Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: Uui1SDxEe9X44q1km7DTSewxhN6aIprzwN4kJ7xce4g=
Subject key identifier: 4D:AB:7D:64:64:E3:AD:44:60:3C:DC:78:3A:B3:B5:93:BB:BC:FB:85
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01A140F12B485411CA7B5AD08C02BF4B011A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1A37
Signing time: Thu 15 Oct 2026 19:01:49 +0000
Manifest this update: Thu 15 Oct 2026 19:01:49 +0000
Manifest next update: Fri 16 Oct 2026 19:01:49 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: LkZ/95gYd4RpplAoCTwrQttoSfFL85BC/XZ2FUGUYaU=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:2b:48:54:11:ca:7b:5a:d0:8c:02:bf:4b:01:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Oct 15 19:01:49 2026 GMT
Not After : Oct 16 19:01:49 2026 GMT
Subject: CN=4dab7d6464e3ad44603cdc783ab3b593bbbcfb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:06:05:f6:ac:75:91:0e:fe:34:03:99:1e:
7a:bf:5a:38:ce:6a:53:3b:d1:69:ac:8b:58:6a:14:
d8:79:93:6b:cb:7f:6c:8f:e5:38:20:f8:e4:53:a9:
ca:8d:5f:cc:84:cf:c6:63:28:45:9d:b3:c2:2a:3d:
19:87:02:e9:e4:4e:07:5b:12:80:51:57:7f:f0:f5:
8d:46:6a:c4:5f:87:43:f6:0b:fc:82:28:aa:3e:ad:
72:be:b5:98:69:6f:4a:28:75:18:b7:9f:b2:8d:22:
15:97:f5:03:7c:98:52:25:62:5a:ac:ba:d8:3e:05:
38:22:7d:7c:4d:47:92:a5:c3:b3:9b:bd:bb:38:80:
f8:e4:3b:0d:ea:d4:0c:4b:d5:f9:a4:8e:41:ef:e1:
4f:a3:38:69:7b:b5:8e:ca:1b:5c:e4:50:00:e0:43:
08:10:fa:73:8b:91:01:d1:97:b8:97:db:19:44:a9:
b6:56:35:11:f4:ef:e4:53:b0:5c:71:30:7d:30:16:
86:17:87:11:c8:26:8b:ef:9d:d2:dc:33:80:e3:e8:
49:cc:3a:b1:e2:b7:4c:3f:63:c6:9e:2c:39:ab:98:
52:e1:04:30:24:fe:85:42:ee:04:44:62:cc:8e:41:
2e:86:42:03:f7:a7:a9:10:9c:1b:d9:bd:eb:76:f3:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:7D:64:64:E3:AD:44:60:3C:DC:78:3A:B3:B5:93:BB:BC:FB:85
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:6f:79:92:d0:b6:95:00:39:45:af:a7:48:8b:36:d0:8d:
13:2f:13:ed:98:db:d5:82:d1:6c:27:95:cd:ea:5e:b1:fe:f8:
00:71:cf:05:df:af:fb:d8:99:0a:41:15:41:2e:07:09:dd:e8:
f9:26:86:6c:09:d2:1f:54:15:04:c4:af:8b:77:8f:08:31:d1:
b4:03:05:70:be:45:fa:e7:34:ac:c3:d6:8a:77:ea:eb:9c:2e:
22:d8:98:46:30:09:5a:9a:c6:6d:66:ee:fd:27:84:af:f0:ee:
e3:c2:b3:9c:da:ed:47:a2:43:17:f7:ba:01:f3:1e:99:2a:0c:
d6:81:ed:a7:73:5d:6c:ac:3f:9f:b5:21:ec:34:5f:87:00:e4:
49:55:6f:0f:e4:b0:33:cb:f5:18:78:0d:c2:d5:d0:f1:31:c5:
0f:3a:51:17:48:41:0b:42:07:6c:a3:4c:ec:56:bd:fb:4b:c2:
54:0b:29:c5:d7:8c:88:d8:8c:9e:52:74:da:26:93:ca:0a:c9:
98:b6:7a:74:1b:59:57:c9:73:09:6e:3f:78:8d:de:84:f0:c3:
30:4e:14:fb:33:be:63:e2:b8:6d:71:2b:42:1a:96:5d:ab:2b:
28:37:15:dd:b8:19:86:dc:de:73:15:aa:24:39:38:a6:79:8b:
8e:2f:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:22:49 2026 by rpki-client