Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: CjqyNPrBrxY1Fjxa9atMoTpwHEXqi/Fl/302v3auUHc=
Subject key identifier: 9C:F5:83:2A:23:E6:87:16:A2:34:4B:FF:37:0D:75:3E:63:EB:43:34
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 019FA1BB9E31E0FCB6B7E8050F8AD29740FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 0C96
Signing time: Mon 27 Jul 2026 04:00:54 +0000
Manifest this update: Mon 27 Jul 2026 04:00:54 +0000
Manifest next update: Tue 28 Jul 2026 04:00:54 +0000
Files and hashes: 1: Vi-50rUJqypgGVlY1PnfgRKVJPc.roa (hash: JefSHWYR7YbXg1+D5PyzTIFvu4XKwcfsRRc2C4+Vfyg=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: XODPnE7TZDCh5i/Q6eirpZMD/xnwJynTDG+AiNe/rZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:9e:31:e0:fc:b6:b7:e8:05:0f:8a:d2:97:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Jul 27 04:00:54 2026 GMT
Not After : Jul 28 04:00:54 2026 GMT
Subject: CN=9cf5832a23e68716a2344bff370d753e63eb4334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:24:8c:0a:62:8b:5c:6b:2f:0d:b0:6c:94:
dc:f3:42:31:61:3c:f0:7b:87:7e:88:72:46:57:34:
25:67:b2:02:1c:78:b6:42:79:47:f6:1e:32:6a:f0:
de:d1:00:f4:cf:42:9c:1a:7e:9b:db:d0:83:e1:6a:
50:60:0c:15:e6:9f:93:c1:53:21:76:cf:6c:ce:e7:
0b:b7:f9:9e:b7:6e:ac:c5:ae:82:81:ac:30:b0:79:
66:04:a5:9a:c7:54:88:bb:38:81:b8:87:99:3d:ca:
b9:1b:b9:0b:43:a2:ff:89:24:21:0f:2e:a7:ce:1b:
57:f6:52:e7:5f:c0:6e:5b:cc:e6:1a:67:04:0e:fc:
24:f9:3b:2e:f3:5a:80:25:75:89:aa:e7:e9:cc:49:
52:d1:06:36:0e:19:8e:4a:c1:83:ed:6b:6b:00:a9:
aa:3b:d9:98:96:db:4a:3f:58:af:23:97:d7:58:41:
bf:9c:c9:38:d4:11:0b:a2:5a:2f:80:8e:f4:19:ac:
bf:bc:18:4d:c4:7b:3d:48:68:fd:75:ec:27:51:13:
50:02:ae:96:21:60:53:8c:9b:70:97:01:04:76:46:
20:85:82:62:39:22:bc:55:41:b0:2d:ce:11:a7:49:
e6:22:19:d2:0f:5e:99:d9:48:7d:71:bb:60:d7:2f:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F5:83:2A:23:E6:87:16:A2:34:4B:FF:37:0D:75:3E:63:EB:43:34
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:aa:4c:2f:23:35:0f:98:6a:4d:cb:b2:ce:6a:4d:a0:dc:06:
50:55:93:03:af:57:2b:b8:12:5b:15:54:03:c7:4a:d6:03:94:
b6:1a:66:2d:be:77:d9:44:54:12:d1:ad:d6:a8:51:62:ea:0c:
39:a9:6a:ac:03:fe:e3:9d:bb:2c:7a:a7:08:b3:a2:a6:80:2c:
89:63:30:21:35:d8:70:44:94:e9:c4:49:a9:45:b0:39:9f:41:
8e:8c:b0:92:08:4e:2e:a6:40:b9:c6:e8:f6:47:20:f2:c9:b1:
c7:e4:5d:3c:80:e7:a9:4d:4d:4b:76:7c:a4:b2:46:98:03:49:
8b:88:46:b0:5f:c9:eb:5c:e8:21:81:6f:09:3a:9d:74:8c:30:
35:3f:5e:ca:5e:bc:c3:b1:16:a4:c6:b3:51:e2:c7:75:2e:f9:
3c:97:1e:24:46:49:cb:df:be:66:c8:c3:8b:40:30:fb:6e:09:
1c:3c:cf:1d:9c:3f:55:86:f2:03:af:66:67:d2:aa:a1:43:42:
27:9c:aa:08:73:8f:2b:a1:0e:31:ad:61:e9:76:ae:bd:b0:46:
87:a8:48:3f:a5:06:df:dd:de:f5:d2:7a:8e:ee:66:e9:8a:28:
3c:58:68:ae:14:66:46:7b:eb:ac:15:a8:73:e7:14:17:25:fa:
dd:fb:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:00:43 2026 by rpki-client