Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: FzcFaS9gLE98ApAqE8hZeMO1JlzOOFxa5AoAoSP17oE=
Subject key identifier: 9B:67:44:D2:AB:66:5B:E3:3F:20:01:C8:E9:18:C1:E1:86:FF:50:E6
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019EC1B707A2098E66D504694AEEA7B88D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 16:00:58 +0000
Manifest this update: Sat 13 Jun 2026 16:00:58 +0000
Manifest next update: Sun 14 Jun 2026 16:00:58 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: QmaBtlsNMDwrZIAS8FZcEG0BUO+zl8mn7qKKJZI3MIA=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:07:a2:09:8e:66:d5:04:69:4a:ee:a7:b8:8d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jun 13 16:00:58 2026 GMT
Not After : Jun 14 16:00:58 2026 GMT
Subject: CN=9b6744d2ab665be33f2001c8e918c1e186ff50e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ef:de:dc:68:d3:09:12:c1:fc:5e:7d:0a:66:
bd:2c:6d:23:c2:74:bd:5d:98:b1:18:24:60:61:66:
cf:dd:eb:a8:ae:69:1d:7d:68:fe:d0:b8:13:83:aa:
0a:1b:46:d3:a9:b9:1c:72:cc:01:96:a4:c8:00:21:
d5:ce:d9:63:33:75:1b:1e:29:82:8e:21:60:3e:d8:
1e:66:15:72:0a:c7:8c:34:1d:81:46:b4:dd:e1:15:
d6:4b:99:68:de:ef:f1:11:23:4e:7c:64:cf:95:35:
a1:ef:9c:91:19:da:6f:cd:54:ae:be:eb:cb:ed:63:
f2:ee:26:a9:b4:ec:25:0c:1a:d2:e1:54:33:11:93:
8a:8b:68:a5:b9:ff:d4:49:60:53:be:95:fb:4a:f6:
e4:97:f1:25:a6:e6:a0:d1:c9:e2:40:56:4d:51:95:
b3:79:ee:32:67:84:19:db:1d:8c:30:67:b5:2d:14:
f3:68:be:a1:ac:f2:4f:26:e9:6a:39:1d:23:31:92:
0e:f6:a6:d9:f2:21:81:e2:61:bb:ae:56:22:fb:a6:
40:81:b5:c3:13:3e:95:e8:84:2b:96:49:ce:70:c8:
e3:bf:16:7f:c1:9a:bb:65:3a:c0:e5:bd:87:39:65:
80:53:6f:52:c7:fa:9e:88:db:ff:c3:bc:3f:8a:52:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:44:D2:AB:66:5B:E3:3F:20:01:C8:E9:18:C1:E1:86:FF:50:E6
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:d9:fe:d2:16:06:10:9d:52:2c:90:6e:97:46:22:90:4e:
4c:9e:4f:16:67:00:1f:01:80:96:22:5a:5f:aa:d5:46:7a:29:
ff:6d:31:be:34:a7:31:5c:9a:82:e0:47:0e:1c:0e:99:7d:6a:
5b:b3:82:18:24:59:33:1d:e0:40:55:2a:68:3a:ca:42:db:06:
20:e7:d1:14:0b:66:38:3a:f2:b4:69:79:04:b2:9c:95:a3:0e:
82:41:7a:2c:70:cb:04:ea:94:e9:51:00:a7:4b:4e:d7:cd:80:
19:3d:d5:04:ca:ba:29:d4:d9:2a:4d:23:7b:55:f7:d7:c7:1d:
43:f9:13:24:e4:63:e6:fc:2d:f7:b2:d6:47:a3:f7:17:06:f9:
20:ed:9f:70:b8:79:3a:86:7e:6d:88:6b:70:a0:ee:57:d6:9c:
62:b3:64:21:30:a0:98:b9:5d:86:97:78:c1:6a:bb:36:9d:48:
ff:40:c8:af:c7:2c:2b:33:02:79:6a:c3:c7:ca:45:cc:97:ac:
06:b4:cd:6a:ce:70:58:9b:54:f4:c4:92:27:b4:56:9e:b5:ad:
cd:b6:e9:a5:0e:00:ef:bd:ee:20:63:06:fb:04:ac:a1:bc:60:
d9:b0:4f:f7:27:b7:2d:46:b1:90:84:2c:17:a7:39:e8:c8:71:
70:1a:4b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtweiCY5m1QRpSu6nuI0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmNjNzkwNjk1YjcxOWI5MjNjNzRkMjBmYWI3ZTYzYzE4
YmM3MzYwHhcNMjYwNjEzMTYwMDU4WhcNMjYwNjE0MTYwMDU4WjAzMTEwLwYDVQQD
Eyg5YjY3NDRkMmFiNjY1YmUzM2YyMDAxYzhlOTE4YzFlMTg2ZmY1MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e/e3GjTCRLB/F59Cma9LG0jwnS9
XZixGCRgYWbP3euormkdfWj+0LgTg6oKG0bTqbkccswBlqTIACHVztljM3UbHimC
jiFgPtgeZhVyCseMNB2BRrTd4RXWS5lo3u/xESNOfGTPlTWh75yRGdpvzVSuvuvL
7WPy7iaptOwlDBrS4VQzEZOKi2iluf/USWBTvpX7Svbkl/Elpuag0cniQFZNUZWz
ee4yZ4QZ2x2MMGe1LRTzaL6hrPJPJulqOR0jMZIO9qbZ8iGB4mG7rlYi+6ZAgbXD
Ez6V6IQrlknOcMjjvxZ/wZq7ZTrA5b2HOWWAU29Sx/qeiNv/w7w/ilKsPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtnRNKrZlvjPyAByOkYweGG/1DmMB8GA1UdIwQY
MBaAFGtsx5BpW3Gbkjx00g+rfmPBi8c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTkt
NTdkNWY0MDFiNTY0LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81NGFmNjgtNDA3NC00NWM5LTk1ZTktNTdkNWY0MDFiNTY0
LzEvYTJ6SGtHbGJjWnVTUEhUU0Q2dC1ZOEdMeHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpfZ/tIW
BhCdUiyQbpdGIpBOTJ5PFmcAHwGAliJaX6rVRnop/20xvjSnMVyaguBHDhwOmX1q
W7OCGCRZMx3gQFUqaDrKQtsGIOfRFAtmODrytGl5BLKclaMOgkF6LHDLBOqU6VEA
p0tO182AGT3VBMq6KdTZKk0je1X318cdQ/kTJORj5vwt97LWR6P3Fwb5IO2fcLh5
OoZ+bYhrcKDuV9acYrNkITCgmLldhpd4wWq7Np1I/0DIr8csKzMCeWrDx8pFzJes
BrTNas5wWJtU9MSSJ7RWnrWtzbbppQ4A773uIGMG+wSsobxg2bBP9ye3LUaxkIQs
F6c56MhxcBpLtg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:23 2026 by rpki-client