Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: 9XpcoGp8KK0lmBBavIFGqLM7fhvI6mcaF+VtV3661EA=
Subject key identifier: 93:E0:32:DE:6C:06:CC:E3:CA:CD:A7:60:21:CA:ED:E9:95:73:A0:B1
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019CACB45B8AECE6DBD666083218C5BA7492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 04:00:26 +0000
Manifest this update: Mon 02 Mar 2026 04:00:26 +0000
Manifest next update: Tue 03 Mar 2026 04:00:26 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: 6PpXMUdms+JBIfYYxxDWA7BTXUzgghOB60dlBOGqBqM=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:5b:8a:ec:e6:db:d6:66:08:32:18:c5:ba:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Mar 2 04:00:26 2026 GMT
Not After : Mar 3 04:00:26 2026 GMT
Subject: CN=93e032de6c06cce3cacda76021caede99573a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:08:df:f5:47:eb:1b:24:db:fb:95:06:07:
8c:a9:6c:b0:e9:b8:e6:99:8e:56:cf:ff:7d:1b:e0:
d3:be:9f:6e:68:cd:d1:9e:c1:27:8d:fd:97:34:7a:
70:e2:e8:52:32:60:5d:ab:fe:26:b9:91:88:68:bf:
c7:06:c9:68:bc:17:1e:cc:e9:dd:4a:83:ec:24:dc:
ea:bb:19:fa:72:5a:01:48:3d:d6:92:fd:07:20:33:
f4:6a:d3:a5:8a:f8:a7:c5:bf:10:2c:df:c4:7c:0e:
24:54:94:8e:40:f6:cf:7a:69:24:ba:d7:ff:02:b3:
ba:db:55:8d:41:86:9d:5b:e4:3b:10:1c:b3:da:10:
f7:f2:33:e1:b2:98:ba:28:12:4e:af:8d:2b:e0:5c:
22:a8:7c:76:c0:f1:21:6e:2c:e3:55:60:00:a5:59:
94:2e:33:f4:b6:09:91:c3:67:3d:57:34:cd:69:c4:
a9:45:95:d0:d6:57:8b:63:7e:92:2f:d9:18:45:4d:
78:a1:37:cb:a8:6e:f5:34:4b:a2:d3:50:9c:2a:c7:
bc:62:cb:54:c1:8e:d9:42:1e:67:ec:13:f0:62:18:
78:6d:68:00:ef:38:e1:dc:48:92:37:41:c6:59:cf:
2b:17:52:b4:4c:1c:3e:ff:47:8e:1d:b5:0d:49:dc:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:32:DE:6C:06:CC:E3:CA:CD:A7:60:21:CA:ED:E9:95:73:A0:B1
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ab:8d:0b:77:42:77:83:4b:31:43:59:3f:b1:ab:78:07:b3:
11:b6:3d:11:1d:2c:67:2d:2d:f7:c0:2a:14:ee:df:38:32:0e:
3b:12:7d:74:9a:02:09:e5:25:f1:bd:31:68:85:cf:e6:78:2c:
9c:3d:93:b9:fc:70:de:ac:50:31:c5:e5:83:f1:a2:ca:4c:4d:
80:59:16:85:3a:34:9b:dc:e7:d7:ea:1a:4e:42:04:d5:85:86:
8e:a0:5a:da:c1:15:a9:a6:b4:f4:5d:d7:4b:18:fe:bc:36:be:
6f:69:b2:8c:43:2c:30:41:65:e1:1e:97:45:70:d2:6c:ab:a0:
4b:50:13:d2:e3:92:af:4b:3e:3c:8e:e7:42:b2:61:d1:7a:26:
3f:92:2e:91:2a:3e:05:20:6a:47:6b:37:7f:df:78:52:5e:fa:
ea:16:40:01:46:a0:ac:55:ae:9f:a4:08:77:be:d9:98:7e:8a:
87:9e:99:4d:10:6f:5c:b0:76:e6:5c:85:b7:f7:70:df:94:78:
0f:0e:6f:24:68:28:bc:07:12:2f:cc:44:1b:6b:2f:02:25:47:
cf:7d:31:30:04:0b:2a:e5:9c:df:a7:ea:12:4f:fe:76:04:b7:
71:b6:0c:3c:36:af:fd:fc:88:a9:c2:e8:78:b3:2d:b5:7c:19:
af:3e:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:35 2026 by rpki-client