Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: bkBwCmF3sqSeV6o7GyeLcL4ICTa6EHOJZggsfiaGPfI=
Subject key identifier: A7:71:16:4F:0E:88:E8:49:92:4D:00:5F:43:6E:54:4E:C8:F0:EA:B4
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 01A1581D7731EE5708051B3124B32C3E05FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1AB2
Signing time: Tue 20 Oct 2026 07:01:28 +0000
Manifest this update: Tue 20 Oct 2026 07:01:28 +0000
Manifest next update: Wed 21 Oct 2026 07:01:28 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: RJqcGwne8wurbfGgRUGEy+VTWafF4oAaTMGOixjAgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:1d:77:31:ee:57:08:05:1b:31:24:b3:2c:3e:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Oct 20 07:01:28 2026 GMT
Not After : Oct 21 07:01:28 2026 GMT
Subject: CN=a771164f0e88e849924d005f436e544ec8f0eab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:e2:6a:78:f3:c0:9d:88:a7:f4:74:e1:31:
2d:4b:7a:dd:96:a3:25:83:26:2d:af:c5:46:a4:cb:
8f:91:92:47:80:00:64:32:f6:d0:48:7d:1d:8b:6a:
0e:8c:41:1b:78:b6:88:9f:e4:e3:d6:98:43:87:ec:
42:aa:30:e8:9c:2f:a8:fb:cf:5b:90:f5:5c:a2:43:
f7:ef:02:a7:17:bb:f1:62:81:e1:2d:9f:99:e6:66:
ff:7f:78:69:35:9a:d2:52:f7:ea:81:13:4e:2e:ae:
15:df:41:8b:0b:17:62:03:1a:47:12:8f:e6:02:c9:
d5:8a:85:6a:6d:d1:8e:13:ab:b7:64:c3:20:f1:07:
76:8c:66:2d:e1:4d:db:08:61:2a:b6:88:8f:06:c7:
df:c4:b8:e1:82:67:d4:13:79:a2:54:bb:58:55:04:
c5:31:e4:3f:55:84:9f:9d:7e:bd:4d:d4:61:f5:f8:
38:36:22:7f:32:fc:eb:91:16:a5:ca:d3:91:05:79:
40:dc:3c:ae:de:7d:10:82:8e:ee:a0:0a:6f:45:1b:
7d:2c:74:30:4b:52:3f:ff:20:ac:94:15:b4:d7:ae:
d4:81:34:f1:b0:39:07:af:07:1b:66:28:35:4e:69:
ac:ae:6c:56:6d:39:e5:43:ad:24:7b:d2:92:bf:7b:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:16:4F:0E:88:E8:49:92:4D:00:5F:43:6E:54:4E:C8:F0:EA:B4
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:25:cc:2f:75:d2:d9:11:45:77:30:fe:2e:a5:cf:56:b7:03:
7f:21:df:f3:be:1b:20:0e:ca:fa:7a:db:c9:bb:92:b0:2a:03:
ef:ac:32:1c:99:a6:48:8c:97:fe:b7:02:95:40:2a:ea:4d:58:
33:38:50:fb:54:38:e1:cc:b1:f9:ea:77:a6:c2:fc:9c:80:d6:
8c:dd:ac:7e:88:96:a1:77:e4:09:69:99:8a:d9:fe:4d:4a:7c:
57:8c:68:5b:9d:7e:8e:6c:06:17:e1:d5:ba:5c:ac:73:f4:2a:
c9:1d:f6:27:da:75:4e:7d:ee:3c:08:bb:8e:94:ca:96:e3:0a:
3b:57:b7:73:4b:b8:bd:28:9a:37:f8:53:3f:f4:3b:a9:75:d7:
31:26:94:6a:63:23:ab:d9:ce:fa:4c:1d:88:e6:8a:0a:fd:e1:
4c:92:c0:59:11:0a:ba:fb:91:3c:94:9d:b0:de:b4:b2:ef:48:
a1:90:a0:3a:16:dd:39:02:9f:e1:60:86:2e:82:cb:dd:85:8e:
cb:c3:7b:82:d0:32:21:d9:bd:e0:a1:7d:41:53:75:91:81:90:
d3:d9:28:a0:51:c7:b5:4a:24:10:e4:75:eb:76:ea:76:e5:f4:
96:e1:c9:44:e6:41:13:b1:b3:c8:f0:5a:ee:45:84:8a:a6:4a:
e8:82:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 17:34:22 2026 by rpki-client