Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: WogWknhJ14D9fM4DLHAfhts8SXIO9V7emnVBFWaj7TY=
Subject key identifier: DC:C8:89:8F:E1:08:BA:76:F7:F4:55:CB:ED:69:66:5F:04:65:A5:E1
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019D3865D1E22742BB1120AE88E8EA2B9253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 075B
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: F-rApHmMNywXbOy8G6qB8fH01fA.roa (hash: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: fVYbrBDaXc9Cip42GnszbPkptUA6uKtzihQ092Y7Bck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d1:e2:27:42:bb:11:20:ae:88:e8:ea:2b:92:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=dcc8898fe108ba76f7f455cbed69665f0465a5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:80:94:73:3f:3e:77:0f:53:f9:cf:44:52:
af:77:95:c1:61:54:06:09:6b:cd:38:a0:ff:a4:af:
a3:ff:f8:c1:d3:d7:ef:bf:c5:88:07:4d:14:14:4c:
63:7e:f3:42:5b:d5:6b:f8:fb:6d:f6:12:4d:3b:2e:
75:9b:88:4b:4d:8c:a1:cf:23:7d:85:c8:22:6b:22:
1c:70:37:0c:13:96:35:18:07:2c:97:a7:c3:65:23:
8e:cf:fd:68:a2:bb:64:e9:99:47:cf:f8:dd:03:7b:
75:92:a0:33:7d:fc:b0:25:f7:14:41:b0:fd:06:86:
d8:a6:a3:be:21:14:65:b5:43:1a:e3:5c:0a:31:13:
a9:33:40:89:ba:f2:82:87:f6:6d:84:03:69:c5:0c:
db:a2:99:6d:1c:87:40:ae:c2:2e:27:ef:30:ab:39:
b5:51:69:3e:26:6d:cf:67:b5:3b:27:6f:62:99:10:
bc:49:6d:1e:19:8d:cc:7e:87:b2:fd:44:99:6f:e7:
a7:81:84:ad:93:09:b9:73:1e:97:f9:41:2e:45:c5:
f5:32:7a:48:c8:39:b7:06:49:3b:45:a4:20:02:b6:
74:69:8c:38:9f:13:24:72:aa:2d:4d:1d:da:e2:f1:
a6:2b:43:a1:f1:c5:11:25:a0:7c:78:68:7c:d7:de:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C8:89:8F:E1:08:BA:76:F7:F4:55:CB:ED:69:66:5F:04:65:A5:E1
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9f:5d:44:24:f2:5c:23:59:86:f9:8f:9a:fe:19:29:f3:93:
c1:27:8e:5d:78:dc:5a:c7:0a:6b:4b:9d:4f:59:ad:89:75:15:
4c:ce:1b:b3:5d:94:12:cd:c1:37:8c:36:17:18:82:3e:2f:f0:
65:5c:53:7c:f4:92:8a:59:ab:81:cd:5f:d3:96:b3:57:58:e0:
b0:12:17:d0:22:ce:84:ba:8b:1d:f6:29:ae:42:fe:75:2e:75:
1f:58:8a:e1:ae:e6:69:a9:3a:30:46:15:47:d1:f0:7d:ff:78:
1c:bb:1a:c4:80:b2:32:0d:d8:d6:46:e8:9c:1c:36:d7:03:28:
76:93:9f:0f:38:ae:cc:71:cd:87:bb:d3:90:a4:69:60:cb:e4:
d6:5c:a7:f1:4a:c7:61:a7:b5:24:8f:67:bd:02:a8:d2:b8:b7:
7e:c4:14:5f:22:c0:9e:47:90:3a:10:bc:d2:cf:0d:41:2d:a3:
8e:f5:1c:cf:67:cf:ff:3d:2b:e1:33:ef:72:d8:96:5f:bb:87:
4c:53:38:1c:bc:4a:06:92:7e:c5:54:41:47:19:d5:ee:2b:4e:
27:e6:fe:1c:da:c7:6f:ad:f3:1a:34:64:08:4d:3e:56:c9:93:
f8:c5:69:6f:92:4a:1d:33:fc:16:0e:08:b5:47:af:25:b6:36:
7f:a4:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:34 2026 by rpki-client