Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
File: 6rQDOf6nhnTLY0k0UbHTGhazOOg.mft (raw, json)
Hash identifier: TYOYEEe/18aKhBjJaeh3feMKS/zJlbRhtaCIcoQ3vyw=
Subject key identifier: B3:7C:C6:C1:46:15:9B:9E:39:D0:41:00:0D:F5:69:A6:A6:CF:83:89
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 019F9EF23DC88482470304E534B6FE1AB9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:01:43 +0000
Manifest this update: Sun 26 Jul 2026 15:01:43 +0000
Manifest next update: Mon 27 Jul 2026 15:01:43 +0000
Files and hashes: 1: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (hash: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=)
2: 6rQDOf6nhnTLY0k0UbHTGhazOOg.crl (hash: ag7BaNopdCZYgu2MgKpDoV8tlNNzyvJNtwehSBNEh0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:3d:c8:84:82:47:03:04:e5:34:b6:fe:1a:b9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Jul 26 15:01:43 2026 GMT
Not After : Jul 27 15:01:43 2026 GMT
Subject: CN=b37cc6c146159b9e39d041000df569a6a6cf8389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:56:24:9c:2c:48:39:f5:76:2d:23:bd:7b:9e:
5e:f3:61:d8:8f:3c:36:14:11:a2:46:b4:05:f3:49:
c9:75:4c:91:19:40:3c:62:ca:60:e2:ad:d5:62:45:
cd:98:3d:1a:39:24:fb:0f:cb:f9:0a:27:25:ac:cc:
e5:72:f7:46:2b:ea:79:5e:c4:48:bc:f4:30:35:c6:
4a:a1:c8:2a:9f:f6:c6:4e:e7:35:1b:3a:a6:6b:c7:
21:8f:cb:1f:83:53:52:7a:a9:fb:7d:fa:dd:1f:aa:
71:1f:6e:af:97:da:a2:bb:d9:ad:7f:eb:5d:c5:ac:
a0:8e:35:50:9e:d4:3d:5a:77:dc:48:9a:f4:ea:38:
d6:bc:96:c8:eb:0f:90:e5:d2:ac:e6:1f:97:c8:6e:
8d:42:b7:34:8f:90:ee:ec:0e:c9:64:3b:57:09:24:
99:1a:6f:ca:b7:58:2b:2f:fc:82:31:7a:7d:7d:5c:
71:56:5b:40:4c:c3:b8:19:20:37:11:bf:84:93:d5:
4d:6d:fb:80:e7:c0:f2:b5:2d:da:e0:57:36:24:05:
ff:2c:69:f9:4f:f8:93:a2:5f:9d:01:da:d8:80:2e:
6d:24:b8:95:d2:eb:22:03:78:a3:73:65:86:27:59:
5f:81:70:57:6e:2f:d8:ee:f3:d5:22:65:06:27:64:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:C6:C1:46:15:9B:9E:39:D0:41:00:0D:F5:69:A6:A6:CF:83:89
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:94:59:3a:42:40:7c:03:4e:c3:75:f9:c9:b1:6b:1b:e0:
4c:57:b2:fe:cc:c3:b0:c1:b2:60:e9:72:1a:5f:16:45:a0:dc:
01:4d:c3:0c:38:6c:fe:10:8c:0c:45:5b:ea:de:84:b3:48:b1:
e6:04:b0:8e:c5:8f:42:cf:ba:df:3e:d4:37:3b:dd:dd:2f:0f:
f3:85:93:8f:cc:24:6d:01:ff:23:a0:c8:93:72:ec:d5:78:9d:
05:6e:a2:63:2d:bf:f0:bd:24:a1:a3:c9:70:66:a8:79:23:f7:
b9:1f:f6:df:47:9e:14:65:0b:b7:4b:2d:ef:30:44:0a:69:d3:
07:66:b3:5a:c0:f6:82:b6:2f:bf:10:ab:1a:02:d6:f3:04:e6:
fa:69:ac:f7:d9:72:cb:2f:7c:a7:a2:40:8a:c2:c5:99:ce:b8:
d8:02:d4:07:68:67:5d:76:e0:ee:a0:e3:63:9d:cc:26:81:b3:
e8:d1:8c:09:d3:1b:34:81:7d:70:8b:08:b7:71:eb:16:fe:1f:
1c:f8:3f:1e:18:06:e1:22:ce:49:5e:71:b7:f0:97:e4:18:2a:
6f:4e:d1:7a:81:56:e0:1a:c7:1e:21:f5:b7:b0:d4:70:9b:ec:
9e:14:78:0f:29:1f:4c:2b:59:83:4d:aa:30:42:25:18:bf:dd:
7f:54:3e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+e8j3IhIJHAwTlNLb+Grm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQwMzM5ZmVhNzg2NzRjYjYzNDkzNDUxYjFkMzFhMTZi
MzM4ZTgwHhcNMjYwNzI2MTUwMTQzWhcNMjYwNzI3MTUwMTQzWjAzMTEwLwYDVQQD
EyhiMzdjYzZjMTQ2MTU5YjllMzlkMDQxMDAwZGY1NjlhNmE2Y2Y4Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FYknCxIOfV2LSO9e55e82HYjzw2
FBGiRrQF80nJdUyRGUA8Yspg4q3VYkXNmD0aOST7D8v5CiclrMzlcvdGK+p5XsRI
vPQwNcZKocgqn/bGTuc1Gzqma8chj8sfg1NSeqn7ffrdH6pxH26vl9qiu9mtf+td
xaygjjVQntQ9WnfcSJr06jjWvJbI6w+Q5dKs5h+XyG6NQrc0j5Du7A7JZDtXCSSZ
Gm/Kt1grL/yCMXp9fVxxVltATMO4GSA3Eb+Ek9VNbfuA58DytS3a4Fc2JAX/LGn5
T/iTol+dAdrYgC5tJLiV0usiA3ijc2WGJ1lfgXBXbi/Y7vPVImUGJ2QqaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN8xsFGFZueOdBBAA31aaamz4OJMB8GA1UdIwQY
MBaAFOq0Azn+p4Z0y2NJNFGx0xoWszjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJRRE9mNm5oblRMWTBrMFViSFRHaGF6T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt
NmZjYWYyNzI5YmU1LzEvNnJRRE9mNm5oblRMWTBrMFViSFRHaGF6T09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1
LzEvNnJRRE9mNm5oblRMWTBrMFViSFRHaGF6T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtaUWTpC
QHwDTsN1+cmxaxvgTFey/szDsMGyYOlyGl8WRaDcAU3DDDhs/hCMDEVb6t6Es0ix
5gSwjsWPQs+63z7UNzvd3S8P84WTj8wkbQH/I6DIk3Ls1XidBW6iYy2/8L0koaPJ
cGaoeSP3uR/230eeFGULt0st7zBECmnTB2azWsD2grYvvxCrGgLW8wTm+mms99ly
yy98p6JAisLFmc642ALUB2hnXXbg7qDjY53MJoGz6NGMCdMbNIF9cIsIt3HrFv4f
HPg/HhgG4SLOSV5xt/CX5Bgqb07ReoFW4BrHHiH1t7DUcJvsnhR4DykfTCtZg02q
MEIlGL/df1Q+pw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:23:25 2026 by rpki-client