Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: 2ZEKwNwVIeIJtbR+LgzrYkZrCWKammnov3Vn/5WlNn8=
Subject key identifier: AC:A0:B8:05:17:B3:13:0D:53:08:EE:03:1C:B7:2A:FD:D7:79:5A:B7
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019CAAFD48CCD3EE3FB3FF9B338E0D918975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 13A3
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: 8VoV6D_eegqIBHZanaVQhQ_BcA0.roa (hash: BR+EO4ahbvoTRogEluDEGsMqIHtTB8hdFQ6Pgx2wNhw=)
2: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: 1/JZZltgjZUEM0NXCbAwb9VUuitkv15wdG8Wo0jPTWk=)
3: sG9W1Xy_sx6TaJNJJ2tAauKaFb4.roa (hash: 2TT3GLZDtqOpSaUq6isrPNnlWIbuaybJDZfYdXkAT/w=)
4: tWqZy2tTqFqt9D4rCvazUAWDWPA.roa (hash: Ccuo+A6uM9l1WuitzfylA9prnTUAjYnop5Ot1I+Ef6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:48:cc:d3:ee:3f:b3:ff:9b:33:8e:0d:91:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=aca0b80517b3130d5308ee031cb72afdd7795ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:80:00:0b:b9:a1:d2:32:e6:69:26:9f:3e:
e4:e4:1a:72:14:8a:08:10:84:c0:9e:2f:04:3d:02:
6e:8c:11:34:9a:41:a9:96:c8:37:12:7b:5a:97:a0:
92:e0:f2:67:24:44:97:40:3c:21:1e:9f:f7:99:4f:
ee:3d:20:4c:99:3f:6e:97:ad:48:a5:71:7a:46:27:
28:19:e3:a4:81:ed:63:64:5b:d0:8d:45:e7:6e:53:
cc:4e:61:99:7b:88:f0:7a:5a:05:02:74:67:f9:91:
3d:bd:9e:1e:40:32:a9:79:97:b4:62:96:c6:50:2d:
b1:64:88:3d:33:8a:3e:ac:dd:6f:e7:b5:7d:a0:7e:
21:4a:47:9b:77:31:e5:ac:c1:02:d2:4f:41:b7:7c:
aa:e9:7e:01:1f:7b:34:99:21:24:cf:77:7c:c3:f2:
87:5f:7b:55:11:ee:eb:fb:8c:a0:83:1a:fd:f2:ec:
26:d6:86:d5:f9:2a:26:c6:5a:e6:4a:25:56:88:0d:
20:9b:54:23:67:54:95:1a:1c:23:22:8d:07:ad:78:
97:67:cd:b4:43:15:c8:d8:d5:bf:ad:46:dc:fb:ac:
8f:1b:c7:24:41:54:99:14:12:6f:07:34:59:3e:94:
6b:1b:01:72:b4:6d:51:2d:45:14:80:57:20:23:a1:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:B8:05:17:B3:13:0D:53:08:EE:03:1C:B7:2A:FD:D7:79:5A:B7
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:a0:e1:8f:00:1a:2f:fe:54:4b:ab:9c:db:75:62:11:12:
76:68:36:66:61:ed:de:ba:04:77:ca:df:80:0e:51:8e:c1:d9:
a6:1a:55:54:a3:69:6c:f2:81:b3:f8:06:c7:bd:03:a0:bf:15:
da:61:c9:d0:bd:8e:81:5a:c3:06:7d:da:4a:5f:05:de:1e:6d:
c3:01:93:25:28:62:22:23:06:ce:bd:e5:49:d0:4d:15:5e:ef:
2e:75:ac:d6:00:3b:2a:8e:93:04:8e:7d:f6:7f:21:5d:f0:70:
c3:31:72:38:a8:7c:bb:57:23:21:42:ae:48:40:7a:53:f1:e2:
e4:6c:b4:ff:82:34:4b:d6:6a:9b:13:0c:a1:a8:c5:6a:56:14:
ca:ba:19:9d:29:69:7c:72:dc:8b:1c:b2:4a:7b:c5:be:f0:99:
b7:d4:4a:5c:2f:14:ca:08:02:cc:98:9c:26:09:59:bb:70:a0:
eb:33:b9:c6:de:05:ce:1e:f5:58:8f:cb:9b:95:b8:eb:c2:4d:
6f:38:66:1b:46:ee:15:09:f6:cf:66:1b:18:26:b8:af:f1:a7:
b5:e0:6a:cf:cc:80:a9:94:2d:bc:52:24:58:74:19:4f:c7:ca:
70:28:23:71:52:fe:0b:c4:d6:ed:ef:31:df:1a:c2:cf:8a:7d:
49:16:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:02 2026 by rpki-client