Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: 7TWf0ClbDrE4CLaFZG8uYeQJ76Ed50bSpRysVG6NxQc=
Subject key identifier: 5B:CB:A0:A5:D8:3D:E5:57:EE:EE:4D:EF:C0:90:33:AF:BC:E9:92:B1
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019CAB6B5F6D27ADAB8897F8A2FDC33EB5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 0712
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: F-rApHmMNywXbOy8G6qB8fH01fA.roa (hash: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: J+WB8eNM5rzGQONM5y1KiXKnk0oJSH/JC9GNafd0Ipc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:6d:27:ad:ab:88:97:f8:a2:fd:c3:3e:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=5bcba0a5d83de557eeee4defc09033afbce992b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:6f:d3:a2:fa:58:98:f1:71:93:24:a5:61:
c7:02:c4:01:5e:8b:28:70:67:86:c4:a3:06:e6:a1:
2f:1d:e1:c6:74:8e:26:8c:fa:52:66:a9:94:56:01:
74:c9:d3:24:07:ad:e3:6a:41:8b:76:9f:f7:d1:ae:
fb:df:a8:1e:06:e7:79:25:82:8e:6b:49:01:94:a8:
22:2d:61:fb:aa:6f:46:0c:d4:b0:94:55:81:2d:5b:
fe:81:4d:15:97:2d:7d:b4:9c:9d:a7:dd:34:e4:54:
f3:98:50:0a:f5:94:24:d7:c5:64:33:be:9d:e4:91:
89:34:e9:25:76:73:e4:25:3b:8f:52:6b:49:f9:2f:
4f:49:d9:f4:97:a4:bb:83:1a:f1:92:be:d3:30:89:
97:57:81:ce:a6:79:30:4e:74:04:11:22:36:00:f0:
84:3e:a9:1b:ce:23:47:1e:9e:0d:6c:6e:a9:05:42:
a9:59:ab:b6:0c:41:23:82:97:79:b9:33:b1:55:c1:
68:7e:ee:82:e9:b5:24:55:2b:cb:ba:85:16:fc:f0:
67:09:ee:38:4c:a2:b6:32:fb:50:1f:2d:fe:66:26:
2f:c3:08:c8:10:88:45:58:59:4f:e9:3f:ca:7c:e8:
95:69:f3:8f:28:9f:65:51:c9:d8:5f:d7:94:f7:4e:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:A0:A5:D8:3D:E5:57:EE:EE:4D:EF:C0:90:33:AF:BC:E9:92:B1
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:90:3f:ce:ab:7d:3b:97:97:d8:36:08:43:ce:e2:b4:b6:ec:
49:ac:6f:8e:60:c0:3d:a2:3c:82:11:68:99:f7:58:99:fc:0b:
46:34:da:00:6c:1f:91:c7:8c:90:b5:a7:50:70:05:63:0d:76:
39:55:f3:10:a7:11:c6:86:eb:6e:5d:7e:90:3e:88:18:17:79:
14:ad:b7:59:59:47:82:6a:98:44:f3:ce:37:96:46:11:29:2a:
f7:97:50:ef:44:f9:b9:b3:9a:56:bd:49:ec:ef:7b:47:18:50:
da:67:76:04:78:ce:3e:8e:5e:20:07:68:6a:1e:6f:b4:fa:54:
4b:3e:6a:aa:4a:4c:c6:2a:cb:5a:42:22:ae:d2:d4:20:61:46:
89:3a:17:9d:8f:dd:87:b7:41:71:27:04:63:4b:47:48:61:8c:
25:19:78:80:28:cb:ee:64:58:ae:ae:8a:5a:4d:e3:08:b8:56:
2c:86:3a:af:06:4a:d1:d5:d1:ca:4a:e8:8d:a6:bc:35:2c:fd:
5d:42:4f:31:b8:71:06:5b:d5:15:df:50:67:e2:6a:88:c8:a7:
a8:d2:ce:ca:1c:91:f9:51:5c:16:2a:69:6b:4a:54:72:0f:4a:
91:8b:cf:a3:53:08:28:fc:a5:0e:1f:07:ff:f4:a7:ff:95:be:
2f:d8:a8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra19tJ62riJf4ov3DPrW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTY5YzNiZGM5MmQ2ODExNDhhMzU4YTEzYTZlNmY1M2Rm
Yjc3NTgwHhcNMjYwMzAxMjIwMTA2WhcNMjYwMzAyMjIwMTA2WjAzMTEwLwYDVQQD
Eyg1YmNiYTBhNWQ4M2RlNTU3ZWVlZTRkZWZjMDkwMzNhZmJjZTk5MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSFv06L6WJjxcZMkpWHHAsQBXoso
cGeGxKMG5qEvHeHGdI4mjPpSZqmUVgF0ydMkB63jakGLdp/30a7736geBud5JYKO
a0kBlKgiLWH7qm9GDNSwlFWBLVv+gU0Vly19tJydp9005FTzmFAK9ZQk18VkM76d
5JGJNOkldnPkJTuPUmtJ+S9PSdn0l6S7gxrxkr7TMImXV4HOpnkwTnQEESI2APCE
PqkbziNHHp4NbG6pBUKpWau2DEEjgpd5uTOxVcFofu6C6bUkVSvLuoUW/PBnCe44
TKK2MvtQHy3+ZiYvwwjIEIhFWFlP6T/KfOiVafOPKJ9lUcnYX9eU905OEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvLoKXYPeVX7u5N78CQM6+86ZKxMB8GA1UdIwQY
MBaAFGumnDvcktaBFIo1ihOm5vU9+3dYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMt
YTljMDRkMDk1NGUyLzEvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMtYTljMDRkMDk1NGUy
LzEvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZA/zqt9
O5eX2DYIQ87itLbsSaxvjmDAPaI8ghFomfdYmfwLRjTaAGwfkceMkLWnUHAFYw12
OVXzEKcRxobrbl1+kD6IGBd5FK23WVlHgmqYRPPON5ZGESkq95dQ70T5ubOaVr1J
7O97RxhQ2md2BHjOPo5eIAdoah5vtPpUSz5qqkpMxirLWkIirtLUIGFGiToXnY/d
h7dBcScEY0tHSGGMJRl4gCjL7mRYrq6KWk3jCLhWLIY6rwZK0dXRykrojaa8NSz9
XUJPMbhxBlvVFd9QZ+JqiMinqNLOyhyR+VFcFippa0pUcg9KkYvPo1MIKPylDh8H
//Sn/5W+L9ioaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:47 2026 by rpki-client