Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: jGjtYFMikOHxSGPNDDYPzYtfhZtmLezLTi2S73k2/U8=
Subject key identifier: 07:1E:70:D8:64:65:DD:32:CA:5E:85:63:2F:06:DF:5E:A3:73:9C:10
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019D9A3E45C591AB2B0C14AA078AF18E1553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 07:01:05 +0000
Manifest this update: Fri 17 Apr 2026 07:01:05 +0000
Manifest next update: Sat 18 Apr 2026 07:01:05 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: BVjBio68s1ABF/DzkL4xQ0LJKvuLdsmyJRyFxcTV0Wk=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:45:c5:91:ab:2b:0c:14:aa:07:8a:f1:8e:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Apr 17 07:01:05 2026 GMT
Not After : Apr 18 07:01:05 2026 GMT
Subject: CN=071e70d86465dd32ca5e85632f06df5ea3739c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:c0:0a:fe:38:b3:0c:fd:90:6e:6d:f8:1c:
43:11:d5:86:70:f9:6b:fd:fb:db:28:11:d2:d6:c3:
f1:b5:08:71:a3:fb:80:a8:5a:81:3c:b9:17:b1:a7:
65:43:2b:35:d4:11:56:bb:4d:99:3f:91:dd:64:ec:
b6:75:11:5f:e6:67:e0:98:84:8d:63:b9:4f:20:f7:
d5:92:16:f7:e6:a5:ef:e9:5e:0d:69:96:a2:d6:ba:
7c:fe:41:4f:06:77:ef:42:da:48:d1:0a:f3:bc:7e:
12:40:a9:5a:af:bd:bc:02:24:b6:34:05:05:87:9f:
2f:da:44:89:15:00:c6:e6:65:26:73:cf:c7:16:b4:
49:de:81:be:dd:ed:b4:62:e4:41:62:ed:f8:f0:ac:
0f:75:94:2e:90:17:1f:93:ff:0d:77:fc:fd:fb:8d:
9e:05:0d:09:74:50:c9:6f:1d:cf:df:98:af:50:5d:
48:66:3b:dd:10:e1:88:25:47:e4:50:75:6e:ac:7e:
10:93:cf:25:8b:38:c8:9d:90:db:b8:d8:06:7c:e9:
71:4d:53:66:cb:f6:3a:d1:d8:ef:d9:53:dc:f1:c7:
2d:61:7b:42:38:18:f5:0f:0f:eb:8b:03:44:e9:76:
43:29:91:6a:8b:94:64:28:84:3b:9f:3a:f1:6a:95:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:70:D8:64:65:DD:32:CA:5E:85:63:2F:06:DF:5E:A3:73:9C:10
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:4a:18:b0:d4:eb:54:86:5d:b2:f3:c4:b8:6e:98:65:e5:
4e:89:ca:be:cd:03:f5:00:de:40:95:b4:35:08:b8:6c:14:3d:
51:a7:61:72:0e:97:d7:cc:e0:90:3e:c2:64:84:c9:7e:2f:57:
ea:8f:9b:7b:4a:bc:ce:cf:39:c2:0f:ab:df:ae:4a:01:fa:e9:
ee:07:90:53:ab:73:99:8f:ad:26:4f:bc:31:77:78:f8:61:dc:
cc:70:41:f1:f5:52:72:91:48:7f:5a:07:cf:e9:53:47:7a:75:
9d:3e:8e:1a:4d:93:37:67:2d:a9:f0:34:8e:6b:f5:d0:94:18:
89:a9:1c:23:26:91:7c:47:42:ab:c9:c1:74:96:4b:1f:72:ea:
a3:58:60:65:42:27:03:77:2f:23:65:42:2d:9f:39:af:b1:09:
64:71:e8:1f:e2:16:b3:51:c7:f5:5f:b4:a8:d4:55:fd:ed:34:
ce:f8:61:43:d1:3a:1c:c6:a6:24:f2:ab:4d:79:83:05:25:20:
b8:97:3e:d1:86:50:30:39:96:8f:fb:a4:47:8a:90:a7:2c:f6:
21:ce:67:17:d7:9a:1f:85:3f:8b:5c:a3:fb:9a:52:6d:14:35:
9c:70:3c:9b:ae:c6:b2:44:4e:64:ad:bb:ec:0b:94:6c:89:6c:
9f:c7:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:47 2026 by rpki-client