
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: CHrIqvEZYCsNSw8bP+kT5GiMY9WS7986OTuBNkA9iIE=
Subject key identifier: 63:12:73:E5:A9:AA:7F:6E:6B:2D:0D:E3:32:8A:B8:00:A2:7C:3A:11
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 0FF23E982F61BD577B350CBEDE2D4C285A36AB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 06AF
Signing time: Fri 17 Jul 2026 21:31:28 +0000
Manifest this update: Fri 17 Jul 2026 21:26:28 +0000
Manifest next update: Sat 18 Jul 2026 22:31:28 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: YXynX5TJYRtgsP3+XPKLMQ9iZL318xOXvvGR50zfDmE=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f2:3e:98:2f:61:bd:57:7b:35:0c:be:de:2d:4c:28:5a:36:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jul 17 21:26:28 2026 GMT
Not After : Jul 18 22:31:28 2026 GMT
Subject: CN=631273E5A9AA7F6E6B2D0DE3328AB800A27C3A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:6f:0d:a5:ee:87:69:fe:5d:c8:26:61:04:
a6:f2:ce:5f:7b:c0:13:f4:33:68:97:58:81:41:b4:
65:8d:1c:6d:fe:4d:c8:3d:af:c7:2d:75:47:83:18:
b0:aa:1c:95:f8:b5:94:34:a6:5e:18:91:31:88:2c:
54:61:36:3c:84:77:21:96:a8:bf:4d:f4:50:22:86:
a9:ae:ad:18:d7:dd:e7:ff:a0:59:97:b8:75:da:6b:
41:a1:f6:9f:72:14:37:87:d7:ff:a6:f6:c6:3c:81:
51:ac:33:19:7b:48:75:fc:f7:af:db:8b:32:f7:ae:
d2:10:56:a8:fa:51:91:8d:1c:6b:0f:28:9b:7c:40:
a2:ee:cc:90:aa:b1:91:fc:0d:01:d0:2e:f2:0c:81:
50:1a:cd:ee:72:07:97:83:78:e4:94:80:c7:ca:61:
60:58:2a:21:bc:19:a7:c4:44:62:00:2f:9e:42:df:
d8:76:54:63:fe:8f:25:46:36:e6:4a:fa:7e:86:68:
e3:7f:59:83:0e:a0:c2:7e:60:a6:1d:4c:6f:ed:0d:
48:0d:e5:b1:e4:45:63:af:5e:97:f4:58:57:0f:e1:
7f:0b:ef:30:9e:29:79:c5:a8:09:3e:0e:00:4c:9f:
2d:89:85:f1:18:e9:e3:d4:34:be:68:fb:bf:35:08:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:73:E5:A9:AA:7F:6E:6B:2D:0D:E3:32:8A:B8:00:A2:7C:3A:11
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:39:1e:a7:9b:77:04:52:97:29:57:4d:74:c7:12:5f:46:
b0:e1:8b:00:d5:9f:b3:6b:85:19:a7:b4:4e:ec:e3:71:90:be:
07:8c:79:2f:38:67:b1:7b:31:3d:14:41:55:6c:c5:1d:1a:3d:
62:96:3a:8a:a2:4e:18:65:be:a1:8b:98:8a:13:13:8e:b8:7e:
2b:43:13:0f:a3:84:69:30:17:a1:42:b3:73:33:df:4f:c4:f6:
a8:04:09:39:2a:b6:b8:9f:32:5d:7b:da:88:9a:1c:a3:25:98:
df:fa:34:6f:eb:7e:10:15:48:2f:e5:e3:c4:34:14:ea:e8:16:
6f:13:8b:f2:df:84:08:6d:1a:58:82:5c:c6:62:08:4c:0d:ea:
68:05:9d:a3:a5:33:54:fd:6d:cf:bb:14:35:a0:de:d5:bd:b5:
8d:1d:48:e7:01:df:47:be:c7:00:b0:94:44:ee:d7:7e:b0:1d:
65:7e:98:77:60:e8:6e:27:1c:f3:bc:fd:ac:a5:19:3e:07:35:
0b:37:0f:a9:7c:c7:25:4c:a6:25:6a:e4:16:74:18:b0:fc:1c:
53:69:3b:a5:48:2d:19:90:ac:ca:c3:7e:7d:a6:f5:4c:27:f6:
55:cb:a8:7f:a1:a1:bf:68:f5:11:7f:c2:30:e9:6b:bb:ca:24:
d2:b8:61:a8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUD/I+mC9hvVd7NQy+3i1MKFo2q0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yNjA3MTcyMTI2MjhaFw0yNjA3MTgyMjMxMjhaMDMxMTAvBgNV
BAMTKDYzMTI3M0U1QTlBQTdGNkU2QjJEMERFMzMyOEFCODAwQTI3QzNBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI828Npe6Haf5dyCZhBKbyzl97
wBP0M2iXWIFBtGWNHG3+Tcg9r8ctdUeDGLCqHJX4tZQ0pl4YkTGILFRhNjyEdyGW
qL9N9FAihqmurRjX3ef/oFmXuHXaa0Gh9p9yFDeH1/+m9sY8gVGsMxl7SHX896/b
izL3rtIQVqj6UZGNHGsPKJt8QKLuzJCqsZH8DQHQLvIMgVAaze5yB5eDeOSUgMfK
YWBYKiG8GafERGIAL55C39h2VGP+jyVGNuZK+n6GaON/WYMOoMJ+YKYdTG/tDUgN
5bHkRWOvXpf0WFcP4X8L7zCeKXnFqAk+DgBMny2JhfEY6ePUNL5o+781CO4JAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUYxJz5amqf25rLQ3jMoq4AKJ8OhEwHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05
MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1
NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCM5HqebdwRSlylXTXTH
El9GsOGLANWfs2uFGae0TuzjcZC+B4x5LzhnsXsxPRRBVWzFHRo9YpY6iqJOGGW+
oYuYihMTjrh+K0MTD6OEaTAXoUKzczPfT8T2qAQJOSq2uJ8yXXvaiJocoyWY3/o0
b+t+EBVIL+XjxDQU6ugWbxOL8t+ECG0aWIJcxmIITA3qaAWdo6UzVP1tz7sUNaDe
1b21jR1I5wHfR77HALCURO7XfrAdZX6Yd2Dobicc87z9rKUZPgc1CzcPqXzHJUym
JWrkFnQYsPwcU2k7pUgtGZCsysN+fab1TCf2Vcuof6Ghv2j1EX/CMOlru8ok0rhh
qA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:28:29 2026 by rpki-client