Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: xQbXOUfTKSlprBrmnWMEbpQYNn7krSrK0yNM5b2ecMo=
Subject key identifier: 8D:4B:77:4D:62:72:9E:68:B4:39:F5:A3:ED:92:E4:4B:46:33:F3:24
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019F189E76C162E75623F82D1F105FABBC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1919
Signing time: Tue 30 Jun 2026 13:01:05 +0000
Manifest this update: Tue 30 Jun 2026 13:01:05 +0000
Manifest next update: Wed 01 Jul 2026 13:01:05 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: topiOR1urXjMmtTcpQJEag047WaW6qQb2xa+8nl/hUI=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:76:c1:62:e7:56:23:f8:2d:1f:10:5f:ab:bc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jun 30 13:01:05 2026 GMT
Not After : Jul 1 13:01:05 2026 GMT
Subject: CN=8d4b774d62729e68b439f5a3ed92e44b4633f324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:20:f4:14:01:66:34:d0:0d:a2:65:3e:1c:
12:28:c0:2c:8c:34:56:5a:f4:06:72:87:3a:a3:93:
33:59:7d:ea:e8:5c:a1:f4:3a:f8:4d:a3:d9:5f:da:
72:2e:1b:85:e5:10:98:ab:a4:4c:f7:83:c7:a7:97:
13:72:cc:6f:6b:91:c4:cd:19:e2:49:c3:37:0d:1a:
f9:a2:c7:e6:b8:51:e5:a3:fe:82:7e:80:36:cb:04:
bf:b1:52:42:2d:fa:73:14:40:1d:ba:d3:ed:65:49:
83:98:69:aa:7a:c7:c1:b1:17:80:1b:e8:e2:0a:1e:
e6:ec:8c:f4:00:e4:53:2d:29:cf:4d:24:a3:30:70:
eb:16:0e:7e:17:01:90:23:60:4f:53:ba:a6:2f:a9:
41:36:c1:45:d1:b3:b3:5b:f3:04:01:21:2f:24:bb:
03:c9:68:2f:37:80:5c:0b:67:c6:5d:5d:ef:d1:1e:
09:6c:21:d6:60:af:26:62:dc:f0:27:b5:5d:19:3e:
2f:40:34:4c:0f:d3:8f:8f:71:d4:2b:2e:f3:59:fa:
2a:73:e3:e9:c9:51:22:76:1d:5b:6d:e9:20:4c:1b:
b5:45:6f:0a:66:b2:97:65:5a:d7:92:fa:f9:39:41:
b2:d6:b8:b2:9e:c4:5e:ce:e6:67:56:19:0f:76:08:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:77:4D:62:72:9E:68:B4:39:F5:A3:ED:92:E4:4B:46:33:F3:24
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:61:38:32:bd:8d:c6:c6:40:f0:30:12:53:4c:b4:88:99:1b:
71:38:ee:43:51:5b:50:41:91:13:23:a3:ca:b5:42:71:f1:bb:
8f:05:96:0b:5e:7e:9d:eb:6d:bf:56:9b:af:75:27:67:ce:32:
98:62:ae:73:d1:50:1c:de:62:7f:4a:49:17:90:0b:d8:67:5a:
3e:4a:fc:69:07:dd:b0:ea:13:0e:f6:8d:fd:e2:9b:41:1c:ad:
59:55:12:d9:0f:bb:d6:1c:d4:a7:f0:a8:79:b1:e3:49:07:1f:
99:1d:82:63:42:f9:96:41:0b:ba:b2:37:32:92:0c:cc:f8:a7:
a1:8a:42:eb:a2:9e:a9:24:77:d6:b5:09:80:d6:bb:66:10:d2:
63:7d:54:9f:cb:02:e9:37:d2:d5:29:4b:8e:fe:26:d9:30:ed:
67:b0:84:eb:1f:87:5c:f0:3e:a5:65:89:ee:30:e0:54:04:e0:
04:9e:a8:15:69:45:67:a2:7f:37:ce:88:55:18:a3:a1:60:27:
d9:58:fa:fc:07:33:ba:4d:0d:1d:60:d7:b4:0c:bd:dc:e2:c6:
f9:1b:73:33:a2:d4:53:48:df:0b:2b:51:79:58:2c:9f:96:e8:
fa:7a:42:38:2c:af:51:7f:da:38:71:15:6b:dd:24:c3:b2:31:
ce:62:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:39 2026 by rpki-client