Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: UA0tb/9ioWhZDzNWxn7UI6r2iS6VB7WbyaXDa6Vxk9Q=
Subject key identifier: 45:8B:0A:53:5D:42:D6:B4:F9:D5:26:32:E7:FA:D3:B0:8A:20:47:C2
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019CAAC67C9FC6DA190122EC9263A83466A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: BccN0cs0Mz2L/cxaG2jWtP1YCzOKQ1zDtx9g1nm8lho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7c:9f:c6:da:19:01:22:ec:92:63:a8:34:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=458b0a535d42d6b4f9d52632e7fad3b08a2047c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:ce:60:1d:e2:05:56:6a:84:c9:df:09:da:
3a:9c:99:c0:4c:90:8e:f0:c3:76:74:66:3b:99:d0:
53:1e:ad:65:bc:ce:5e:81:bf:e5:58:6d:e2:2c:41:
4d:5b:e7:a1:d7:34:54:fe:d1:6b:e4:8e:28:85:f4:
c5:b2:e5:5e:8d:5b:e9:79:f0:bd:3b:7b:70:6e:8d:
be:52:ea:d7:24:36:ae:51:04:41:6e:52:b3:ee:f1:
7f:ed:db:83:32:17:93:2d:c6:a9:f5:2d:96:8d:e5:
49:63:c3:4d:f1:78:64:58:4b:c0:a5:21:16:d5:76:
6b:bf:b9:86:0d:ed:83:19:a5:80:9d:16:e2:56:ee:
57:10:51:bd:71:eb:46:97:6b:12:2d:c5:1d:32:06:
d2:6f:e6:fd:53:f0:82:bc:fc:9c:34:73:43:71:b5:
a1:70:f8:4b:42:80:3d:6b:97:ff:33:08:11:20:82:
61:6d:10:6c:67:b5:c1:33:a5:aa:7d:2c:6c:e8:e6:
2e:79:86:ec:b9:c6:35:9f:f7:4f:24:23:80:ca:a3:
c3:53:5e:f6:53:e2:e3:f4:06:65:3f:f9:9c:5f:67:
62:bb:e5:d9:6c:33:9e:a7:fc:f1:77:12:3f:54:5d:
ca:53:a4:4d:52:87:5f:3c:29:18:59:f7:e0:10:b8:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:0A:53:5D:42:D6:B4:F9:D5:26:32:E7:FA:D3:B0:8A:20:47:C2
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6a:bd:8a:41:3b:12:a4:30:0a:cc:73:ab:eb:60:84:13:55:
c5:0f:2e:33:1b:31:66:3f:3d:86:b3:d8:b4:84:30:4b:6d:1d:
24:bb:bd:7b:96:30:1f:9f:a4:af:8f:37:44:a5:fd:e5:a8:54:
0e:15:83:66:a9:ae:21:75:9a:89:c4:38:6b:44:38:68:21:4d:
9f:f3:a9:41:a9:b2:02:9f:ce:ae:e1:75:8e:8d:44:3f:94:eb:
bf:b9:13:88:d0:d8:a0:10:a0:23:c5:07:cd:e3:27:90:22:40:
f4:06:5c:d3:fe:88:5e:b3:3f:fd:b4:8d:11:ca:ea:42:d7:2f:
37:7a:1c:b6:21:8a:e8:87:9f:b8:25:9c:d8:84:8a:04:35:b1:
e1:f2:72:ed:ed:73:2b:73:7c:10:f2:e7:2b:eb:83:87:89:cd:
8e:b7:f6:31:b9:78:d4:1d:07:c1:bb:81:b3:0d:60:77:e6:aa:
33:6a:8c:4d:0d:ed:6a:96:34:5b:aa:9e:71:6e:68:04:2e:a9:
b9:5e:2d:6a:1a:39:81:73:44:ac:6d:62:74:97:1e:8e:29:96:
f3:21:aa:55:a1:d7:49:5e:68:6d:48:e7:cc:92:1f:d6:7b:02:
da:a1:14:1b:6d:da:da:95:4c:22:66:68:25:f9:9f:6d:76:8d:
b8:34:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client