Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: WeVIrnLBrdNv8P30GjeNdQ6IsIYPXK59OmhWZdF52Gw=
Subject key identifier: BF:FA:B9:6B:84:97:28:41:23:8C:BC:A7:0E:39:21:B1:03:B2:04:7E
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019CABD956D7D8EDB18CCB704DF269BA6702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: F6
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: Uh4uTq1FmEUdWP7hsXi1z1ca8so.roa (hash: 2MKeNx3VVKWB5Bm0D78lgQPDmL1MTSmwmG6xslMz+Ew=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: br1q0mqUQ2QKtMnxLo/99WIfCpngZ3+GV86127uiTTY=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:56:d7:d8:ed:b1:8c:cb:70:4d:f2:69:ba:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=bffab96b84972841238cbca70e3921b103b2047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:1a:3e:c0:ae:86:43:55:c0:aa:8e:52:22:
85:2a:84:9c:29:0f:62:3f:24:5c:a5:2f:9c:bf:90:
f0:58:23:a3:64:d6:01:fa:96:78:d8:63:40:bd:ed:
82:65:51:3a:36:dd:f7:cc:73:18:9d:f5:e3:f8:50:
41:e8:32:d0:99:bf:c1:46:aa:f7:55:07:49:bf:f9:
1b:a2:c4:60:db:93:7b:e3:f6:8f:b4:96:09:fe:03:
94:59:3a:9e:50:7d:59:5e:28:31:2d:5d:11:a1:9d:
ca:15:ae:47:ad:21:7d:f8:ce:20:29:b5:75:0e:2e:
a4:8b:c2:c0:f6:f2:2c:25:4c:41:a7:51:2e:ca:8f:
5f:d0:a4:ee:b0:81:87:54:8a:5c:2c:67:6c:95:30:
57:8b:93:33:c4:d0:38:5b:a7:32:12:52:a3:1b:f4:
9f:07:49:f3:e7:4f:69:fa:73:84:b1:ca:ee:eb:15:
b3:7c:7f:3a:c7:a8:e4:57:fa:0d:92:03:b6:11:a1:
43:32:a4:da:5d:d8:c0:aa:f0:6a:55:9f:ae:ee:25:
f4:f0:82:0d:b7:55:9e:64:9a:3a:f8:84:c2:6d:cf:
12:50:e4:67:10:f2:12:e8:ab:cc:72:34:3c:84:42:
cd:26:b2:e8:e8:75:66:11:1b:4e:4b:c1:7e:d4:4a:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:B9:6B:84:97:28:41:23:8C:BC:A7:0E:39:21:B1:03:B2:04:7E
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:af:ef:40:ce:ad:07:4e:f6:39:be:ab:67:86:7a:9f:b7:a1:
56:f5:96:35:72:0c:0d:fd:f3:aa:5f:90:bb:55:6b:a7:19:65:
ac:f0:46:b6:ea:eb:d8:0b:0a:eb:c6:0a:92:9a:2e:36:09:73:
70:c3:39:3d:a5:1d:f8:97:22:26:9f:9f:41:ab:b7:60:f2:36:
e9:c0:f6:71:95:00:1f:ff:4a:cc:8e:1a:72:e8:64:20:2e:d2:
5c:25:26:9f:46:4d:66:bf:45:23:a2:a9:2b:c1:b0:2a:5f:cd:
f3:1e:1b:cf:2a:06:b2:f9:b8:2b:61:a6:09:74:2e:ea:db:2f:
b3:11:71:d2:a5:31:fc:42:b5:47:93:13:17:ea:c1:9c:19:fe:
eb:64:7e:76:71:f9:c0:4e:4d:59:18:66:ce:3e:7f:47:64:e0:
1b:55:18:10:27:4d:83:33:38:f7:1f:cf:38:dd:1d:f2:bd:3b:
fe:de:2e:fb:45:8e:ef:ed:70:ff:86:3c:f8:e7:9e:94:a1:1d:
04:a6:90:98:b2:39:c8:c4:74:a1:4b:fe:06:f4:3e:27:55:ba:
87:e4:a7:1e:a1:36:b7:44:d3:e2:05:a1:d5:ae:2b:11:a7:6d:
3d:4e:0e:4e:72:f3:44:fb:ae:4e:da:f7:92:87:3e:e4:cc:bc:
cb:44:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:31 2026 by rpki-client