Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
File: 6ZQF7o9djnZOkL1mvdHomsEoCeg.mft (raw, json)
Hash identifier: k0/hPlUspIdZQXMKlUXiftywqWiPMUC+jD2cRpgffx4=
Subject key identifier: 4B:28:26:FE:39:D1:C2:15:61:B1:BB:27:A7:96:28:1C:5D:C0:08:90
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 019EE8202BB30813CEBD6BC2A635145DECC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
Manifest number: 0CC6
Signing time: Sun 21 Jun 2026 03:01:22 +0000
Manifest this update: Sun 21 Jun 2026 03:01:22 +0000
Manifest next update: Mon 22 Jun 2026 03:01:22 +0000
Files and hashes: 1: 6ZQF7o9djnZOkL1mvdHomsEoCeg.crl (hash: vgGvnHTSMmhUWp0LiToe6giqnXc5gkUq+L5OC+anH4A=)
2: JzPgFYHKYPTS04-dHtGN6w7B0bw.roa (hash: JVp2jGweTk75RJ8KZ5GxFoy/wMNQLkzVhJmQPmBEuV0=)
3: wEPe2-IU5si5E4dI5okDjRdm6aQ.roa (hash: loq4xgfhON1Tk8HEm4w/II1VC6Cp9wojKbfEE5I8A4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:2b:b3:08:13:ce:bd:6b:c2:a6:35:14:5d:ec:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jun 21 03:01:22 2026 GMT
Not After : Jun 22 03:01:22 2026 GMT
Subject: CN=4b2826fe39d1c21561b1bb27a796281c5dc00890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:9d:b0:39:72:a3:84:3d:65:83:90:3f:9d:
f1:6f:f3:1c:67:48:18:1d:6b:b7:16:44:cb:f2:ca:
76:ee:5e:08:0a:cd:9a:01:bb:0e:d7:02:a5:ce:f7:
9a:1e:6b:03:ce:09:ed:09:ed:75:cb:6f:3f:bd:0b:
59:c3:3f:2a:de:2e:ce:14:46:e9:22:e5:08:af:1f:
d3:19:70:88:a5:15:39:7f:79:a6:b3:3d:77:dc:7c:
8e:1d:4d:58:93:4b:1a:fa:ed:3d:83:4f:68:93:34:
55:1f:06:18:09:56:bf:92:06:c1:bb:13:d7:ba:27:
46:fe:24:80:89:3e:9e:10:65:66:60:14:5f:b6:3e:
a4:59:32:7d:56:4f:04:b0:70:26:f8:b3:d9:b3:89:
68:59:ec:be:97:48:46:19:16:1d:42:c5:8d:ea:0b:
93:1b:dd:b1:cc:55:c5:dd:8a:91:ba:3b:a6:67:85:
93:08:7d:07:4b:89:5c:d5:eb:83:c8:0d:38:ff:b1:
00:5e:3e:af:4a:15:a0:7b:50:ad:28:c3:73:f0:c9:
fb:72:19:a0:91:c3:2a:31:23:c7:ba:d7:70:c7:ae:
ab:b1:a4:7d:34:da:3f:59:3e:3b:6c:a7:e4:f7:6e:
73:21:f3:df:f8:a7:79:be:45:d3:54:e0:32:07:4d:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:28:26:FE:39:D1:C2:15:61:B1:BB:27:A7:96:28:1C:5D:C0:08:90
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:f2:96:a6:ea:0f:8f:c1:f6:63:18:b6:2d:63:42:71:89:ca:
89:73:18:f4:9b:85:9c:db:af:e2:92:72:4e:9d:c5:c9:d5:0d:
c5:9a:31:f6:bd:46:30:be:f5:06:1a:6c:f4:05:a0:05:78:e5:
77:f5:83:5c:66:67:4a:01:b6:77:eb:a8:58:79:8f:a9:7c:f6:
ac:f6:7e:a4:28:31:45:01:ae:65:2d:16:f9:63:00:45:a0:00:
0c:7f:03:d2:23:9e:6f:27:55:67:74:03:6f:1f:e0:d2:f2:84:
94:5e:1f:53:f2:60:c9:3a:24:3f:ff:29:b5:76:4f:0e:f5:e1:
24:cc:97:d3:b7:e6:6e:44:bc:bd:ca:26:49:9d:c3:c4:a6:bf:
b6:13:da:c3:49:c1:b4:5d:61:3d:f9:0f:0f:e6:d6:e3:87:56:
d4:85:44:b4:e9:88:f9:db:fd:ba:33:d5:7b:f2:d4:dc:33:9f:
b2:8d:3b:a5:7a:b2:fd:a0:4b:78:04:cf:1c:2f:5c:7c:75:12:
94:5f:b4:d3:a9:d1:35:5a:6a:9f:0a:43:70:c3:64:08:64:26:
e7:6d:57:56:1d:62:ab:d1:cd:9c:d3:af:ff:0e:69:2c:3d:44:
d6:b1:cf:40:04:77:09:00:08:dc:e3:11:af:04:f3:43:a8:fa:
51:6a:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:10:24 2026 by rpki-client