Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: N+O7HM4sU14eBkDV/DpSDI0cu0xfU5kaSLmHeFql68Q=
Subject key identifier: 10:12:11:AD:CE:28:83:3E:90:61:6E:20:EC:C8:FD:BC:1C:60:40:DC
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019D37C07F54F99B67A6146CE8E8C57E25D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:55 +0000
Manifest this update: Sun 29 Mar 2026 04:00:55 +0000
Manifest next update: Mon 30 Mar 2026 04:00:55 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: nYs+zk3VR9iBDHuNcs9j8SiBthwbvvw3J9XFsQeCdPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:7f:54:f9:9b:67:a6:14:6c:e8:e8:c5:7e:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Mar 29 04:00:55 2026 GMT
Not After : Mar 30 04:00:55 2026 GMT
Subject: CN=101211adce28833e90616e20ecc8fdbc1c6040dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:b1:92:0f:2a:10:7d:41:10:3c:9e:74:d2:
3f:52:40:80:14:5f:a9:23:9f:51:54:d9:d2:6f:a3:
84:82:f2:75:03:ff:85:b7:f0:da:e4:10:47:ff:25:
02:82:8c:ed:df:11:cc:35:b8:89:cd:29:d9:bf:e4:
bd:c8:79:35:6b:0f:56:fb:3e:fa:8e:21:a1:e0:52:
67:89:3d:1f:a6:59:19:41:dd:4b:d8:09:ca:c7:46:
9a:20:f6:bf:5e:49:52:8b:d3:7b:86:f1:23:0e:c5:
ec:37:84:19:db:7d:0a:44:69:d0:45:71:bf:05:09:
e0:c8:87:28:70:8a:e7:6e:c5:84:c3:25:40:82:4b:
f7:cb:c5:bb:59:d5:e9:b7:36:91:c4:2e:3a:fd:0d:
e2:c4:18:a7:c7:77:ae:7f:56:a5:95:5e:e5:0a:50:
c9:81:92:52:cb:8f:ba:f3:91:74:65:8d:01:ca:bf:
23:2d:b7:84:01:99:45:20:40:47:25:d7:55:cf:72:
53:4f:08:cd:40:c2:09:f5:bb:e2:40:05:47:86:45:
cd:c1:f3:da:b7:d7:76:f2:5c:97:aa:e4:de:30:6e:
7d:18:34:7d:8d:c3:b2:96:b3:bb:a5:56:60:f2:9e:
68:9a:70:f5:d1:85:21:56:2e:af:b8:c9:25:cf:90:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:11:AD:CE:28:83:3E:90:61:6E:20:EC:C8:FD:BC:1C:60:40:DC
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:45:b5:7f:b0:37:30:1d:82:76:22:40:df:37:aa:33:92:1b:
0b:49:96:0b:50:ae:42:0d:24:d4:36:f4:11:98:63:00:1f:6f:
fa:b3:db:04:a7:49:8d:ef:48:87:54:99:89:c6:2b:52:12:0f:
c1:7c:4d:a2:85:1b:c4:a2:ac:ad:e8:9c:d8:1b:b7:12:2e:d6:
7b:50:4b:ba:1c:a5:7b:f0:73:2c:d8:cb:b4:e8:29:6f:7e:7d:
7d:d2:4d:a7:44:6c:fb:e6:6e:89:3b:d4:c5:f1:14:ec:e0:e3:
07:bd:18:26:05:ce:40:13:70:83:ae:2c:e3:e9:ba:e7:76:ed:
5c:0b:80:41:24:66:1b:84:2d:a8:ee:43:76:ad:55:85:fb:81:
c5:fb:bc:1c:f1:a4:ac:a2:b1:3e:f4:56:47:44:68:0d:e4:fe:
08:be:9d:26:02:57:62:67:51:d5:f7:a9:41:cc:21:ad:21:5e:
ba:ae:1c:9b:a5:4e:b4:f9:08:5e:2a:16:3d:7a:15:bc:83:f9:
73:d1:68:74:4e:0b:80:e8:f6:b8:28:a6:2e:af:25:55:73:e5:
37:45:d3:63:75:f5:03:a3:7f:4a:b9:e7:b9:25:ce:2f:d8:35:
fb:b9:14:a5:4a:ec:97:76:8c:8a:c7:e3:dd:3a:c9:a9:4c:de:
c2:e0:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:41 2026 by rpki-client