Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier: MJ5Oxs+QPP1cYAU1Tp4p4ph+Xq0uApIFbVbPsbMwUMk=
Subject key identifier: 54:49:F1:92:B7:63:F5:B1:1F:C9:93:5B:0B:C0:75:04:48:2F:34:7D
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial: 019D386561AF811100158067417F4A6135DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number: 030D
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: MR0n0jrZPOXhH9fm1LTFnK0LfGwBTJFz/WeqKn8AB0I=)
2: iBXu_AfLungRwDg5PQCY_EZez3c.roa (hash: K8zsdZyfr+dDBeWgBkWYLPkuu2q5T19Ve+4SgzTV9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:61:af:81:11:00:15:80:67:41:7f:4a:61:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=5449f192b763f5b11fc9935b0bc07504482f347d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:ea:dd:13:27:5f:48:d6:f5:d8:cf:97:9f:
0e:8a:08:94:ff:7c:05:03:aa:29:60:ca:09:98:a4:
d6:53:b2:1e:7f:4b:74:d4:2c:1d:70:9e:27:db:04:
b4:e9:a7:3d:18:f0:27:d9:0d:dc:b4:1f:fa:0b:eb:
32:66:9a:89:e1:90:e1:b0:5e:af:8b:0e:bb:a1:19:
4a:0d:b2:58:69:e0:2e:db:73:95:b7:06:e1:8d:d4:
f1:83:51:ee:f0:97:f5:3b:a0:29:5c:1e:fb:9a:6e:
f0:d0:fb:32:23:df:b9:cf:8d:e8:6d:aa:ca:86:86:
13:fb:cc:9e:96:ff:cc:c8:ed:1c:73:9f:d5:84:15:
0e:70:bf:d3:74:e9:47:cc:9b:61:e6:32:d5:e4:38:
c3:6d:97:28:47:19:99:6c:09:4b:d4:40:7e:b0:8b:
55:54:4e:2e:44:5b:39:5e:20:97:30:65:b8:24:0c:
e5:6e:4b:70:07:8a:da:26:48:1f:16:dd:03:8e:c8:
ca:eb:14:6b:2d:f5:e0:26:d8:fd:2a:8d:4f:84:09:
fd:8b:9b:2f:39:c6:68:7f:0f:b6:f6:bc:7d:4f:49:
8a:b6:e2:ac:dd:c6:96:a7:bc:e5:fb:0a:2b:c9:1f:
7e:ca:54:be:26:e4:23:9e:13:53:1a:ae:2f:78:86:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:F1:92:B7:63:F5:B1:1F:C9:93:5B:0B:C0:75:04:48:2F:34:7D
X509v3 Authority Key Identifier:
keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fe:e0:d9:5e:30:e4:67:ce:1f:fa:a3:97:2f:81:98:29:77:
c1:95:e2:dd:cd:ab:76:69:a1:5f:09:5d:94:7e:c3:66:16:4c:
e9:c6:63:77:8f:f8:69:a3:e1:17:18:4b:a2:ff:d8:32:32:d8:
8c:ec:2f:48:5b:42:7b:da:86:a1:a8:c4:46:37:8c:6e:f0:08:
ec:3b:5d:81:63:2e:fb:be:dd:f4:38:65:16:54:a6:53:0f:0b:
a5:d9:d8:35:56:18:7f:db:de:4a:4d:2b:94:14:97:d7:80:e7:
ee:57:45:2f:6f:2a:eb:6e:93:9f:be:be:0f:f1:79:b1:e8:a8:
fb:6e:a3:34:98:a4:79:56:15:0a:48:0d:f0:87:59:4e:58:1d:
5f:3c:e3:14:c8:b7:86:84:be:b8:f6:61:9f:f8:f6:52:47:18:
a9:58:d6:e1:8b:76:a6:a3:5e:82:4a:3c:4a:f9:a3:93:72:1e:
bb:57:80:f6:05:08:e5:a2:d6:73:cd:3c:c8:51:f4:0e:b3:3e:
d0:de:64:ba:63:74:85:82:7c:66:9f:f9:d0:28:bf:5c:dd:df:
d5:ec:09:41:ec:62:d3:f8:dc:ea:bb:43:4e:f2:71:d2:3d:d9:
7a:f9:7b:68:95:64:13:7d:15:68:dd:05:31:d4:83:85:d2:78:
a2:2d:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:08 2026 by rpki-client