Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: kFTo7QmGDdZvhUcy7JFhkSuoTTwP6L0ybQJBGsR5UsY=
Subject key identifier: E8:E8:36:F2:5D:C8:5E:54:97:35:C4:17:86:F5:05:C9:2A:E0:4F:0F
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019F189EA8A1CA0B01D8F5EB26222B1C6F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 06B3
Signing time: Tue 30 Jun 2026 13:01:18 +0000
Manifest this update: Tue 30 Jun 2026 13:01:18 +0000
Manifest next update: Wed 01 Jul 2026 13:01:18 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: Db5OMWFFfyiu+JDzQGx6JKuWdd5SVJvH1X966GKKFTw=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:a8:a1:ca:0b:01:d8:f5:eb:26:22:2b:1c:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 30 13:01:18 2026 GMT
Not After : Jul 1 13:01:18 2026 GMT
Subject: CN=e8e836f25dc85e549735c41786f505c92ae04f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:87:d8:2d:ea:bd:84:6e:1b:64:dd:fd:f6:
c1:28:b2:f6:e8:76:2c:e0:67:73:7b:b3:12:2f:00:
85:2c:01:7f:6d:8c:74:dc:cf:00:c9:21:83:2d:23:
c6:ff:2d:a0:63:c8:c8:0f:5d:a5:6d:f3:88:e6:31:
77:a0:05:81:d4:96:d0:f4:d0:87:30:b2:07:ac:68:
f7:f3:a6:84:b1:70:a3:d0:05:0d:6b:39:8e:ce:32:
24:49:af:08:be:a2:ba:5b:ca:a2:9c:3f:f4:20:27:
3a:3a:36:43:04:59:db:ac:a8:ca:03:92:03:a6:c6:
5f:eb:ef:90:19:db:2b:5f:93:0b:9f:89:3c:dc:a0:
0b:b0:4f:87:a5:47:f5:89:7c:a6:e4:1c:a9:4b:71:
72:54:3d:8f:a9:56:3c:df:66:7e:99:df:e0:73:95:
20:d0:66:a5:26:76:9b:91:cd:67:4f:6a:95:c8:52:
49:3b:a4:e6:b9:ab:b3:74:00:9d:d3:44:00:4a:13:
f0:a2:c4:ab:1b:4e:0a:4c:f2:61:e5:b2:05:6f:f8:
81:97:d9:93:62:99:ff:cf:15:93:00:8a:eb:48:38:
11:fe:f4:5d:c4:47:ed:28:9f:21:21:42:90:07:6f:
96:d1:8a:97:f1:3d:fa:21:02:86:5d:26:16:0a:ff:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:36:F2:5D:C8:5E:54:97:35:C4:17:86:F5:05:C9:2A:E0:4F:0F
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ab:b3:2e:34:f7:c3:83:45:46:7a:a0:a2:86:13:7f:6a:eb:
8d:73:c2:3b:9c:02:12:0a:79:d5:6d:93:f3:af:fb:b4:f8:c3:
7d:fd:1c:8b:bc:a1:c7:7f:f8:a8:62:e8:6d:64:f6:6a:b2:18:
14:81:ee:32:b0:a7:de:04:32:2d:c0:eb:bf:10:6f:36:21:99:
94:1b:0b:4b:21:c8:35:86:fa:18:38:34:bd:71:a8:93:78:0d:
8c:59:dd:aa:79:2b:32:6b:1d:4e:22:a6:24:67:eb:9b:7d:21:
7e:50:ba:da:ed:f3:ed:70:40:4c:32:bc:5e:33:c3:a0:4e:bf:
4f:f1:6d:c1:89:59:78:75:82:cf:d7:94:17:41:2c:8b:64:a7:
7b:d3:fe:12:7f:04:81:62:60:ec:50:e3:ed:e2:41:cf:6a:1c:
2b:b8:33:4a:ce:61:38:33:69:0f:3a:5a:ce:a5:6e:3f:52:20:
55:cc:d4:dc:ce:ae:65:0b:e3:9f:ca:90:b7:d6:51:ab:0a:a4:
ca:30:79:17:15:6b:36:19:68:50:b2:55:ce:65:2f:60:d5:7b:
84:f5:2b:24:cc:33:58:ca:9f:82:d7:89:54:25:55:0a:26:6f:
77:23:c0:d0:af:67:ee:ea:a6:15:3c:bf:d1:f8:0a:fe:0e:b8:
ad:3f:4e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:09 2026 by rpki-client