Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: sl004S25IG6KC8K0e4u5VY4FKt0z9sIgE53mcduaWEI=
Subject key identifier: 5D:7E:11:B8:C7:B5:3B:30:3B:3F:0C:48:B2:A7:77:63:13:0A:86:AB
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019D984F864E7D92203E210E7FFE75CF90FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 09AE
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: dfQtmmKzP/nQa0GL2zl/w0Z9+yNne+6AVovIwVSnUpU=)
2: EvH3doWBTY4fyL5WPp2H-GkyEew.roa (hash: 22wTI0vwTm8O372x/w8nuNJMOHJy0ekZTdOAKD7lcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:86:4e:7d:92:20:3e:21:0e:7f:fe:75:cf:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=5d7e11b8c7b53b303b3f0c48b2a77763130a86ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:72:ea:17:e2:68:20:ca:68:20:e4:63:bc:
7e:e6:c0:7c:0c:3e:b1:77:13:db:b3:08:f2:d0:fe:
46:fb:8a:31:6c:fe:50:2c:4a:40:b1:e7:a1:4c:4a:
d1:f4:11:bc:bb:f5:59:2b:df:71:b8:60:46:7b:ea:
b2:fe:ea:1f:4a:7c:dc:4b:90:7d:c0:4e:ac:58:1f:
00:2b:08:a5:e1:81:99:a3:7d:2e:93:7e:5e:bd:94:
67:85:17:3c:60:a6:05:14:c2:be:44:7a:7f:4b:c1:
bc:ab:50:3b:35:18:8b:38:7c:46:0a:0e:7e:61:1c:
0a:d9:06:dd:17:b8:44:67:fa:df:70:77:ff:80:01:
e3:c5:c1:08:68:25:e9:44:68:dc:3a:bd:c3:1d:e1:
a2:4d:d5:07:5b:20:35:eb:1c:ee:69:12:80:30:9e:
8a:03:ac:3c:12:7d:24:84:5b:8b:15:03:69:cd:d0:
c5:d9:80:5a:8f:18:fa:95:90:64:1b:bc:ad:1f:01:
94:f5:3d:43:d6:6e:6c:01:0f:0d:43:ea:22:a6:0d:
d6:3b:39:0c:0f:af:d6:8f:1e:0e:83:e2:b2:a1:0b:
fe:d3:05:35:37:19:fe:eb:18:05:77:23:3d:ba:6b:
fe:aa:d1:a1:f3:1c:22:6f:01:50:5a:85:39:35:2a:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7E:11:B8:C7:B5:3B:30:3B:3F:0C:48:B2:A7:77:63:13:0A:86:AB
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ba:07:0a:e2:cb:1f:c7:b3:af:a2:ce:29:bc:0b:25:aa:8b:
3d:88:8f:e8:64:0e:52:87:ef:90:b6:4b:bf:f9:f4:78:fe:fc:
b4:85:11:df:4e:4b:a6:2a:98:9c:f1:da:96:7a:87:95:34:15:
af:a1:a9:7e:cc:92:ff:c1:db:76:ed:44:a7:ff:0c:2e:e4:bd:
8b:3a:af:63:d9:41:f9:a2:b4:88:6c:f9:85:5c:9e:5d:d4:44:
78:68:d5:f4:5b:0f:07:ec:0e:82:76:2d:c5:38:80:6a:3e:86:
6f:1e:3a:54:1c:00:8e:77:0e:01:ca:93:68:4b:91:ec:8c:3f:
d1:d0:96:90:31:ee:fa:0d:1a:29:b5:32:3f:c9:2e:7f:da:3f:
1e:81:67:7e:1b:56:75:b8:34:a4:42:63:e2:b7:0a:aa:e6:e8:
c6:ac:95:51:72:27:54:8a:5c:c7:55:70:66:67:3b:88:08:46:
6c:e0:25:71:9d:68:c1:34:dc:c2:84:8e:e8:c7:b9:29:ef:fc:
f2:15:37:bb:80:a3:c5:ea:39:6f:61:b3:15:bc:28:e6:7e:12:
9f:f7:3a:02:c0:77:4f:80:c2:b4:15:52:eb:86:af:62:5c:ed:
20:af:69:10:e9:3c:de:a5:df:aa:8a:23:8d:e0:59:d4:ef:11:
50:3b:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:30 2026 by rpki-client