Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: geESErTST6tiZw+C93mclGrVjwPK6EyoYz2CSQ7RVxM=
Subject key identifier: 7C:76:6E:17:C7:1A:87:7B:6C:8F:40:4A:A6:EA:69:00:6A:55:C6:20
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 019CAA58BDC2B7EA5CEFB4144AEC56C53BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 0A7E
Signing time: Sun 01 Mar 2026 17:01:08 +0000
Manifest this update: Sun 01 Mar 2026 17:01:08 +0000
Manifest next update: Mon 02 Mar 2026 17:01:08 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: exLMwjLenHwaJEHz34G73xHU6iiNsGZX+/U5+PHFUkw=)
2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bd:c2:b7:ea:5c:ef:b4:14:4a:ec:56:c5:3b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Mar 1 17:01:08 2026 GMT
Not After : Mar 2 17:01:08 2026 GMT
Subject: CN=7c766e17c71a877b6c8f404aa6ea69006a55c620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:46:12:42:01:3f:ab:bc:cb:ff:80:a8:fa:
6f:8b:88:65:f4:25:33:61:64:f6:45:6c:41:73:f2:
27:16:3c:64:69:3e:19:c9:b2:5d:ff:50:0e:75:3c:
c9:0e:fe:3a:18:8c:97:0b:84:03:60:e0:fd:e5:20:
26:d3:03:7c:17:81:2e:06:49:3e:65:08:76:36:58:
fb:e7:e6:da:69:c6:c0:5c:fa:06:1b:7f:ba:f9:41:
50:50:a7:cb:c2:aa:f5:b5:ef:6e:a0:1b:5b:81:3c:
12:02:b1:b9:fd:e4:5c:6b:f9:ac:80:54:03:b4:0e:
80:73:b2:98:a6:f0:3f:3b:1d:34:0b:77:32:e2:65:
e6:03:a7:1f:ef:52:9f:59:e9:83:39:b5:f0:37:34:
7e:ad:ee:85:89:5f:a1:eb:96:f9:93:df:01:6f:7e:
70:fe:1d:2b:f9:f7:3c:dc:f6:87:4b:2c:55:9d:ad:
3b:29:99:54:c9:8d:e0:a9:b3:73:5b:ef:50:5f:3c:
84:02:02:cc:48:c6:06:90:f9:b1:ef:25:7e:f5:2e:
9a:99:81:c7:01:4b:17:e8:f4:e0:77:d1:bd:9d:26:
3a:35:24:ef:e8:41:b8:e5:f6:f2:59:1f:d9:4c:61:
1d:09:5d:05:6e:ad:98:16:f1:de:dd:fe:38:65:c7:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:6E:17:C7:1A:87:7B:6C:8F:40:4A:A6:EA:69:00:6A:55:C6:20
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5a:72:7d:89:24:22:72:ea:f4:06:c8:f2:e1:1a:d7:39:f6:
e1:21:98:30:55:ff:19:86:0d:9c:ac:a4:5a:5c:75:99:94:0c:
a4:34:3d:5a:f7:70:e1:ca:b9:dd:93:55:aa:76:4c:ad:20:71:
11:a8:fe:13:50:b9:80:44:4f:92:f3:41:b7:4f:a7:00:17:60:
60:9b:a8:08:ce:bd:e3:b0:f4:21:61:b4:cb:4f:82:b7:7f:52:
9a:41:50:b2:0e:46:bd:12:61:90:9b:57:76:fc:4b:cc:2d:33:
6f:9a:a5:d9:7d:5f:e8:de:c7:ca:e4:d5:e4:b4:51:39:b0:67:
ad:8c:76:8b:51:6c:7f:a1:f2:7f:70:ea:dc:64:9c:08:1c:d9:
c3:fd:67:45:7c:89:62:14:b6:3e:87:57:86:f1:92:c7:16:e8:
8a:59:4c:d3:8b:0c:c1:6a:97:8c:e4:aa:9b:5e:13:02:8e:08:
e0:13:2d:09:9e:63:87:a6:8f:9c:03:80:81:27:63:6d:39:9a:
07:bd:27:a9:57:81:c9:7e:d2:fb:cd:aa:a8:b9:18:3e:f8:b6:
ea:34:15:49:85:0c:ad:be:a6:6e:29:ce:ac:bc:04:ab:cf:fc:
89:ce:54:3a:d6:a4:fa:5d:d7:02:e4:d8:ff:1f:3c:17:b4:41:
30:0b:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:13 2026 by rpki-client