Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.mft (raw, json)
Hash identifier: NyMccin5Fr0xt5kmx8Duls8RQdJIdt/JCw1FKgrPvhk=
Subject key identifier: E1:56:E3:57:9B:BE:10:A0:07:49:0E:94:34:F0:37:77:40:38:00:33
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial: 019FA304E883328CE552083C35C90346181F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
Manifest number: 043A
Signing time: Mon 27 Jul 2026 10:00:35 +0000
Manifest this update: Mon 27 Jul 2026 10:00:35 +0000
Manifest next update: Tue 28 Jul 2026 10:00:35 +0000
Files and hashes: 1: 6s3B4kf6qVMYCCpKxe29gFEfjfc.crl (hash: 8Ic5IgBza/SsJunAa7HBvFlaOwPvF1xPelIuX+1tvQU=)
2: H8hy3M-dZbF5LF-bLNKLGkSAiM8.roa (hash: QhTyNMDXFYnK58Oe3Oi5QvMxyGR5QCyt3DqruWhYNhc=)
3: HCRPp5sqGGtIFHlFpCyszLUz01k.roa (hash: cvHb6PDwmvy9cnfO0m3z8Rn9MwuFaJOfZKh3d+uRF+I=)
4: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (hash: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk=)
5: fPuins3lFUZ1jY8d9PDJqkylDns.roa (hash: AByQCiojVMPZv7xB+mvq4iwdIkbNNsl1NPcp0f8rA/A=)
6: jLnRiuqaeMjm778rNoTsOOpbmqk.roa (hash: O+LqSjIvdiGCJU85S8encdf0tP/8HNlkHBkVyyeQEYw=)
7: nky6VY8kQKqSy_Jo_ry1YB-6XXk.roa (hash: YIoLB/kdYI0wpUMtQO8K9AaO+DoKlWfs1MurD/HYA/k=)
8: yWPqOgOBvju_AqBpcll2n69Siyg.roa (hash: r7Vqk0QTVCvbIxJGhQ/NDTG06WGq4j4lpvgrIiORKak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:e8:83:32:8c:e5:52:08:3c:35:c9:03:46:18:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Validity
Not Before: Jul 27 10:00:35 2026 GMT
Not After : Jul 28 10:00:35 2026 GMT
Subject: CN=e156e3579bbe10a007490e9434f0377740380033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:99:90:37:fd:13:04:a8:e1:0e:51:5b:fe:
a6:32:3b:ae:58:a3:c0:af:ab:87:29:d5:0c:ba:ab:
35:dc:a2:82:0a:8c:4e:b9:14:97:e4:e1:49:fd:64:
7b:ab:f7:bb:f8:83:f6:7e:5f:49:6f:ad:fb:81:45:
0c:54:a3:28:36:82:dd:63:0e:a4:2d:bb:0d:93:25:
8f:6c:03:10:4d:4c:7f:5e:08:8e:4e:04:b3:69:0c:
9b:37:b3:d5:25:ea:47:b4:e8:94:d6:90:17:3b:b3:
c1:7e:01:12:2f:44:c3:43:6f:e6:64:78:e9:74:d0:
0c:ad:61:5d:5e:6c:e3:8c:96:64:e4:fb:7f:e1:80:
b7:f3:49:23:dc:7e:86:ea:99:af:b1:26:fb:e4:b8:
1f:fc:8f:25:9b:e6:b2:00:fa:c4:e5:3e:6c:65:76:
d8:19:ee:57:48:9f:5a:3d:96:69:c4:fc:57:94:60:
43:5d:e2:17:44:22:4c:d9:5e:e9:f2:fe:f3:a2:ea:
f0:49:0a:20:71:ce:97:34:cb:c9:43:ce:b1:ee:07:
51:5d:50:c3:6a:3e:8a:b3:51:4a:70:77:e5:67:9f:
1c:99:02:21:8a:2b:53:52:0c:ee:e1:3f:36:10:de:
c7:2f:34:f5:a5:16:f6:f0:8c:8a:5d:8b:2c:44:39:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:E3:57:9B:BE:10:A0:07:49:0E:94:34:F0:37:77:40:38:00:33
X509v3 Authority Key Identifier:
keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:5c:95:c2:43:e8:97:c0:65:bf:56:91:e2:b9:77:12:8c:
3e:48:35:a8:8a:eb:20:08:43:d3:66:f9:95:4c:28:d1:a6:c9:
7e:5a:38:6a:89:c7:43:b1:48:ab:8b:bc:76:88:cb:01:ec:e9:
17:81:f0:73:a6:cc:90:ee:a9:82:eb:b3:39:58:82:35:2b:43:
65:ec:71:d0:90:32:b0:51:57:9a:f7:58:4b:1e:cd:3b:19:c6:
5c:d3:19:49:9e:6d:23:77:db:af:69:83:72:99:df:ff:7e:25:
6d:74:8b:5d:c7:b4:40:92:be:6f:de:ca:69:44:b9:cf:76:8c:
82:52:88:54:ba:21:04:92:82:22:50:1d:92:d5:06:08:e0:75:
3d:89:6c:5a:e3:3a:1b:d0:87:1c:e9:50:2d:f3:17:a8:51:57:
a3:52:67:55:3f:a0:b4:b0:ff:1b:56:c5:4c:d9:c2:a4:3e:f2:
ff:dc:42:01:20:20:0b:fa:59:8f:bb:45:cf:2f:7a:c2:bf:f1:
b7:7a:e5:19:71:c1:c6:b6:e7:8f:af:0d:f3:ff:a3:47:66:d0:
45:c0:11:97:65:81:3d:50:96:ce:17:be:89:e0:3f:10:7c:d9:
0a:21:39:a0:57:41:76:6c:83:1e:4b:c1:98:5e:f0:4e:af:68:
3e:87:cd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:06:58 2026 by rpki-client