Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: Zdm8w3CgrJ+M6h9kTQIXmI7C2chcO3HBoPeWfOIZ/K4=
Subject key identifier: 8B:2F:E4:74:18:AC:A4:53:87:75:9A:D3:1F:9F:C5:1A:43:26:33:C3
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019F18D62D08005228F1A3729F86D827D813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 17CC
Signing time: Tue 30 Jun 2026 14:01:57 +0000
Manifest this update: Tue 30 Jun 2026 14:01:57 +0000
Manifest next update: Wed 01 Jul 2026 14:01:57 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: eRj/AfEeTZoWjop1p3UYRW/EFqSXV7YgRi0GQOigcfI=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:2d:08:00:52:28:f1:a3:72:9f:86:d8:27:d8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Jun 30 14:01:57 2026 GMT
Not After : Jul 1 14:01:57 2026 GMT
Subject: CN=8b2fe47418aca45387759ad31f9fc51a432633c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:4f:15:42:ef:b6:02:79:2c:51:ba:b0:f2:
68:29:9e:51:f5:1c:90:81:17:2e:5e:4e:2c:02:0f:
8c:1e:ec:e9:74:d7:9d:1e:ec:3a:81:83:95:89:1d:
5e:eb:16:f1:e6:36:c8:7b:32:71:1e:b6:06:f2:1a:
f0:e3:41:f6:ea:49:80:a3:2c:5f:a2:de:a9:a8:78:
96:b9:09:2f:79:37:b0:c5:2c:8c:71:d3:01:aa:82:
14:70:9c:fb:1c:43:a1:37:7d:db:83:b6:0d:27:b3:
ba:21:30:e3:9c:0a:2c:43:73:f3:4b:d6:b7:22:0a:
c2:60:20:ec:f0:93:f3:47:ca:f3:92:25:26:d5:9b:
f2:f2:f9:98:6a:b1:47:81:c0:0d:91:29:ea:e9:8c:
15:d4:7d:43:8d:88:2d:e6:2c:e9:9b:ec:e8:e1:7c:
c4:35:b6:dd:1f:22:cf:a7:ff:06:16:9a:29:0a:0f:
aa:97:82:13:a7:66:4f:81:10:54:e5:e7:90:b9:d3:
83:ba:de:57:bc:ad:49:a7:fa:e9:f9:d8:ff:35:c2:
da:39:a1:29:9a:d7:c4:f1:d8:9f:3d:8c:7a:96:9e:
52:ea:e2:cf:65:84:f5:64:60:e3:cd:de:fc:67:d4:
78:45:ca:8f:14:84:99:d7:95:69:81:0f:81:db:65:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:E4:74:18:AC:A4:53:87:75:9A:D3:1F:9F:C5:1A:43:26:33:C3
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6c:4c:19:ac:12:f0:cd:d2:f3:20:1a:9e:45:d0:7e:48:f1:
82:34:e7:4b:e5:ce:ec:22:4e:3e:bd:42:e7:29:65:cc:3e:62:
a5:ce:0e:78:90:a2:44:b6:ab:36:e0:92:e7:23:86:ea:83:64:
e4:7b:3c:8b:09:ba:ff:8e:b0:56:fd:ea:91:40:71:ee:07:e9:
ad:bc:ca:24:6c:c8:e3:17:0b:d1:30:f8:46:9d:9a:bb:09:3b:
4d:f7:41:7b:ef:16:0a:c1:1a:e3:94:6b:1a:63:98:5f:74:d6:
71:c5:8f:0d:09:fb:5c:c0:5f:ad:63:29:39:db:d0:d8:87:74:
17:a0:a0:13:ec:8e:c2:33:1d:93:05:a4:21:e7:e5:33:5d:d2:
c4:a7:80:4f:d4:02:71:4c:93:14:a1:2b:d1:54:08:c8:a1:9b:
b8:83:21:85:42:1f:61:04:2f:31:ef:4f:6f:16:55:e8:37:2d:
36:95:b0:d8:71:01:57:e6:4c:6c:7b:28:86:d2:77:f2:d9:07:
c7:52:e1:27:9f:ef:61:48:63:b3:8a:a6:68:ff:53:08:59:a1:
6d:b2:06:10:37:f2:52:9e:c9:c8:b0:04:33:3a:a9:25:cf:b8:
14:5b:21:82:25:2f:d3:20:9a:9f:ca:5b:11:fa:f4:3c:87:9d:
fe:dc:34:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1i0IAFIo8aNyn4bYJ9gTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQ3NmY2NzdjZDBjMzI5OGQyODExZTYwZjQ4ZTFiMjli
M2FmZWYwHhcNMjYwNjMwMTQwMTU3WhcNMjYwNzAxMTQwMTU3WjAzMTEwLwYDVQQD
Eyg4YjJmZTQ3NDE4YWNhNDUzODc3NTlhZDMxZjlmYzUxYTQzMjYzM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqBPFULvtgJ5LFG6sPJoKZ5R9RyQ
gRcuXk4sAg+MHuzpdNedHuw6gYOViR1e6xbx5jbIezJxHrYG8hrw40H26kmAoyxf
ot6pqHiWuQkveTewxSyMcdMBqoIUcJz7HEOhN33bg7YNJ7O6ITDjnAosQ3PzS9a3
IgrCYCDs8JPzR8rzkiUm1Zvy8vmYarFHgcANkSnq6YwV1H1DjYgt5izpm+zo4XzE
NbbdHyLPp/8GFpopCg+ql4ITp2ZPgRBU5eeQudODut5XvK1Jp/rp+dj/NcLaOaEp
mtfE8difPYx6lp5S6uLPZYT1ZGDjzd78Z9R4RcqPFISZ15VpgQ+B22WLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsv5HQYrKRTh3Wa0x+fxRpDJjPDMB8GA1UdIwQY
MBaAFOq0dvZ3zQwymNKBHmD0jhsps6/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTkt
MDdmMTk1MGQ4ODk0LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NTdhOTItNjIyMC00NDI1LTg4OTktMDdmMTk1MGQ4ODk0
LzEvNnJSMjluZk5EREtZMG9FZVlQU09HeW16ci04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2xMGawS
8M3S8yAankXQfkjxgjTnS+XO7CJOPr1C5yllzD5ipc4OeJCiRLarNuCS5yOG6oNk
5Hs8iwm6/46wVv3qkUBx7gfprbzKJGzI4xcL0TD4Rp2auwk7TfdBe+8WCsEa45Rr
GmOYX3TWccWPDQn7XMBfrWMpOdvQ2Id0F6CgE+yOwjMdkwWkIeflM13SxKeAT9QC
cUyTFKEr0VQIyKGbuIMhhUIfYQQvMe9PbxZV6DctNpWw2HEBV+ZMbHsohtJ38tkH
x1LhJ5/vYUhjs4qmaP9TCFmhbbIGEDfyUp7JyLAEMzqpJc+4FFshgiUv0yCan8pb
Efr0PIed/tw09g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:51 2026 by rpki-client