Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: mI1m30q405nMbi4HeB013xvuTh+fYMp0KYgErTkFpLg=
Subject key identifier: CB:A3:C9:2D:1C:B3:71:F8:65:F5:1A:DF:58:AF:56:A5:9F:CF:AE:B1
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019D394141E87B6A3B1F03EC6E912D81EBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0DD9
Signing time: Sun 29 Mar 2026 11:01:11 +0000
Manifest this update: Sun 29 Mar 2026 11:01:11 +0000
Manifest next update: Mon 30 Mar 2026 11:01:11 +0000
Files and hashes: 1: FuIldjWwC771dcFJZ2BXXg7QNtE.roa (hash: 0/YvhnNfmrfW1rIeAImBgzBQVqK+XQUOllK6k6PziVo=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: bpq0wY5KFIeEe/zf6hyNKDYrlm3wauBAFnr+vr99ChI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:e8:7b:6a:3b:1f:03:ec:6e:91:2d:81:eb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Mar 29 11:01:11 2026 GMT
Not After : Mar 30 11:01:11 2026 GMT
Subject: CN=cba3c92d1cb371f865f51adf58af56a59fcfaeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:ce:d2:7f:97:df:54:45:72:9e:ff:1e:f3:
2c:60:26:86:3a:14:c3:2e:19:05:84:82:26:96:46:
3b:bb:46:6b:7d:3e:af:e0:23:60:cc:67:34:46:37:
dd:f0:78:23:af:1e:59:6a:9b:6c:77:94:3d:2f:5a:
71:fc:b2:35:d6:82:a3:27:8d:32:b3:c4:7c:02:79:
a5:88:bd:35:ce:6d:5c:0f:57:b9:20:b9:68:f8:9b:
65:e2:96:ab:3d:c4:06:0d:27:19:24:e6:89:2f:83:
ec:18:b3:7a:af:64:e6:2b:20:1c:08:88:15:e9:8a:
e1:4f:c9:58:85:e2:4e:4b:e4:81:46:f6:2c:06:b7:
89:0d:a4:c2:33:d4:54:6c:a3:40:fe:75:d8:bc:83:
b1:4e:3c:81:30:10:b7:b1:3e:98:8a:20:0a:a5:5c:
b9:34:67:6c:7c:e9:d0:6b:60:f0:61:c2:94:e5:91:
87:d8:a5:a9:c8:22:03:b4:7a:7b:83:bf:92:a4:38:
de:2e:d3:80:81:8b:6a:3d:53:8f:d7:c2:cf:d0:35:
a8:3e:cb:c1:35:6f:d8:c0:ce:01:96:1a:d7:21:23:
fa:3e:80:06:2e:b9:43:dc:08:49:c6:f3:41:a7:6a:
21:a5:1d:6c:cf:3b:1b:74:22:0a:a7:b3:51:86:02:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:C9:2D:1C:B3:71:F8:65:F5:1A:DF:58:AF:56:A5:9F:CF:AE:B1
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:82:87:0e:25:13:94:e0:9c:a7:01:ef:f7:10:41:40:6f:ab:
63:90:ce:e3:a7:0a:85:a1:95:fa:fa:41:c0:b6:44:c1:b8:05:
af:97:85:91:1d:ea:3c:2d:ee:6f:2c:13:a4:07:fc:52:8d:fe:
fc:75:b7:0c:e9:7a:dd:c5:eb:19:a3:a2:36:89:4f:12:63:f6:
b4:bb:8c:6f:64:42:44:ed:f8:57:98:e0:60:9a:a7:fc:0f:fd:
d1:6a:9e:c5:14:c7:51:1b:2d:ad:4a:92:bb:13:28:f9:ad:07:
c5:40:45:3c:28:52:b9:c3:06:23:fe:5d:50:c6:b9:bd:3b:ca:
7d:32:22:74:e4:e0:8a:5b:06:d9:79:18:c8:7e:d3:7c:c2:a7:
1f:24:19:b9:02:9b:95:d4:a7:f4:ba:23:a5:db:d2:a2:61:9e:
bd:89:d9:6f:87:39:a9:a2:dd:74:f5:98:91:e4:fc:f3:70:5a:
ca:a6:0a:11:fb:32:08:a2:a2:55:11:a0:5a:93:6e:f5:f6:52:
92:a1:0c:a7:e2:ac:0d:92:52:af:e7:0c:20:6f:ef:f5:a6:58:
7e:24:1e:40:4b:36:32:2c:3a:f6:52:77:1b:94:39:6e:80:fc:
98:8e:40:32:3e:b8:b4:6e:ad:2c:be:28:c6:f6:07:22:10:79:
94:86:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:15 2026 by rpki-client