Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: drxJ/sOP5ctZtGN0c38AjxLmB5v+gjy7gmUhl8IG7EI=
Subject key identifier: 06:1F:31:1B:32:2A:03:CC:E4:35:05:43:49:43:56:51:BA:43:8D:6A
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01A0024B35D8CCF51F4C9CB7191C2AC30B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 22:01:18 +0000
Manifest this update: Fri 14 Aug 2026 22:01:18 +0000
Manifest next update: Sat 15 Aug 2026 22:01:18 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: HNC+nTEzN5gooyGJ4i9icL24fXuGzXnpvEKZsHSFqac=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:35:d8:cc:f5:1f:4c:9c:b7:19:1c:2a:c3:0b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Aug 14 22:01:18 2026 GMT
Not After : Aug 15 22:01:18 2026 GMT
Subject: CN=061f311b322a03cce435054349435651ba438d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:75:4f:60:22:af:fb:a3:15:f1:d8:78:6d:70:
6d:32:cc:9d:d7:5c:6a:a7:7a:1c:f4:2b:8c:34:58:
44:64:ef:37:fd:30:9c:db:d5:d0:80:fa:ad:eb:8a:
c7:58:18:dd:88:da:82:b6:d5:d2:13:82:a3:6e:eb:
be:67:27:b6:3b:8d:77:56:b3:15:74:4b:31:87:55:
61:97:a5:29:be:0c:2a:f7:ee:83:7b:3b:f7:47:d4:
f5:62:e4:b6:eb:89:39:26:37:f1:c6:a1:71:53:ab:
8d:4b:0e:ca:bc:d3:d0:4b:08:db:1e:5c:db:7d:9c:
90:9c:b5:35:02:60:67:09:fd:43:8d:bb:c3:60:5d:
87:e1:4d:3c:da:1b:0d:46:38:43:16:4d:fb:56:c4:
fa:41:b9:8c:50:90:57:f6:ef:24:5c:fd:1e:e1:f5:
dd:e8:f6:b7:5c:89:8d:1d:85:18:ca:24:f7:5e:19:
65:d5:c1:73:8a:8a:a5:98:f8:b4:ed:c3:12:0d:3a:
7f:8a:b6:36:45:cd:02:1f:a7:c4:21:09:3c:7c:ec:
7e:a8:86:28:aa:37:5e:a1:77:25:66:65:ca:76:fc:
2e:2a:e4:12:9e:20:a9:18:69:59:08:8b:c6:75:70:
9b:d4:01:18:20:b5:27:16:b1:56:b6:c3:6c:bb:e1:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:31:1B:32:2A:03:CC:E4:35:05:43:49:43:56:51:BA:43:8D:6A
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dd:74:60:82:7e:1b:e4:dd:47:03:a4:e3:60:ab:4c:01:85:
3d:14:10:3d:9a:8b:a7:b3:dd:53:e0:63:86:0c:ef:de:b3:e5:
c0:43:45:0c:44:85:2d:c7:87:ce:5c:52:60:d6:6e:10:3e:4f:
3a:6b:13:96:47:09:6b:a3:ef:6b:66:c3:60:e3:d5:6c:cc:cd:
91:45:3b:98:e3:f7:03:c4:b4:f8:6c:37:22:c2:40:03:f7:0e:
55:c5:d9:18:b0:25:38:bd:30:9b:08:0f:37:8d:c8:7d:e8:29:
31:d0:c5:a7:74:06:96:cd:95:15:f0:09:27:35:7f:1d:74:a5:
ca:ed:ab:86:ee:9a:e5:5a:03:54:fa:4d:91:14:11:2b:b3:bb:
0b:cf:0b:af:c5:4e:bd:d0:f5:28:d1:32:38:29:55:b8:4e:8a:
62:d2:18:c5:9c:77:ce:ba:d9:af:a8:05:0e:76:69:b4:f1:12:
23:7f:09:91:4f:49:2d:7c:50:4f:fd:63:12:a1:b5:36:39:95:
6b:5b:fa:64:95:a8:e1:0e:a4:81:1d:0c:bf:12:90:01:d6:88:
b7:0e:81:d1:05:c2:56:a3:a6:90:57:e0:3d:4c:3f:7d:1f:7f:
ea:a0:7c:e8:ce:dd:48:46:16:2e:3e:7b:d5:e7:e4:04:68:fe:
6a:82:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:12:15 2026 by rpki-client