Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: HGR+1tpiqX1HkSiscQDJW8Nl6ayVK4kjNTl5NWm8e9U=
Subject key identifier: 3F:F9:A3:1E:CD:18:9D:88:FD:68:86:BB:C0:5C:22:FB:DB:2B:90:94
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 4932A513FACF3087676040DB18C84213D6442CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 0673
Signing time: Tue 02 Jun 2026 14:58:07 +0000
Manifest this update: Tue 02 Jun 2026 14:53:07 +0000
Manifest next update: Wed 03 Jun 2026 17:57:07 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: uihLGWFrPqTkb9N8d8jnJ/0Iq26eznGE1uuThr4eb24=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:32:a5:13:fa:cf:30:87:67:60:40:db:18:c8:42:13:d6:44:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jun 2 14:53:07 2026 GMT
Not After : Jun 3 17:57:07 2026 GMT
Subject: CN=3FF9A31ECD189D88FD6886BBC05C22FBDB2B9094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:2e:78:40:02:fd:07:c4:6d:bb:64:40:8e:
60:1e:0b:3b:f1:b6:10:f4:62:7b:f3:64:fd:28:ef:
d2:03:d1:a1:1a:be:2e:46:5c:6c:3e:03:0c:77:48:
dc:11:8e:1d:4b:f7:87:4f:d9:56:ba:05:cd:d1:2d:
13:0a:34:3d:4f:1b:84:e2:83:14:19:27:46:6c:52:
79:95:7a:1b:7f:f0:99:3c:d8:2e:fb:67:32:40:68:
7f:2c:49:fe:70:8c:70:80:d0:79:0a:24:77:5c:e5:
49:1e:63:73:60:bb:1e:21:ee:da:f7:c3:ef:cf:92:
d6:4a:23:bd:cd:ce:9d:5b:14:13:9b:d7:b5:c4:f2:
12:d4:65:0d:d7:eb:2d:ee:0d:d6:d3:29:40:cd:5a:
ed:76:ea:f5:05:dc:cd:b7:8c:77:87:86:41:ee:ee:
a6:41:1c:c5:14:69:7d:87:be:db:41:dd:b5:ff:34:
fe:39:69:23:84:2d:9d:f4:24:bf:ed:65:15:18:f4:
26:fc:8e:81:b0:21:24:68:9d:aa:68:bb:82:49:6f:
42:48:bc:49:84:a5:f3:46:76:4f:da:22:da:f6:de:
08:56:53:e6:6a:04:e8:a5:7f:41:d8:ac:6d:8b:97:
a5:81:03:df:e6:36:75:99:6c:07:f0:b1:7a:b9:7e:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:A3:1E:CD:18:9D:88:FD:68:86:BB:C0:5C:22:FB:DB:2B:90:94
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4e:c6:fa:b1:5e:d4:19:68:2b:ea:19:8f:14:43:44:6c:a2:
e6:f9:85:c4:89:5c:c4:75:63:a6:97:6d:a6:72:57:f8:4d:03:
dd:82:36:63:45:0b:4a:34:ad:f1:a7:8b:b5:ff:51:9b:ce:bd:
92:2c:91:4b:eb:b8:4b:d6:1f:34:a2:f5:8f:1c:d6:d0:1f:16:
cb:d2:24:e0:25:f7:1a:fc:49:03:f3:21:63:ee:01:d4:ea:cf:
99:2d:88:5e:4c:00:93:6f:9c:7e:ad:73:35:84:04:72:8a:fc:
e1:dc:22:40:5a:d4:33:93:9a:a3:42:b3:12:7e:27:00:be:68:
5e:d6:81:38:7d:6f:78:4f:b8:e0:91:d7:da:be:a4:69:0c:e6:
54:ed:c3:74:95:c3:9d:84:33:d3:c4:29:fb:0f:74:34:27:84:
a9:ab:06:85:4c:48:d1:2c:b0:ec:8b:a5:bc:31:ad:42:a9:5e:
e9:cd:69:fc:d0:dd:16:ee:5f:fc:87:0d:b5:f2:2c:c7:39:97:
51:b3:a5:a5:e7:64:79:cf:b9:01:5a:f8:76:26:79:18:59:e6:
72:44:f4:18:0d:54:2f:48:a7:73:30:7c:a7:a9:44:40:66:b4:
06:50:d1:7a:ba:dd:24:3e:8c:59:e0:76:29:78:b9:ed:22:4e:
b0:9f:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:22 2026 by rpki-client