Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: cF0eBqAXixU/8ky0UgqVTNGxozwMirPjStqAeKOpM8Q=
Subject key identifier: 8C:C3:DD:22:E0:4F:9A:98:1A:AA:78:FD:61:8F:67:0D:B3:3D:40:BA
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 019D3752B19499757CA1AAAA920ED1C87CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 0AC7
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: GUpXRbnSoRYrv0Mc41+h1lUfPRvdmoFvaEO6JApMp58=)
2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b1:94:99:75:7c:a1:aa:aa:92:0e:d1:c8:7c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=8cc3dd22e04f9a981aaa78fd618f670db33d40ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:cf:fb:f8:b3:b1:77:79:c8:d1:6c:40:fa:
f8:3c:43:99:20:2b:dd:f6:54:36:59:09:9b:6c:55:
49:92:db:17:e9:43:8e:3e:e1:78:8d:1e:20:d9:38:
6e:10:60:68:e8:50:cf:aa:ce:5f:05:46:55:e4:2d:
d6:b5:05:11:17:1f:48:15:a7:4f:56:c2:a0:00:b5:
f6:3f:ab:91:21:41:43:aa:73:35:dc:bd:31:7a:28:
6a:96:21:7f:59:f5:e3:de:99:59:e0:fc:9d:52:18:
95:19:13:ec:73:75:e7:52:6f:9d:ef:95:9f:69:cd:
77:d7:22:03:9b:35:0f:c4:cd:2f:5d:2a:dc:27:c0:
d8:50:bf:ed:b1:1a:5f:9f:a7:3b:be:ad:3a:14:f7:
74:2a:07:73:da:1e:19:21:ee:d7:6a:04:9c:e2:43:
5c:0d:56:e9:29:a7:8b:f6:ce:be:91:05:b9:8b:ee:
48:d4:0c:c7:62:08:d0:a7:85:d8:8e:0b:f6:28:f6:
eb:e6:aa:55:c2:40:7a:d8:23:86:92:21:47:9b:10:
b3:92:cc:37:8c:88:42:25:2e:13:ef:a8:83:81:1d:
bb:d0:4f:19:d2:62:5e:e3:4b:ab:30:1e:2c:c2:de:
51:a9:36:bc:3d:fa:bf:66:0e:19:1b:d9:ff:bf:26:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:DD:22:E0:4F:9A:98:1A:AA:78:FD:61:8F:67:0D:B3:3D:40:BA
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:2c:f9:88:33:ba:a4:72:2d:a2:2d:ab:20:b3:f6:88:f3:
7a:5a:83:f6:61:b4:4d:ff:27:53:94:ed:29:c7:4b:69:4e:79:
9b:94:9a:27:fc:b9:11:7d:56:6b:67:7f:58:81:31:19:bb:67:
14:45:f7:37:40:8c:2e:33:16:dd:88:11:17:10:59:28:0a:bb:
31:81:db:af:ae:ae:b6:d4:cd:d4:8c:88:4a:ba:df:5e:2f:df:
02:be:9e:8e:4f:5c:1a:5f:7c:f2:52:90:36:16:7e:2a:f2:3e:
b9:3d:ad:25:65:6c:44:13:18:4b:ad:e2:95:a0:ca:bd:63:b3:
4c:5c:b5:44:8d:3a:e8:53:59:b5:78:47:bc:4d:0f:af:b3:9a:
ac:c4:4f:20:55:99:ed:c6:3a:b5:82:71:9d:f2:67:b8:03:2c:
c2:43:47:1c:15:86:cd:61:c8:af:74:03:ba:1f:b3:28:77:a5:
e6:38:e1:4e:ee:b6:c1:34:f4:76:1b:6b:16:27:c7:cb:f3:a9:
6e:15:00:5f:67:bb:82:3e:81:b5:80:5e:f9:ca:48:d1:25:3b:
ea:6d:3f:35:91:5f:8e:24:9c:4a:9e:bd:41:d3:76:ac:c9:37:
36:aa:59:e0:1b:c2:f5:83:35:83:74:41:ab:bc:fb:d1:58:68:
84:c6:a3:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UrGUmXV8oaqqkg7RyHz5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm
NzRlMDQwHhcNMjYwMzI5MDIwMDU5WhcNMjYwMzMwMDIwMDU5WjAzMTEwLwYDVQQD
Eyg4Y2MzZGQyMmUwNGY5YTk4MWFhYTc4ZmQ2MThmNjcwZGIzM2Q0MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYfP+/izsXd5yNFsQPr4PEOZICvd
9lQ2WQmbbFVJktsX6UOOPuF4jR4g2ThuEGBo6FDPqs5fBUZV5C3WtQURFx9IFadP
VsKgALX2P6uRIUFDqnM13L0xeihqliF/WfXj3plZ4PydUhiVGRPsc3XnUm+d75Wf
ac131yIDmzUPxM0vXSrcJ8DYUL/tsRpfn6c7vq06FPd0Kgdz2h4ZIe7XagSc4kNc
DVbpKaeL9s6+kQW5i+5I1AzHYgjQp4XYjgv2KPbr5qpVwkB62COGkiFHmxCzksw3
jIhCJS4T76iDgR270E8Z0mJe40urMB4swt5RqTa8Pfq/Zg4ZG9n/vybTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzD3SLgT5qYGqp4/WGPZw2zPUC6MB8GA1UdIwQY
MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt
ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh
LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnQs+Ygz
uqRyLaItqyCz9ojzelqD9mG0Tf8nU5TtKcdLaU55m5SaJ/y5EX1Wa2d/WIExGbtn
FEX3N0CMLjMW3YgRFxBZKAq7MYHbr66uttTN1IyISrrfXi/fAr6ejk9cGl988lKQ
NhZ+KvI+uT2tJWVsRBMYS63ilaDKvWOzTFy1RI066FNZtXhHvE0Pr7OarMRPIFWZ
7cY6tYJxnfJnuAMswkNHHBWGzWHIr3QDuh+zKHel5jjhTu62wTT0dhtrFifHy/Op
bhUAX2e7gj6BtYBe+cpI0SU76m0/NZFfjiScSp69QdN2rMk3NqpZ4BvC9YM1g3RB
q7z70VhohMajUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:47 2026 by rpki-client