
Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: ZsLzn6K+F9D+kd96U9yThFpnQ3aAYFFNHhDXWhsuXy4=
Subject key identifier: 16:0E:3C:4D:FC:64:C0:A5:D2:5E:CD:DC:14:4E:D5:51:DB:CD:72:E4
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 3FF0AAEDC66CF957D28C710BCD03E0E93F957715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 06EB
Signing time: Mon 31 Aug 2026 13:43:44 +0000
Manifest this update: Mon 31 Aug 2026 13:38:44 +0000
Manifest next update: Tue 01 Sep 2026 14:49:44 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: ZJgUFAnWosDPRwDlJbYnVyhyA89Dn1BHn7yD0Gzd5rA=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 14:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f0:aa:ed:c6:6c:f9:57:d2:8c:71:0b:cd:03:e0:e9:3f:95:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Aug 31 13:38:44 2026 GMT
Not After : Sep 1 14:49:44 2026 GMT
Subject: CN=160E3C4DFC64C0A5D25ECDDC144ED551DBCD72E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:b7:4c:ff:ac:89:90:af:35:ee:50:2e:4b:
04:4b:d8:7a:dc:bd:c5:7d:74:cf:e6:4a:22:ab:a8:
2e:fe:72:64:1e:38:45:a8:3b:01:d7:fe:b6:1c:74:
f2:5d:8c:e3:ad:31:10:5d:33:70:af:0f:6d:b9:55:
a5:14:8d:5f:33:69:ba:5d:fc:45:ad:b2:1b:a1:73:
64:60:12:ad:4a:e9:21:81:e2:4f:3d:a6:87:1b:88:
17:97:39:0b:18:05:2e:40:1e:c8:5f:71:f7:0b:99:
65:79:b4:37:12:8f:c3:ef:58:d1:ee:8c:d4:35:c2:
86:ee:31:e4:74:67:bb:df:b6:33:fb:f3:6a:af:4c:
42:89:1d:98:cc:d6:43:12:d1:05:5d:c5:ed:d4:ab:
3d:17:20:5b:3a:70:2b:7f:7b:a4:06:27:1c:a4:ed:
be:cc:72:d0:3c:e6:40:47:0c:74:52:c6:60:45:fd:
a4:0d:fe:35:8d:18:38:f3:53:af:12:20:cf:ee:4a:
5c:0c:64:ab:8f:82:66:06:f6:73:97:c4:d5:2f:b4:
b2:3c:6b:77:90:50:17:26:96:d9:a1:5b:e5:26:d4:
32:9d:c4:ad:3b:6e:0b:31:f1:8d:da:20:bd:d5:fd:
99:53:4f:b3:b1:f8:39:1b:5a:0f:d9:95:f9:f9:85:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:3C:4D:FC:64:C0:A5:D2:5E:CD:DC:14:4E:D5:51:DB:CD:72:E4
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2f:73:84:b1:66:dc:86:d6:51:1f:40:21:f7:59:af:50:2a:
76:61:cc:a0:c8:8c:09:c1:6f:81:85:80:7d:8e:3e:6d:31:cf:
e7:c0:e1:68:09:c5:57:25:48:7e:66:fb:cc:12:2c:27:62:b9:
5b:64:aa:44:b5:36:dd:16:e1:d5:32:bd:b7:8a:c2:68:64:ae:
28:31:77:90:4a:68:94:7f:81:da:2e:f3:39:bf:5d:9e:01:4e:
4d:93:f0:8d:cd:7f:41:8b:4f:c2:90:b9:49:96:97:3e:22:63:
da:2d:45:56:a3:42:f1:df:af:88:ed:79:9e:ba:37:6c:e4:93:
1d:3c:38:fe:b8:50:8d:d1:23:82:61:a0:eb:9a:50:32:95:b6:
65:34:c1:2d:64:de:70:c8:a8:8f:f6:1d:76:29:7e:9a:73:43:
37:8a:a8:e4:b9:58:24:66:5e:83:aa:e5:dd:08:eb:97:d4:3b:
ef:16:4f:64:f2:87:c3:3b:f3:7b:b5:30:27:3b:b2:8d:ba:a5:
f2:25:2f:d8:52:24:d4:3a:f0:aa:1a:0e:0c:20:88:22:9f:76:
d6:7f:4a:a3:ae:65:a3:ac:a4:5d:03:b8:dd:4d:de:78:1d:be:
20:a9:c8:7d:3a:51:fa:d3:65:57:3f:bd:31:80:22:3a:b1:f0:
97:41:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:01 2026 by rpki-client