Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: +PFFD4dvuZdXGgn0QN7vWtVZt/8eIK0yosW07R2Lf3A=
Subject key identifier: A0:A3:42:40:16:33:DF:C0:A3:B5:B3:29:84:DD:C6:60:AB:AF:BB:B4
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019D39AED4169F7DC124572CF2400892AC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 13:00:51 +0000
Manifest this update: Sun 29 Mar 2026 13:00:51 +0000
Manifest next update: Mon 30 Mar 2026 13:00:51 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: Cj0SgHwY0tdfCnnyDkLs5HsjzmwsEQxx7UqgvS1uQjI=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d4:16:9f:7d:c1:24:57:2c:f2:40:08:92:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Mar 29 13:00:51 2026 GMT
Not After : Mar 30 13:00:51 2026 GMT
Subject: CN=a0a342401633dfc0a3b5b32984ddc660abafbbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:a3:e6:5a:8c:c4:18:d8:fb:cc:59:d8:55:
a2:a0:89:17:10:d8:34:c9:7e:de:5e:3d:5d:f6:44:
81:39:28:eb:60:2d:24:1f:65:a6:e8:83:c6:9a:03:
99:13:1f:b7:2e:41:ff:17:f5:e3:c1:c8:e5:a5:ee:
a7:0f:7d:60:92:f4:69:ba:b0:ad:95:9e:de:5e:4f:
87:5d:62:2b:65:1d:9e:99:6e:8d:c6:1c:28:4d:d4:
51:9f:41:d9:b0:16:8b:d4:9a:e3:eb:16:9d:fb:b3:
fc:7b:f4:8f:c2:e2:b6:e2:ab:d4:14:e4:c6:2f:47:
b6:66:89:e7:94:ee:8a:50:ca:49:41:84:83:53:fc:
70:36:cf:c8:b9:0d:d5:05:51:84:50:7e:53:da:a4:
4e:ad:67:0b:f5:a0:41:9f:da:a8:9a:8f:ec:ac:ee:
cd:e6:df:09:89:13:a0:0b:df:bf:4a:d9:c3:3e:89:
40:26:15:f2:4e:af:27:00:7b:c2:a4:d8:13:13:ac:
8f:01:44:db:23:ca:a1:e1:a2:03:d9:17:ad:3d:a7:
9d:70:68:2f:d0:92:4a:da:cb:ac:b4:96:5a:37:52:
00:78:49:13:98:b4:0f:81:ce:1b:83:76:e0:64:37:
e2:c6:a2:4e:9e:a0:57:48:22:a3:e2:6b:80:8d:8e:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:42:40:16:33:DF:C0:A3:B5:B3:29:84:DD:C6:60:AB:AF:BB:B4
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:85:e1:8c:08:1f:21:83:67:ea:c7:2f:0e:f3:11:ef:2a:74:
f1:23:17:6a:2b:a0:71:65:ee:bc:4a:80:e6:d0:66:4a:82:18:
47:6e:f7:9e:54:38:d2:e5:f0:6b:c2:dc:08:9e:6c:67:2c:a8:
f0:d4:d6:4e:24:d5:e2:b2:a0:19:0f:05:3e:59:57:94:4f:36:
08:8b:97:89:36:60:bc:1b:f3:7a:43:43:c4:b4:6e:20:50:9d:
a1:21:20:bd:05:ce:90:6c:17:40:69:69:db:08:b7:57:3b:de:
2f:d4:61:e3:7e:d5:cb:b5:aa:08:95:95:b8:a3:aa:ff:47:9d:
15:af:cb:59:8d:5e:44:c1:70:fc:97:e2:cd:86:e2:9d:49:d5:
da:e6:45:e7:70:20:3f:89:6d:03:a9:83:9d:b6:7e:1c:a9:25:
02:ab:1d:8a:3c:50:2f:fb:10:e3:e9:f3:ad:9c:98:4a:05:28:
90:d9:d4:f9:63:0c:f6:8b:e6:a3:21:2e:e4:ab:62:5f:c2:fb:
bc:e4:79:6a:dd:5e:93:ae:85:58:6a:5b:1a:3c:b2:c7:bd:df:
ef:e8:ec:c0:66:7f:74:57:fe:40:b1:1d:1b:9e:73:00:5f:bb:
1f:aa:6f:87:29:d5:18:94:ee:d0:69:9d:f7:2d:7d:e8:c5:b1:
2a:23:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:55 2026 by rpki-client