Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: CwBYnBlCrnBikcumytycdGhlXx+JSnEZ7IEyzwlVWdk=
Subject key identifier: 7F:F2:AC:D1:6F:64:8C:D1:47:C7:47:26:76:AA:25:40:4C:6D:F0:D4
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019DD087732A2664E018EBDA00BEC37EA44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1722
Signing time: Mon 27 Apr 2026 20:00:30 +0000
Manifest this update: Mon 27 Apr 2026 20:00:30 +0000
Manifest next update: Tue 28 Apr 2026 20:00:30 +0000
Files and hashes: 1: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: +8H9fWgUNpan+m5J2zaRk/AfpWExkYa3aYAI7IAQzFU=)
2: FD6SignaLxU1mMOUn7_cvBf_Yic.roa (hash: Cvxq3OA+d6hTWKtzWj2Wc5SlJWItEo3HQpee1TIc39M=)
3: jwNcE1s-makAFRG_Z0YpC8tgTEA.roa (hash: UWEBlXajJs0PyfeEOQvBkjJjVBwaTr2pthi+ykCI4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:73:2a:26:64:e0:18:eb:da:00:be:c3:7e:a4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Apr 27 20:00:30 2026 GMT
Not After : Apr 28 20:00:30 2026 GMT
Subject: CN=7ff2acd16f648cd147c7472676aa25404c6df0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:49:19:c8:d4:ea:af:3f:f6:2e:ae:72:47:
80:f5:66:0e:45:91:6b:cd:dd:7a:7a:2b:aa:c2:8f:
6a:54:27:ba:5c:71:bc:7a:a4:c1:69:26:81:18:4e:
69:fa:0e:e0:51:7e:6f:2c:2c:c5:3b:bb:4c:f0:8f:
07:f8:74:c1:3d:d5:80:9f:2e:57:e5:f6:0e:01:08:
5b:d0:ae:3e:76:ee:9c:bc:c5:db:2e:47:71:70:3c:
1c:07:53:31:59:dd:b1:c0:f0:69:3e:80:46:5b:6e:
60:78:7a:b3:eb:ad:f6:f1:52:30:7a:47:83:0d:93:
4a:37:69:22:be:a6:2b:ef:e6:32:a4:52:ab:9c:b5:
60:ac:46:43:79:f6:42:c8:75:a0:39:01:7e:25:99:
83:10:d7:ff:c2:3e:c1:81:72:de:17:05:fc:3d:8e:
13:f0:9b:f5:01:54:4f:64:68:e9:cf:f1:e2:5d:5f:
37:40:f8:f6:c4:66:b9:75:fc:4c:f8:57:f4:a5:23:
11:75:c7:df:69:bb:e8:79:57:76:3d:19:12:24:04:
33:a6:64:75:b5:48:93:35:29:04:45:08:43:0c:3a:
15:58:d8:52:43:89:30:5c:7e:0f:2f:98:ce:c4:56:
21:42:c9:51:82:aa:4c:a8:b7:03:b5:97:3c:31:c4:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:AC:D1:6F:64:8C:D1:47:C7:47:26:76:AA:25:40:4C:6D:F0:D4
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d3:66:5c:4e:2a:a2:92:39:13:b8:7d:75:05:5d:86:21:58:
21:e5:a6:c9:f6:83:2b:e2:6c:db:99:60:c4:7e:4b:d8:4a:b1:
ae:1f:d4:f5:1e:2c:9f:56:b9:2d:43:ec:8a:13:98:ee:9b:04:
26:d2:90:e3:ce:59:a6:03:c7:f2:25:e9:5e:60:32:6d:33:d4:
8d:93:66:e7:d2:f9:00:4d:cc:24:f7:8e:c9:c0:b8:f7:17:72:
61:51:af:a2:90:59:ce:f6:4d:b8:8b:19:96:8c:c6:c3:08:1a:
7a:e1:c4:1c:0e:cd:cc:88:d8:c9:05:b3:8f:ca:65:b4:89:dc:
e4:e3:11:eb:20:05:4c:01:f4:47:8a:bb:a0:4a:97:d4:00:aa:
06:00:9c:b6:75:54:e8:3c:56:69:36:6a:4c:24:83:2e:96:f6:
03:32:60:32:0a:6b:43:5a:a3:68:35:54:8c:a3:a9:e2:3c:d2:
93:da:fd:11:71:ec:4f:9f:f6:8f:86:9e:e2:05:73:ae:f0:d6:
71:d7:72:c2:57:13:36:8c:7f:c4:e3:f7:b4:0f:f1:f6:c4:5a:
ae:94:c7:3e:e1:45:da:3f:14:e6:35:de:72:84:36:2f:24:89:
44:f8:a4:55:84:8c:76:dc:52:ed:44:dd:5d:17:4a:9e:8e:70:
f1:46:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:40 2026 by rpki-client