Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: rE7cMQNrVqmjSt5buVye54EEja+/WgQrKJVhHNIDGns=
Subject key identifier: B8:53:5E:91:A6:CC:B6:E6:D2:4A:35:FE:6E:06:89:60:42:CD:34:06
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 019D37C0194AFA612707A2A5E31834FAC100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 064F
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: 0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa (hash: qG/3sEaE6hIKkBZX7yiUf0VUZdejvNknPMp0eVon50w=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: h+lLUc2g7h9lLSjXTlZcwtJgHYIJAUrlfpKyQ2RlHwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:19:4a:fa:61:27:07:a2:a5:e3:18:34:fa:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=b8535e91a6ccb6e6d24a35fe6e06896042cd3406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:26:e7:3d:8d:ae:3e:fa:4d:aa:ee:2e:93:
75:7d:ca:35:cc:09:3a:bf:d6:0d:9b:0d:a9:b5:5c:
04:cc:1d:16:f4:4c:7f:09:ae:84:37:bd:40:f7:6b:
7e:72:23:c2:e1:85:00:95:64:c5:0d:38:b6:39:d1:
3b:97:60:94:f5:f8:77:d8:9f:b1:39:6b:66:46:75:
04:49:4c:53:2f:8a:39:89:f2:3e:21:44:86:4f:18:
93:cd:fb:a6:81:38:2a:c8:b1:42:42:0b:42:07:47:
a8:10:47:f4:a5:c8:d5:b7:9d:95:bb:44:05:07:1a:
0b:d4:41:e5:3e:cb:1f:ba:ec:98:4b:7b:31:53:20:
ff:f2:c1:91:b1:de:13:10:c7:ff:d5:d0:0b:e7:39:
d9:47:b5:b6:63:3a:c9:e7:0f:e9:b2:27:be:ab:8a:
b4:c8:b1:c0:4a:7b:68:1e:3e:45:32:3e:f1:f6:46:
ee:30:c6:d1:f5:c2:2f:0d:28:74:44:36:13:aa:ee:
1a:0c:0e:a3:90:09:71:e2:bd:e1:7e:99:ed:5d:96:
05:58:ee:39:60:eb:43:72:5d:41:ad:7b:a7:bb:e3:
f0:e7:06:29:c2:12:58:80:d1:21:84:90:3d:7b:46:
e5:d5:79:20:9b:80:e2:9b:58:8e:37:0e:e1:6c:e8:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:53:5E:91:A6:CC:B6:E6:D2:4A:35:FE:6E:06:89:60:42:CD:34:06
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:f2:a8:15:41:da:98:70:d5:eb:85:3b:f2:77:71:81:03:6b:
b7:8b:d9:9e:38:0a:b7:83:14:5f:76:56:b6:df:53:9d:27:d5:
ce:a2:e3:e7:f7:1f:dd:ef:eb:9d:0c:ff:a1:c8:86:c7:23:18:
59:62:16:e0:df:2f:07:61:59:92:74:23:b5:66:09:5a:02:21:
45:1e:8b:7b:f3:a6:8b:d6:b7:95:0c:a5:19:8b:af:37:82:ee:
50:3f:e5:4f:ca:ea:71:c2:07:1f:c6:70:7b:c1:3b:b0:55:2c:
c2:99:49:52:0d:34:4f:ee:8c:a5:50:fc:ec:3f:a0:8a:68:56:
02:d9:7a:cd:83:e5:0c:f5:07:6c:22:a6:c4:cf:3b:76:6f:d1:
50:5a:3c:3f:62:06:c6:38:20:26:63:e9:f0:78:23:86:05:5c:
24:27:6b:48:01:b7:25:2e:62:27:75:50:4e:31:07:39:a3:3e:
fc:00:1a:a2:49:f7:27:3a:17:3b:f6:cc:7c:a2:fe:00:a7:c2:
7f:17:df:3f:91:41:e8:bd:c7:71:d1:6b:3d:b0:e4:cf:b3:72:
fb:45:f4:6f:11:54:d8:7c:f5:c3:a2:90:28:af:6d:2d:4f:bb:
cc:8b:45:37:2a:91:1f:41:af:a4:bb:35:09:e7:bb:e5:4f:c6:
79:7f:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:43 2026 by rpki-client