Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: bcWZXzKkGvZdfl7IhlJtwxu4HARfn7b9P9qDZuNF6qc=
Subject key identifier: 1C:AA:3E:60:89:3D:BD:83:29:32:21:29:C8:6C:B2:E1:6A:D4:2D:44
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019D37C02B40C7C2D6FD6831EB7044B27658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 05BA
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: c2MzrsMwKNQTiVJfdZEV63ysyRAsDXF0mqPDYT2+Moo=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2b:40:c7:c2:d6:fd:68:31:eb:70:44:b2:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=1caa3e60893dbd8329322129c86cb2e16ad42d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:79:6c:12:0a:56:67:cc:bf:be:f5:13:a1:
5f:49:d1:6a:15:f0:10:8a:08:1b:af:a1:03:b7:04:
fc:a8:69:1f:40:34:11:5e:67:7f:ab:35:cc:c1:0b:
31:96:1a:02:58:91:7e:f1:c1:5e:64:4a:fa:b6:d2:
de:78:a6:39:d2:c2:7e:70:04:45:17:58:d1:96:21:
ae:01:a5:82:b9:a0:02:93:71:84:72:91:92:c6:04:
2e:d3:4e:79:84:4a:18:a1:24:7d:74:f0:ef:08:73:
d9:84:6b:39:d3:69:41:d0:75:ca:3d:0c:53:73:c0:
f4:98:a6:89:47:3f:da:c6:12:5a:51:3f:9d:ef:8e:
87:d0:07:15:d8:22:b4:54:40:a7:a8:2a:82:65:71:
46:dd:4c:3a:67:1e:9e:90:89:e9:f7:ae:3b:b2:c2:
92:f8:fe:61:c6:fc:d4:cf:a6:fb:b5:0c:9b:49:fc:
25:8c:6d:ac:24:a1:62:c0:57:28:05:e3:49:a9:40:
70:94:17:29:5c:35:b8:21:79:ca:92:61:7d:6a:fd:
9b:96:eb:4e:67:95:4e:b2:d3:eb:39:a9:9b:8e:81:
30:a6:36:94:4a:b4:b0:21:67:df:2b:33:58:a0:bd:
76:50:1d:28:c3:b5:fd:62:13:78:47:e0:bd:2e:d2:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:3E:60:89:3D:BD:83:29:32:21:29:C8:6C:B2:E1:6A:D4:2D:44
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:3d:2c:e5:73:9a:1e:0b:fa:9b:e5:ae:8d:4e:2d:cf:a5:
79:2b:48:1d:c9:ef:05:b7:5b:c9:ef:95:3a:23:c5:e5:8a:44:
1e:46:8f:36:c2:6d:14:55:6c:4f:a3:39:ec:42:e4:fd:33:f5:
ab:c7:16:0e:bb:d4:77:85:7a:49:5a:a4:48:a0:06:82:f3:81:
d9:f3:26:ab:2c:db:bb:7f:03:90:5a:05:0b:6e:ed:7d:78:a7:
ff:ca:df:fd:4b:35:36:21:b1:7b:f6:f2:6c:3d:3f:cd:77:dd:
b1:ea:8e:1e:70:f0:84:9a:5c:10:2f:18:b9:e1:e1:f2:75:92:
81:c1:4a:6e:7e:f4:1b:08:c0:c9:a1:01:92:1a:1a:50:6e:95:
6a:0f:7d:8e:e4:65:a7:92:b9:2c:17:55:0b:2d:61:66:05:93:
46:03:d2:4a:03:48:2b:62:53:aa:8d:c8:82:dc:74:32:80:20:
6d:31:23:25:29:1d:97:77:7e:91:12:a2:d5:8d:fb:76:64:de:
fa:01:50:d4:bb:cd:18:ab:16:0b:10:bc:87:07:cb:1c:b0:57:
dc:e7:17:e9:e7:47:d5:ed:a9:38:1d:e0:a8:ea:61:14:df:32:
59:a7:1d:01:87:61:5e:75:ff:ca:5d:c3:f4:32:ee:54:75:6b:
c9:0e:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:30 2026 by rpki-client