Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: K5O8AIz00HgGie7KG/+vImaiESgekjL41M6SO7LSCzo=
Subject key identifier: 42:85:A7:05:44:69:8D:94:BA:C4:12:18:1B:55:5E:7A:E0:D8:FE:3E
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 01A12C8DF046CFACB5D509326964E785CA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 20:01:01 +0000
Manifest this update: Sun 11 Oct 2026 20:01:01 +0000
Manifest next update: Mon 12 Oct 2026 20:01:01 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: k3r//GkmJVOE5vuMuTCYmcRwhzxdY6r/Oa0G4ZNDKk8=)
2: c_6OKa2kJtLM_j53PZ1MLqgDqDc.roa (hash: 4vJbjz8heF/m4GioZY43zb7qdmLusK1fKEnTbwbhKuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:f0:46:cf:ac:b5:d5:09:32:69:64:e7:85:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Oct 11 20:01:01 2026 GMT
Not After : Oct 12 20:01:01 2026 GMT
Subject: CN=4285a70544698d94bac412181b555e7ae0d8fe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4a:fb:78:2f:d7:f1:33:fe:99:7f:5f:b1:50:
23:2f:37:d8:b8:08:13:37:28:c1:5f:34:0a:96:4d:
89:9d:bf:bb:17:c0:f6:6e:a8:2e:ee:87:06:bd:b6:
6a:38:dd:cf:8b:9b:30:48:88:7e:6f:87:9d:30:31:
66:08:6f:2a:42:0c:c2:97:d4:d8:4d:c6:f1:5a:97:
f0:d1:34:94:d7:5f:e3:ee:50:7e:95:fc:dc:06:82:
b5:2e:40:e5:3b:cf:e7:c9:0e:62:18:96:43:7b:fe:
ff:a6:73:97:74:8f:a8:ea:4f:61:e3:de:ad:9e:4e:
c8:64:5d:9f:2b:fd:97:5f:4c:d9:fb:52:7d:e7:50:
7d:57:30:dd:90:54:77:a3:77:19:63:2f:f3:bd:b9:
e2:43:0b:df:e5:a4:62:6f:6b:61:f2:f3:49:c3:fe:
59:6f:13:7b:f3:48:c0:55:cd:c6:f6:57:bc:ad:a5:
fc:f8:74:74:f0:04:dd:db:76:b3:47:08:35:98:b6:
90:1b:08:d0:f7:69:df:ed:0c:37:69:ca:dc:68:88:
9b:0e:3a:e1:f1:4f:22:f2:10:30:64:9f:66:5d:b8:
19:43:d5:45:b1:4a:fa:10:e4:66:ce:5f:87:bf:ce:
b1:95:39:a4:e2:f8:10:ab:b5:d6:93:92:30:0d:a8:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:85:A7:05:44:69:8D:94:BA:C4:12:18:1B:55:5E:7A:E0:D8:FE:3E
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:a9:04:d3:f5:c5:25:ed:54:31:9c:e8:9b:c9:87:59:46:
df:87:34:f3:24:2c:7c:e2:4c:d3:37:8a:01:f1:eb:59:b3:0b:
ee:f4:c2:e0:67:80:cc:cb:72:3d:9b:1e:52:92:a5:03:ee:a2:
a0:5c:d4:39:86:bb:77:42:9e:5a:04:58:14:7d:1f:18:2a:4b:
e7:22:78:53:0e:ce:52:9f:80:ce:7b:e6:c5:dc:00:17:44:e4:
78:58:91:64:63:c4:42:49:2e:57:4e:b5:5c:ea:bf:e5:5d:51:
e2:51:5f:39:3e:d1:d3:aa:d6:79:0a:87:37:0f:64:82:86:4e:
a7:58:19:74:14:f1:7d:c9:07:3a:3e:ff:0c:3e:c9:7b:3a:3a:
2e:85:79:5b:63:70:69:23:f7:bf:04:af:65:7f:f3:2c:61:e8:
ef:54:b9:af:be:25:a5:ac:4d:d4:31:e5:ec:00:c5:c9:27:c5:
5d:ea:7a:33:a9:9a:aa:20:46:83:0e:fb:91:6c:0e:b8:51:76:
db:2d:bc:5f:ee:35:30:16:eb:34:d1:38:02:aa:18:aa:f1:41:
7c:90:e5:0d:fd:2a:57:0c:9e:9e:04:87:c9:a9:4a:3c:04:d8:
e8:f0:81:dd:00:66:8a:bf:6c:6e:2e:3d:fc:40:dc:24:61:fa:
e9:54:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:27:17 2026 by rpki-client