Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: rKc6J3ux4Zboa1fGeoR1ABGNyOTgAmza2PsprgOfFIU=
Subject key identifier: B3:B3:8F:1B:25:02:19:4C:F2:E6:C2:22:0C:16:8C:02:02:95:AA:2B
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01A0EBF992B98A815952DC4048052FECBCEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1A0B
Signing time: Tue 29 Sep 2026 07:03:16 +0000
Manifest this update: Tue 29 Sep 2026 07:03:16 +0000
Manifest next update: Wed 30 Sep 2026 07:03:16 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: le+uGD4dlV09Lhux4DByRt9nDHwChLZ+Xagz4oLC7i4=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:92:b9:8a:81:59:52:dc:40:48:05:2f:ec:bc:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Sep 29 07:03:16 2026 GMT
Not After : Sep 30 07:03:16 2026 GMT
Subject: CN=b3b38f1b2502194cf2e6c2220c168c020295aa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:42:7a:0f:bf:27:90:9a:29:5a:e4:fc:ef:
03:aa:23:5e:b4:e1:3f:d5:34:e2:f8:96:f6:bf:22:
c0:00:55:38:0b:ad:43:00:4a:0f:1f:48:d0:90:ab:
5a:f6:6b:95:15:ee:12:44:ae:71:10:53:d6:87:4e:
40:97:fc:e1:23:4a:6c:93:28:dd:f7:e8:d2:3a:95:
99:3a:3f:68:a9:e0:3b:3a:28:d8:10:05:9b:42:54:
82:66:6f:7b:33:73:1f:eb:13:1a:ff:48:8a:cc:ff:
07:30:b1:b2:fa:64:73:4a:6c:46:55:de:08:65:80:
b7:84:2e:12:27:6e:90:49:30:31:f4:8e:64:f1:2b:
1e:76:2b:72:77:c2:1c:88:e6:d0:5e:af:6c:e0:14:
3b:c8:5c:48:c1:4a:02:2d:51:e7:68:e7:47:f3:52:
c2:75:fb:fd:70:1e:bc:ee:a0:31:88:b0:90:73:dc:
73:0a:a8:4e:a3:d3:3f:af:c2:9c:5b:6c:e1:e2:79:
b2:e6:2b:13:a3:37:09:b5:17:f6:e2:67:60:8c:73:
94:ec:9d:06:6c:1c:0f:72:17:cc:78:2b:62:65:9e:
1d:e1:ea:61:75:28:b7:12:bc:8d:cd:ff:02:1c:a4:
1c:ae:aa:2b:6a:22:f8:96:b1:ad:b8:6d:8e:66:3b:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:8F:1B:25:02:19:4C:F2:E6:C2:22:0C:16:8C:02:02:95:AA:2B
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:f2:c1:13:77:ae:05:5a:80:80:7b:f8:84:5f:1b:9a:b0:
20:21:1e:bd:ad:cd:90:fc:95:28:32:15:3e:e5:eb:73:5c:f3:
e6:64:9b:4d:aa:25:11:44:f4:65:ff:a6:9c:81:dd:76:ed:24:
84:5d:a1:c4:ee:46:94:ec:45:1e:0b:f3:68:65:7c:e8:e9:a4:
56:50:50:15:f7:c0:77:af:bd:3d:90:bc:e2:80:05:bc:af:08:
c4:cb:74:72:a2:8d:39:32:45:1c:02:ab:10:ba:29:c0:01:61:
eb:13:2b:20:7e:b6:e0:46:31:ee:3b:e0:21:6d:14:75:7f:af:
3f:6d:73:70:0a:2c:08:4a:06:2b:75:35:02:37:27:84:5e:d8:
fd:d8:82:81:44:6e:87:0d:d5:40:68:16:99:73:db:c0:7f:09:
aa:57:c7:27:ae:4a:3e:bb:85:c9:58:de:69:82:91:c6:ba:47:
ee:a5:ed:f4:9b:97:a3:dd:40:f8:56:87:37:cf:6e:2d:24:50:
0e:be:d3:c7:03:de:81:3e:eb:cd:dc:35:fa:20:be:aa:99:70:
08:37:4d:11:51:0c:16:79:5f:85:e2:07:5a:7e:8b:b5:cf:8b:
37:ef:d4:90:9d:5a:18:fd:20:62:4c:75:3c:a9:24:08:bb:da:
f6:64:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:35:56 2026 by rpki-client