Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
File: 6zlyC79FBhEPkD017RJJvUkeqLs.mft (raw, json)
Hash identifier: U+CUyRspvdA+O6uKJXL9jNP3M5add6yyPqH8fJgf/yo=
Subject key identifier: 8A:FF:77:6F:1C:DB:AC:7E:29:09:E1:9C:27:33:C9:57:56:87:22:F6
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019FA184A841032F90D317998B233B436637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
Manifest number: 0187
Signing time: Mon 27 Jul 2026 03:00:53 +0000
Manifest this update: Mon 27 Jul 2026 03:00:53 +0000
Manifest next update: Tue 28 Jul 2026 03:00:53 +0000
Files and hashes: 1: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (hash: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=)
2: 6zlyC79FBhEPkD017RJJvUkeqLs.crl (hash: eicDcqt8AnbvgjyIsgZem6Mv9/GYixQQ89cK4bjHWWU=)
3: mAUXHWg9xwo5F85IXm5SVffTuuA.roa (hash: GCJWVxe5b23c6JrLrMVtSOWuGjfgn1uA/TJ0/8z7eXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:a8:41:03:2f:90:d3:17:99:8b:23:3b:43:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Jul 27 03:00:53 2026 GMT
Not After : Jul 28 03:00:53 2026 GMT
Subject: CN=8aff776f1cdbac7e2909e19c2733c957568722f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:c9:dd:d1:b6:80:ca:7d:6f:cb:de:89:05:
2a:3b:08:8a:58:ed:d8:74:8e:ab:c6:9b:61:f9:ee:
60:a4:66:45:04:33:de:a5:b7:68:6e:90:ab:cb:09:
36:64:fa:9c:71:1f:7a:95:48:4b:c3:57:32:98:78:
9e:67:24:42:26:14:1f:96:c9:a1:ed:ef:00:8c:e6:
bf:d2:f9:45:7d:72:a5:31:ca:17:c3:da:c6:a6:3b:
fc:09:ed:95:4e:b2:ba:e1:31:37:94:d4:e3:9f:c3:
06:4c:75:7e:a0:41:92:3d:e9:f7:e2:49:b3:36:14:
b4:b4:01:44:c9:ac:dc:06:3a:39:3f:6f:c2:ae:19:
14:a6:49:f1:7d:8d:d5:fb:44:be:9d:52:ab:c8:51:
30:6f:74:88:63:ef:a0:8f:21:62:90:99:79:5e:f9:
c3:fb:dd:00:b1:99:b7:c5:e8:6e:ac:5f:9b:6b:96:
38:53:1b:cf:ef:96:c3:e2:03:d7:58:fe:16:4e:8b:
c3:6a:8b:d9:84:7d:41:e4:7e:19:7c:38:bf:25:b1:
b9:ed:52:1b:d6:ed:67:e1:93:4a:11:ea:fd:15:4c:
0a:50:20:a0:d3:51:19:0b:bd:e5:ae:ac:d5:f2:52:
c1:7e:3e:c3:86:32:e8:33:10:8b:b6:e8:45:66:47:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:77:6F:1C:DB:AC:7E:29:09:E1:9C:27:33:C9:57:56:87:22:F6
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:e7:ef:83:50:dd:a7:c3:bf:6f:e0:f8:b9:91:93:9b:21:
84:30:18:8a:1e:05:d5:9a:7c:93:dd:7b:2f:23:36:f8:e3:e9:
0a:50:d6:e3:9d:74:65:3e:ce:d7:78:a9:30:13:8f:22:17:03:
ee:80:95:a7:38:4d:bd:67:6e:18:8f:eb:8b:bc:b8:ad:05:46:
b7:29:8d:1c:e6:2b:7d:62:f5:b1:2f:2f:e3:df:ed:c2:78:19:
a2:57:8f:9b:0a:df:6c:d1:b7:13:a4:9a:a4:3b:ce:ee:d1:48:
d5:64:a1:5f:54:00:d9:14:a5:e1:83:be:c9:10:ff:d7:44:c4:
7c:b6:c0:c1:6b:3b:6b:cc:3f:e9:6f:34:79:1f:af:c5:68:1a:
84:da:bd:97:8f:00:0d:e3:9f:58:0e:12:ac:6c:b3:c8:f2:ee:
8d:b4:c7:1d:89:5d:f3:2c:bc:ea:13:51:3f:73:29:11:cb:77:
7e:4f:b4:3e:9b:3e:8a:71:50:de:59:4f:1e:6b:6c:2c:b1:42:
90:8a:ad:85:58:8f:b3:55:cd:cb:11:3e:47:b4:62:83:46:26:
09:ae:4b:1b:10:9c:c1:7c:f1:01:d7:32:8f:e8:9b:6c:07:80:
93:87:4c:82:b3:7a:18:ff:38:a6:96:d6:da:08:81:df:ba:e1:
31:44:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:29:24 2026 by rpki-client