Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: 3lhAxIECc2t4l5sp6JACvIKVkzN0eCLfs7eAIQShcU8=
Subject key identifier: 00:4F:B6:20:ED:0E:3D:E6:ED:E8:CC:17:40:C3:B2:4E:E0:41:B4:82
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 01A0F3B12A8DEB680AEC542AFC1949B90DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1A0F
Signing time: Wed 30 Sep 2026 19:01:09 +0000
Manifest this update: Wed 30 Sep 2026 19:01:09 +0000
Manifest next update: Thu 01 Oct 2026 19:01:09 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: dDaALOWtW+sSWFu0WPVjWwdBLLwJNSeHkEC00/mf1Y8=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:2a:8d:eb:68:0a:ec:54:2a:fc:19:49:b9:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Sep 30 19:01:09 2026 GMT
Not After : Oct 1 19:01:09 2026 GMT
Subject: CN=004fb620ed0e3de6ede8cc1740c3b24ee041b482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:ed:c6:0f:83:ec:ca:42:41:ca:1d:9a:dd:
70:55:a9:0b:5a:e1:42:9e:16:4d:34:b2:21:1a:16:
e2:1f:bc:c9:de:4d:19:4d:9e:6f:67:94:2d:27:93:
c9:08:5c:84:9b:2b:95:cb:67:11:ba:98:c2:17:bb:
e1:75:bc:dc:f1:6a:4d:7e:04:90:3c:5b:38:a0:cb:
bb:52:65:a8:54:0a:7f:78:d1:53:d8:d7:89:de:c5:
35:e6:6d:b5:4a:2f:47:8c:42:bc:33:d6:f4:c1:25:
e7:91:2b:cf:5a:8e:52:4d:30:c6:ed:f3:fa:90:db:
eb:f4:62:e8:0e:df:9e:2b:53:f8:ef:b8:15:46:c5:
f7:7a:b9:8b:87:2c:20:fe:9c:e9:54:df:4e:1a:19:
77:df:c1:a9:b8:98:11:e1:0f:3c:d2:dd:ad:49:f8:
9c:ec:2a:d9:4b:25:0c:cd:6b:27:1b:db:81:88:87:
46:8f:7e:43:4f:4d:1d:b0:d2:ed:0b:4f:47:2c:63:
e6:fb:17:8b:04:6a:9a:e7:83:af:bc:8f:40:02:a0:
53:d0:b9:52:19:8b:6b:c2:ee:57:92:af:5e:19:40:
12:69:c5:f5:74:2c:96:0f:36:02:93:36:50:e9:f2:
90:3b:0f:3f:e9:f4:03:53:4d:c0:26:0b:0e:6a:6e:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:B6:20:ED:0E:3D:E6:ED:E8:CC:17:40:C3:B2:4E:E0:41:B4:82
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:f9:2d:b9:20:74:4a:84:c4:dc:14:70:86:07:ad:ef:cb:
d8:d3:d0:c3:82:a8:38:a2:ea:6a:b7:0f:1e:4c:8a:a3:ba:5d:
5e:b6:fe:c6:0b:23:62:68:c8:a7:0b:3d:8b:0f:3d:5a:3c:e2:
05:6a:00:b2:dc:74:82:13:c8:db:b9:80:89:44:32:15:ff:19:
b7:85:14:87:83:fb:6b:42:8e:ad:88:0a:80:2c:c0:82:bb:e9:
f2:b9:1c:fc:b2:a6:14:b9:09:26:41:a2:49:22:35:b3:2c:6a:
99:bc:c2:d9:e4:8b:84:2a:fd:5e:34:09:12:60:39:f7:2b:7c:
ac:81:83:00:0f:bc:ed:0c:11:48:e7:ee:41:3a:af:1f:1a:e6:
2c:79:26:45:a9:d8:66:46:ee:ce:3d:de:4f:6a:e3:15:ee:4f:
07:0f:3c:ba:40:6b:55:b5:2c:82:d8:92:8b:cd:f4:27:bb:cd:
80:7e:fb:39:b0:15:d8:0e:af:75:97:72:90:7e:1a:07:95:1d:
96:b7:95:e2:67:cf:eb:7b:00:d9:64:4b:d4:d8:6a:78:97:2a:
39:c6:b2:0c:89:d1:d3:e4:d5:f7:74:72:3a:67:34:56:d6:54:
f5:ff:0a:47:87:12:e8:18:aa:c2:bc:65:40:48:d7:a7:c9:98:
d1:87:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 02:17:21 2026 by rpki-client