Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: bJ+H2l64a52f1DsRdfFl2x3O1EXuKlMm5xjXcxTKTpo=
Subject key identifier: D5:04:EE:6F:2E:46:41:E2:F4:F7:86:58:6E:19:12:82:B1:B0:B2:0F
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019D98F4F17F00D6CF2432C9F7BEC321C8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 078D
Signing time: Fri 17 Apr 2026 01:01:22 +0000
Manifest this update: Fri 17 Apr 2026 01:01:22 +0000
Manifest next update: Sat 18 Apr 2026 01:01:22 +0000
Files and hashes: 1: F-rApHmMNywXbOy8G6qB8fH01fA.roa (hash: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: C9AutDe018uGon/0xKgrckEiswRmyG4WtCci4mowpJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f1:7f:00:d6:cf:24:32:c9:f7:be:c3:21:c8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Apr 17 01:01:22 2026 GMT
Not After : Apr 18 01:01:22 2026 GMT
Subject: CN=d504ee6f2e4641e2f4f786586e191282b1b0b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:46:df:fe:ba:b3:87:00:5b:1d:da:82:83:
d1:73:7f:d7:de:5e:0d:e8:50:8a:75:70:87:34:ac:
83:36:ab:47:b7:08:ec:7d:2e:a3:c9:71:a7:a4:f8:
60:db:6a:d2:17:22:bd:77:d1:00:0a:91:d0:f9:6c:
43:41:2e:87:74:1a:32:e6:9f:85:24:ac:77:a8:a9:
88:a0:88:6b:90:fb:83:c9:f1:9d:a5:8f:9f:f7:fc:
cc:49:7d:90:19:2e:32:55:92:15:18:77:7a:ad:2f:
9b:0a:1e:70:c0:71:d6:13:05:8b:d0:c1:ea:44:7e:
38:81:7f:25:0e:98:7d:54:97:0c:44:e5:26:56:a9:
f1:2b:9c:e0:e5:5d:06:01:63:0a:96:2d:52:e4:a1:
15:81:72:45:37:06:77:f8:bd:72:51:ac:1e:5a:ca:
6b:e8:a3:b1:94:b9:4c:02:db:9e:3c:d4:ad:98:02:
af:03:2c:a2:9c:d3:f8:49:cc:6c:1c:b9:08:53:b9:
64:db:67:49:5d:44:1e:0c:81:95:f2:84:f9:62:82:
7a:4d:d6:76:7f:41:70:35:b6:43:a7:07:42:23:8b:
ce:22:67:4e:64:2c:1a:87:fc:cd:50:55:9d:74:0d:
53:9d:74:75:f5:b2:ef:b3:b6:24:e3:05:77:d4:10:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:04:EE:6F:2E:46:41:E2:F4:F7:86:58:6E:19:12:82:B1:B0:B2:0F
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:54:e1:e1:f1:0d:f2:bf:16:e8:bc:ea:86:a1:86:12:fe:d7:
1f:f0:aa:88:7a:3d:e3:bc:f1:95:8b:e2:e0:e6:8a:61:be:74:
c1:ec:9a:16:e9:11:97:ce:44:76:cc:d7:b2:78:85:03:db:3b:
ff:bf:39:58:14:d5:42:7e:e2:4d:eb:9c:a1:4e:42:97:52:e7:
1e:51:78:f7:ce:32:c1:0d:cb:43:3d:0b:b1:70:c3:c0:cb:94:
3d:ce:74:38:da:93:4f:8d:f7:c4:d2:5a:61:37:cb:ba:ae:e5:
ba:5e:10:64:81:3c:4c:60:11:86:96:44:16:05:6e:ab:cd:43:
b7:7b:2d:18:64:20:ee:68:f6:4b:4d:26:59:32:53:1a:60:90:
d5:3d:e7:39:d9:9b:d4:95:4f:b1:9d:64:28:14:36:cb:40:3b:
3b:06:3e:9d:1f:21:e1:c0:ed:bc:88:7b:c7:53:8b:9b:4c:35:
c8:cf:3d:36:60:fb:9e:5e:b1:a5:d0:21:68:fb:75:8e:a1:37:
5c:bc:f6:a4:89:df:31:51:af:f8:de:37:82:15:43:02:9c:a5:
52:83:1c:c7:3a:58:11:47:14:e0:25:e6:8b:df:3c:f3:e1:13:
63:96:c3:55:7f:1c:bd:a2:8d:20:de:e8:a2:5b:c6:e1:44:e3:
a1:59:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:19 2026 by rpki-client