
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
File: 6azP0hq9f-P6DWuzHfSCC_taQYg.mft (raw, json)
Hash identifier: kbltTZdH5CXpEGeQcTMpfImqQwdPK+fZhrfOHk3AjK4=
Subject key identifier: 64:1D:97:C8:05:61:1E:55:51:53:49:8A:22:07:1E:74:7F:67:79:81
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 019CABA1BAA8309461C6555D3E1030B83B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
Manifest number: 0B04
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: 6azP0hq9f-P6DWuzHfSCC_taQYg.crl (hash: 9NZd+ZQp51tx/080uX3pxnJThbUdiBibaGg5HhaFlys=)
2: b_tsB2psJkgmiZaOr3w-QgtEJZw.roa (hash: JEjqJzbCuRhzhys3DkYfGTwD4aP+4P2Txn/0Mjz9ZOQ=)
3: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (hash: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ba:a8:30:94:61:c6:55:5d:3e:10:30:b8:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=641d97c805611e555153498a22071e747f677981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:08:07:2e:57:ae:53:60:2d:86:9c:8c:f4:
c5:71:62:fc:7b:a6:b6:21:71:9e:85:4d:f7:5e:5c:
e2:7f:35:e3:29:90:73:e4:ff:f4:fa:a6:e0:85:2f:
72:3b:db:9e:7c:7d:29:9a:4a:49:8f:63:bd:33:b7:
43:49:eb:3a:d6:3c:68:90:a2:4b:93:82:38:38:e1:
c4:64:42:cb:62:e9:4f:03:49:09:2c:6e:cd:28:a9:
fe:2a:ac:ab:f9:95:b4:0a:6e:ce:03:bd:2e:40:a3:
17:f9:ed:17:e9:44:12:4f:65:c6:7e:5c:05:60:d4:
97:5c:58:1d:14:7d:6c:73:2c:63:12:c8:f6:09:19:
99:ed:ea:4e:92:e6:94:84:81:48:03:12:70:65:8e:
f0:28:a2:d6:0c:9e:d3:3d:98:28:6d:89:04:12:1b:
4a:54:da:42:60:93:d7:fc:83:21:4b:83:07:03:c4:
f4:a4:87:12:a7:c2:84:fa:f4:ee:17:bd:d6:e2:94:
17:f0:43:90:e2:bf:4c:73:2a:a6:78:c5:f4:26:50:
db:0c:76:54:e9:5b:4d:24:1a:26:f2:8f:c2:2e:70:
68:7a:d2:53:4e:82:8b:70:db:ce:f3:fe:b3:e3:59:
68:ca:45:3f:96:89:1a:b5:e7:69:74:a0:62:7c:10:
39:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:97:C8:05:61:1E:55:51:53:49:8A:22:07:1E:74:7F:67:79:81
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e2:05:e6:fb:ae:b8:ab:9d:b1:9e:22:67:bf:2f:8b:57:68:
f4:e9:d5:05:b0:0e:2a:ec:ac:47:59:fa:e3:0a:ca:b1:81:ea:
df:f4:ca:2c:93:2b:f8:00:4b:96:9d:85:12:d5:4a:ad:e9:9e:
ea:95:53:df:93:c9:98:23:ea:d8:ba:8b:e7:59:36:8a:e6:d9:
ab:8d:40:82:10:7d:f5:de:2b:69:6b:35:3a:d2:9c:33:c3:77:
56:01:fa:55:13:81:c3:c5:4d:bb:62:41:82:2b:92:fa:c3:9c:
65:54:b3:b0:02:2d:34:f1:75:c4:e5:91:30:b4:4e:a3:4a:0c:
40:8d:c9:68:66:08:34:5c:21:c9:7e:54:aa:ab:37:57:f1:7a:
f1:d5:db:92:9d:e8:15:c6:b0:5e:58:c9:af:fd:25:c2:95:c9:
3d:12:2c:3e:6a:58:19:2f:86:e5:6a:64:dd:04:fc:87:96:4f:
1b:b1:aa:78:0a:61:65:67:cf:08:3a:8f:b3:0a:df:a9:07:d6:
d3:b4:c2:7b:1e:3d:92:80:d7:e8:56:84:3b:6b:8f:1c:e5:62:
6b:36:7a:f5:8c:8a:ad:b9:8a:63:f2:c0:2d:ef:8d:a9:bb:73:
ac:1e:f8:10:6e:dd:ce:c4:96:eb:71:af:75:9e:1f:47:4b:79:
da:d7:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:04 2026 by rpki-client