Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
File: 6T7pptFATGHrGbArAtdNqDpmM9o.mft (raw, json)
Hash identifier: r3wEml9SkS9jeR6i0qj5oz3Y7h3XsjlvPBeAwtG+xsg=
Subject key identifier: 2B:7E:5A:23:D6:DA:BC:6E:09:98:60:D6:18:FB:3F:31:1F:17:95:49
Authority key identifier: E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
Certificate issuer: /CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Certificate serial: 019FA0E0BDF3D26C5B68FBD2A1AF5BEBB1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
Manifest number: 04D4
Signing time: Mon 27 Jul 2026 00:01:50 +0000
Manifest this update: Mon 27 Jul 2026 00:01:50 +0000
Manifest next update: Tue 28 Jul 2026 00:01:50 +0000
Files and hashes: 1: 6T7pptFATGHrGbArAtdNqDpmM9o.crl (hash: YkNZ5k9pO2IAHdrxSJnHvNwLIYx0+LQ99IBUa5C1LYk=)
2: aZnRHxW5PVhcTWQfAiwj8BEmoD4.roa (hash: C3FEhE9zrGO1uX5TJRCXxFkvyY4vNtfAgcn0ttqcftY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:bd:f3:d2:6c:5b:68:fb:d2:a1:af:5b:eb:b1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93ee9a6d1404c61eb19b02b02d74da83a6633da
Validity
Not Before: Jul 27 00:01:50 2026 GMT
Not After : Jul 28 00:01:50 2026 GMT
Subject: CN=2b7e5a23d6dabc6e099860d618fb3f311f179549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:94:c5:30:02:24:c7:44:76:fd:52:6a:3d:
0f:dd:a5:cf:10:55:9a:47:48:c3:9c:16:e3:d2:c2:
c7:d0:5b:0d:37:11:c3:ca:b1:d7:58:5a:2f:a7:a2:
8e:df:56:8b:8e:5d:e5:96:0c:50:86:53:b3:22:11:
e2:f1:78:67:62:8c:0f:5f:5c:4d:48:70:2a:d7:e9:
16:4e:d6:1b:06:62:68:a5:ec:19:8a:63:62:16:cf:
40:db:d5:8c:bc:03:80:bc:4c:ef:bf:b0:75:ad:63:
f9:1d:c7:0a:bb:25:e7:cc:a4:64:06:9b:85:36:47:
29:81:6c:4b:fe:69:b9:76:c5:26:0b:0e:11:00:8f:
a7:f4:e6:39:c6:20:72:1b:59:ae:95:6a:9b:3a:63:
a5:34:15:44:5a:d0:4c:5a:fe:4a:e8:e6:72:0b:c3:
f8:c4:b3:1b:1b:5c:e0:ae:09:20:3a:5b:b0:a5:07:
e1:fa:79:30:15:e0:a7:90:86:e6:de:f7:7d:41:72:
28:1f:ed:bd:f8:fc:a0:da:d6:90:5b:c6:9b:36:92:
00:eb:e1:6a:3c:17:8a:87:2c:ff:1b:dd:09:24:19:
73:55:86:d8:b7:b5:ea:0b:81:8e:60:b5:ee:72:08:
09:8a:1a:92:77:3c:ec:8c:bd:d5:5f:18:ba:f5:9c:
92:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7E:5A:23:D6:DA:BC:6E:09:98:60:D6:18:FB:3F:31:1F:17:95:49
X509v3 Authority Key Identifier:
keyid:E9:3E:E9:A6:D1:40:4C:61:EB:19:B0:2B:02:D7:4D:A8:3A:66:33:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T7pptFATGHrGbArAtdNqDpmM9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4508c4-332b-403c-9f56-db905913cb87/1/6T7pptFATGHrGbArAtdNqDpmM9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:c0:c2:32:34:0e:42:95:56:10:5a:7e:b9:8a:2e:b3:a3:
d0:08:84:bf:b4:c3:ad:7c:10:4d:b2:c5:3b:bb:22:28:c7:8c:
4f:24:de:7b:62:a8:9a:01:63:14:8e:c1:e9:76:c9:27:dd:c8:
cb:2f:5c:24:1a:ca:62:4e:9a:38:f1:23:e6:ea:96:a7:19:11:
25:8c:33:28:68:09:5d:b9:f7:c0:1e:06:fb:c9:be:b6:d6:73:
1d:99:e2:a7:b3:41:9b:b4:27:65:9f:ef:f2:41:64:7b:e2:b4:
7f:0e:a6:27:a7:74:86:fb:fc:9a:fd:6a:57:e1:05:8d:de:58:
0d:40:38:13:3a:40:cc:89:09:a1:76:07:e1:43:de:d2:56:98:
af:7e:a6:78:c2:f8:74:ae:89:6f:2d:0a:5a:26:1b:18:7f:2f:
17:7a:62:89:21:91:93:31:aa:d8:ff:b9:39:f7:a5:08:5a:66:
5b:7c:43:48:83:68:ac:af:c9:8d:40:13:f2:5a:ee:86:7a:df:
db:eb:53:86:ca:99:68:ab:c9:98:d1:80:b6:84:5f:7a:61:95:
06:fc:3b:f5:9b:1b:8b:98:25:f8:d3:02:7f:3e:7d:48:7a:14:
22:93:67:20:e6:d4:3c:2c:d5:05:47:fe:2f:fd:cf:74:84:09:
3a:b3:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:08 2026 by rpki-client