Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: CvjnKFWzYIaLsTIqVNCYSaFvx+3BXOFvqiY1KwffKF0=
Subject key identifier: 3E:28:8B:4A:97:36:BD:55:B0:89:17:FD:ED:54:44:AA:E0:54:E2:9A
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019CAAC60EEFFE45D3D0D38EBB458FB2B5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 0933
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: +yfTCJGjtfnC9qo5SNXhEZ0E/SzwTsBlrM1bO+NqwPg=)
2: EvH3doWBTY4fyL5WPp2H-GkyEew.roa (hash: 22wTI0vwTm8O372x/w8nuNJMOHJy0ekZTdOAKD7lcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0e:ef:fe:45:d3:d0:d3:8e:bb:45:8f:b2:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=3e288b4a9736bd55b08917fded5444aae054e29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:37:26:00:8c:ae:ee:59:9a:f2:c3:86:b0:
86:94:b4:ff:9c:01:26:e4:bb:7e:d8:58:21:19:2e:
65:6d:3f:a7:90:67:18:71:9a:43:0f:22:64:b6:f0:
0c:f9:5d:c0:ba:7c:98:71:b5:d9:4e:c2:ad:d2:73:
bc:87:f1:88:44:c3:61:7b:7a:5f:12:e3:1f:b2:c6:
e2:3f:ba:8d:8b:da:ae:f1:8c:11:1b:89:8c:35:98:
c3:fb:8f:36:69:1e:9a:59:c3:9f:9d:18:e7:d1:2c:
e6:0e:00:58:f8:3d:cc:3a:62:9f:27:e4:61:4d:fe:
a3:f9:47:7a:99:76:dc:8a:89:1f:a0:ef:b2:ef:f8:
1d:84:b1:d9:f0:e1:2e:b2:50:32:87:38:68:0e:a0:
ee:81:3d:cc:d5:a9:6d:ee:83:4b:24:fe:1e:58:59:
22:5d:b1:5c:9c:23:b4:24:1f:62:43:b3:e0:2a:97:
af:d7:1d:00:3f:5d:c1:89:0a:9f:4c:c7:7b:f4:4c:
82:9d:ad:9b:74:29:d1:72:ea:48:e9:be:77:a3:c6:
c5:30:e2:97:fa:3c:0d:e3:9c:36:91:48:08:3c:7c:
7c:fc:7b:a4:3d:71:cb:1f:6a:4b:2c:6e:ce:41:7e:
7c:70:39:ce:14:42:11:8a:ed:0a:c3:cb:9c:00:b8:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:28:8B:4A:97:36:BD:55:B0:89:17:FD:ED:54:44:AA:E0:54:E2:9A
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:13:54:cb:ce:8b:b4:fa:80:03:b2:04:ba:ee:4a:a6:cc:
27:40:87:b2:fa:d6:13:29:c0:d0:a4:f2:70:02:6c:d1:46:e8:
14:ca:6a:e3:2c:79:0d:22:8c:78:7e:45:1c:56:1e:2d:36:e1:
35:b1:7b:00:cf:5a:dc:9e:bb:9e:46:e8:6c:0a:c4:7c:a8:17:
48:8b:bd:93:92:b0:03:ee:c4:41:05:2b:12:2d:d3:08:3b:0a:
d8:bb:64:02:e3:3c:f0:0b:65:03:54:e9:69:d7:e1:3c:c7:77:
48:39:25:c5:e7:76:1d:2a:54:ab:03:a9:f5:1f:9d:1f:52:4d:
c9:89:26:b5:86:38:dc:57:a3:7a:bf:ed:e9:8f:79:c0:33:e9:
6e:e7:54:4e:ed:9d:fb:58:9f:82:fe:67:5e:b9:78:dc:ab:e3:
dc:61:02:c1:e4:92:04:22:be:af:d3:b1:a3:ac:4a:03:44:b4:
f4:48:5d:a8:6f:1b:46:08:0c:40:ca:bd:db:8c:b1:31:4c:27:
14:34:9a:2f:5f:bd:76:03:e2:3b:60:d2:f5:4e:9d:6e:55:79:
7b:b6:e9:7d:9a:ed:f0:e7:3f:c9:ae:c7:e1:c5:cb:4f:cd:4a:
7a:6d:64:8a:a2:5a:a0:b9:e8:5c:17:a0:a7:87:58:99:8c:c1:
79:3a:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:12 2026 by rpki-client