifMBnyASoREwRFi6jtCP0A3LwbM/B+
Wq0lhxWF7lbRP3DslquLGxWh03AVJ60k46CHqG8jggxtTdBP3iiC96punpji/PiY
tCNB8gdzPYk/zSd859svyTUz4VZa5GctbwoP++zfwF3XFNVWmahoaCjoyKHVVV+Q
XoQSW0ForHWDYw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:32 2026 by rpki-client