Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: 6D0VjURBa+ZOV2z+ukU8ywjfosm+p0GFL3QiZYQDri0=
Subject key identifier: 9E:21:F3:28:D3:E4:C2:F7:EB:9A:8C:C4:8E:17:60:8A:BA:3C:51:DA
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019D37C116CC3B4767A5E8D886A0F4BBC923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 097C
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: armQECRrfohlqBLb3oVNKX7I0oQlYDhaq9TPcTKTZaA=)
2: EvH3doWBTY4fyL5WPp2H-GkyEew.roa (hash: 22wTI0vwTm8O372x/w8nuNJMOHJy0ekZTdOAKD7lcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:16:cc:3b:47:67:a5:e8:d8:86:a0:f4:bb:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=9e21f328d3e4c2f7eb9a8cc48e17608aba3c51da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:c5:68:11:e3:2c:60:4d:3c:77:4d:86:32:
ae:ad:a1:ff:73:f6:f8:89:d1:cb:1c:b1:97:13:df:
5c:a1:00:c6:0e:2a:02:11:87:4f:40:50:89:74:a6:
08:2e:3e:d9:5a:af:b2:1e:02:40:53:65:1c:3f:88:
3e:7a:05:cd:08:6c:50:36:93:cb:19:47:75:b9:a9:
a0:1e:dd:3a:92:1e:d2:b9:7e:9e:7e:7e:61:36:e7:
39:ca:79:5f:a4:8d:9e:1a:3b:7e:c5:96:bf:9c:53:
cf:1c:1c:80:6d:15:6d:0f:fa:9c:92:58:34:a4:3b:
c8:93:17:cb:7d:4f:5c:76:66:2f:78:2a:76:93:40:
a1:87:fa:4a:ae:48:0d:bd:64:09:9b:9f:3b:ec:82:
44:ad:a3:25:b0:aa:59:b2:82:ba:f9:2e:13:24:24:
bf:1f:8a:83:54:ce:e1:e4:0f:d0:69:47:52:56:40:
4d:de:f8:13:24:bf:ef:f0:dd:29:9a:48:f8:a0:6f:
ea:cb:ba:77:17:d8:5c:bd:e5:68:d9:38:23:14:2f:
3e:77:7c:36:4f:bb:49:68:58:c3:0b:e7:64:8c:2a:
37:80:39:e8:42:eb:3f:f8:f7:38:e3:fd:54:f4:8a:
67:cf:b1:4d:d1:d9:6a:2d:e0:37:2c:72:a0:4a:a2:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:F3:28:D3:E4:C2:F7:EB:9A:8C:C4:8E:17:60:8A:BA:3C:51:DA
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:7a:81:31:a2:0c:7c:34:1a:b6:01:28:89:5f:7f:d0:c2:
d4:32:e3:32:9b:33:8b:00:14:56:ce:9f:e0:2e:4a:5b:e6:cc:
23:72:f0:2a:c8:6e:8c:55:df:54:61:91:e3:88:20:4d:14:25:
d0:b7:d6:12:02:c6:b1:1c:62:1d:35:c3:b1:50:b1:4b:88:de:
66:ff:74:30:b0:f4:58:4c:42:59:a6:42:1e:06:20:3b:dc:81:
5b:cc:83:3c:86:99:63:6f:67:eb:38:0b:84:d5:8d:95:70:07:
4c:9e:ef:02:fa:88:2b:15:15:a1:cb:2b:be:91:70:fa:b7:e6:
b2:ce:3c:b1:ee:9e:73:a2:59:af:57:68:17:f3:7c:c0:78:84:
f8:ee:db:62:1d:07:28:fc:b2:23:69:87:17:fe:87:a7:e1:c8:
88:74:91:f0:89:53:f6:2a:94:18:cc:f8:5b:3d:b7:24:0f:4d:
46:71:92:0e:cc:ef:8d:df:1e:df:ff:84:2d:23:eb:54:1b:c5:
af:e5:f2:b6:f2:dc:4d:07:f3:53:f6:2c:3d:16:c5:48:f3:b5:
45:fb:57:1c:ba:52:36:ef:ed:f3:fa:14:20:11:c1:b6:b6:08:
c6:bf:ac:ad:19:81:4b:78:28:54:61:ce:97:08:a9:84:f8:08:
f0:45:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:02 2026 by rpki-client