Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: ALa/skIqTZ4RGEbO+422tfFAZZD1hevFXDtx1qzfNqI=
Subject key identifier: 2B:11:8C:4D:2D:95:32:06:B5:52:A1:E6:28:4B:9B:5A:08:36:B1:8B
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01A0005CCBF1D2ADB8B127A2D7F66265118C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 072B
Signing time: Fri 14 Aug 2026 13:01:16 +0000
Manifest this update: Fri 14 Aug 2026 13:01:16 +0000
Manifest next update: Sat 15 Aug 2026 13:01:16 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 16QtVEBgrFlG38WsPjAuQx2B15wPXHwu2yNR+NsrUdk=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:cb:f1:d2:ad:b8:b1:27:a2:d7:f6:62:65:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Aug 14 13:01:16 2026 GMT
Not After : Aug 15 13:01:16 2026 GMT
Subject: CN=2b118c4d2d953206b552a1e6284b9b5a0836b18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:7e:9e:89:c6:82:73:0d:b7:48:34:62:ef:
e9:a2:08:3f:12:67:f1:3a:da:3f:b2:d4:eb:b6:b8:
f8:70:6b:e6:1d:52:f1:95:d1:a9:53:11:0d:b6:fa:
3f:22:4c:dd:4f:7b:86:64:94:a6:48:19:db:e2:cb:
2c:df:e3:58:1c:0a:e7:22:4c:78:99:01:d7:53:16:
14:f0:e4:c2:47:ec:45:8e:7d:0d:8c:ed:a7:9c:84:
c3:99:a5:5b:57:51:2a:ff:e2:83:fb:db:fc:11:72:
3a:e1:51:b4:36:a0:cf:c5:92:c9:fe:35:02:df:a2:
23:46:3a:be:69:99:15:64:67:5e:3f:c0:32:3b:45:
6b:56:5f:d6:ee:e4:d8:2c:18:4b:8b:72:cc:88:03:
f2:f2:61:f2:cb:2e:46:c8:d3:f6:0d:b7:3d:dc:56:
f3:c1:bb:14:dd:25:f8:9c:38:1d:5a:bf:b4:a8:d1:
87:ad:3c:0d:4d:aa:5a:0a:67:f3:f8:f2:fc:5f:5e:
ca:f2:79:87:0d:f2:d2:c5:62:c0:cc:2b:11:b2:19:
08:30:ba:2d:d7:83:fc:5a:26:8d:79:b9:b8:7c:03:
44:96:6f:e5:d7:53:14:d2:8e:57:f4:cf:db:7b:9b:
fb:e6:78:43:66:d4:29:64:09:c1:5a:d2:0b:54:40:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:8C:4D:2D:95:32:06:B5:52:A1:E6:28:4B:9B:5A:08:36:B1:8B
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:06:5b:3d:05:f7:92:5f:14:1f:6f:e8:8c:41:81:f4:5d:
8b:ed:78:de:80:0e:1c:16:1c:5a:f2:fe:98:40:c6:f1:d3:9c:
fe:4a:27:ed:df:dd:d9:e4:0f:62:76:44:3f:9a:39:41:dc:8f:
72:97:3f:2e:c6:f6:ac:fe:94:77:ea:cd:8a:ac:28:b3:f5:09:
d4:6a:01:81:2e:e3:ff:a0:00:79:0c:c3:6d:ae:b6:e3:6c:06:
4e:e0:e1:e8:fc:69:94:5f:32:9c:69:6b:6f:03:51:2e:56:62:
da:43:9e:53:9c:ae:83:01:60:95:4b:ef:4b:b8:d6:e4:1e:66:
85:80:02:92:30:b5:e8:b8:75:d4:31:3a:09:cc:e0:fb:c1:7c:
d7:3d:bb:25:9c:74:20:3e:b6:2d:6e:ff:1f:46:04:bb:9a:0e:
e6:31:0f:ff:67:2d:59:8a:9c:15:e0:8c:0e:2d:23:54:81:4e:
93:10:a9:3f:5a:12:6d:04:c4:54:b6:e1:f3:1f:aa:6d:d1:ad:
31:51:18:11:a4:4b:c8:1f:8e:9f:83:7d:04:bb:75:ed:31:15:
2d:22:ab:80:3a:34:da:ce:96:e7:52:33:bb:bb:05:d3:8e:b4:
ec:a6:ad:8e:fd:64:88:ff:fe:dd:63:95:67:07:a4:90:2b:1a:
97:ef:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:54 2026 by rpki-client