Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: wHBDF3clgb6YS8tRbU/ejVIEXMDgPv/8xMx7DCsUb2o=
Subject key identifier: 94:98:E2:CA:B5:5B:E9:25:4C:3C:AA:46:C4:FE:75:BB:B5:03:06:92
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 019D99D065A894088EA88C711AA3AC304A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 0AFA
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: zwigiuxEbyoVFP/DtbcmID+44k4q8RH2IO+s3il/dZ4=)
2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:65:a8:94:08:8e:a8:8c:71:1a:a3:ac:30:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=9498e2cab55be9254c3caa46c4fe75bbb5030692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:d4:07:1e:3d:ec:ce:9b:1b:70:bd:91:72:
0a:ab:f4:8e:10:6b:eb:5f:e3:98:ad:a6:25:96:85:
ab:73:2d:2b:46:36:c9:c4:8d:d2:11:df:0f:30:39:
b2:ab:51:36:8b:c0:9b:87:2f:65:2d:39:13:1e:d9:
53:98:65:7f:a3:fc:2a:f5:2e:fb:78:92:33:5a:7d:
28:29:65:0f:32:30:ba:ac:47:02:a6:e6:06:88:ed:
b3:5b:34:94:01:80:32:15:07:c8:6f:d7:3a:bb:be:
ee:5f:a7:d2:8e:e5:13:8c:17:fd:2a:fc:60:51:77:
19:88:72:f7:74:82:e5:fb:9e:24:e7:3e:ba:e9:ff:
4a:e8:17:7a:5b:b3:67:da:7f:c5:08:7a:ff:8f:a1:
60:8b:46:a1:70:5a:a8:1c:95:7c:77:2d:14:ba:d4:
73:44:9a:92:01:0b:ad:3d:eb:40:48:67:33:31:66:
d4:d3:86:6a:de:03:fb:05:41:a6:9c:70:ff:b8:7f:
cc:c8:54:ed:d7:c4:a5:d8:9b:a4:5d:6d:e5:bb:3d:
99:9f:e5:b1:5e:c2:08:74:e7:17:1b:f8:d2:02:90:
e3:20:c1:da:3a:78:79:89:d0:56:f4:81:ad:4d:b1:
c2:22:0e:45:1c:7d:27:7b:9b:84:00:f7:69:76:d6:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:E2:CA:B5:5B:E9:25:4C:3C:AA:46:C4:FE:75:BB:B5:03:06:92
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:97:ad:5f:1f:40:d8:88:35:f7:1c:92:cb:35:ee:2a:ea:
a9:cc:c7:a6:73:8e:48:18:ba:62:3b:d8:42:84:03:35:41:87:
a6:43:45:9b:fd:39:4a:27:f5:fb:90:e2:13:b4:90:1b:04:02:
64:31:07:d8:c5:c9:f1:55:2a:ea:56:f0:58:38:3e:c1:6c:2c:
c0:7c:fc:4f:e6:d0:4c:5d:a5:cd:4b:59:e9:5a:19:ab:3b:ff:
e6:a4:c7:95:27:58:a2:55:5c:36:d8:a8:35:81:7d:2c:5f:92:
9f:87:2f:10:af:41:d6:8e:99:8a:77:52:39:64:a9:b4:7d:ec:
06:a7:0b:44:a6:8b:fe:db:df:27:59:6a:9d:9b:0b:88:f8:32:
80:d4:e5:54:35:11:26:5b:87:b0:36:33:ca:4d:4b:5e:ce:c0:
6e:ab:66:fc:2a:a8:cc:ba:5f:b9:2c:6e:d9:c7:af:7e:99:47:
db:48:8e:24:03:13:2b:95:43:66:e3:7b:9b:73:ef:79:5f:4d:
28:c7:61:eb:11:0e:99:5a:ef:75:9c:d0:96:6f:92:2f:d7:83:
dd:33:6c:7d:bb:0e:c7:d0:77:b8:45:bb:31:7d:a2:f7:b5:9b:
3c:f8:ac:71:2a:86:4c:09:f3:5f:75:6f:c4:2b:13:9c:cf:cd:
15:c6:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:37 2026 by rpki-client