Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: QtqOZeBXrbu/W4ehGqr5Bj+npy4vt73QPi60S8lp3JE=
Subject key identifier: B4:B2:F9:0E:9D:B6:22:33:D2:5E:92:69:7E:B0:7A:D6:D2:B0:6E:3A
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019FAB63A4FB39E11282E76C7FBD4E82DE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 06FF
Signing time: Wed 29 Jul 2026 01:01:01 +0000
Manifest this update: Wed 29 Jul 2026 01:01:01 +0000
Manifest next update: Thu 30 Jul 2026 01:01:01 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 6Ij1jSobpOpia6PyjTiUc8oPIk3Z6Qybv7D1qXaxY0E=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:a4:fb:39:e1:12:82:e7:6c:7f:bd:4e:82:de:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jul 29 01:01:01 2026 GMT
Not After : Jul 30 01:01:01 2026 GMT
Subject: CN=b4b2f90e9db62233d25e92697eb07ad6d2b06e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:b8:6e:3d:cb:c2:c0:99:e6:4d:e6:d7:5e:
45:56:89:d3:cf:e7:c2:57:d1:21:4f:b3:7c:4f:f3:
6d:e7:60:dd:39:d1:2b:b6:53:db:35:fe:ce:91:ae:
bc:15:ab:55:8f:d7:7d:51:08:00:d6:45:a2:cb:bc:
6d:c4:b3:89:ad:eb:33:0a:da:50:96:0a:79:83:8e:
14:53:b4:dc:a5:ba:8f:f4:0b:58:d8:a9:f7:b3:93:
a0:95:ff:13:0b:db:bf:94:2e:b4:37:18:03:d0:c3:
22:9f:ef:dc:c0:b4:f9:6c:22:fc:60:d5:d4:e2:ea:
ea:89:ca:87:c9:5c:4e:25:0f:84:52:ea:cc:0e:9e:
9d:46:e5:77:6e:f6:13:27:d4:4a:f7:fa:db:aa:e1:
bc:6f:04:f6:ea:c3:d8:e3:fb:ff:ef:83:0f:fb:a1:
d5:48:4d:06:d5:16:70:35:5f:35:cf:1c:e3:f6:57:
5e:28:6b:d1:ff:e1:34:d1:50:05:9e:c2:a1:dc:cf:
c6:3d:d2:af:b8:40:84:22:71:4e:ce:ec:57:f3:33:
c3:9d:d4:99:08:bd:df:0c:68:1b:ac:6e:d6:bc:bd:
a5:bd:9c:d2:f4:92:fa:f7:1a:33:d2:23:cf:98:45:
19:1b:1f:d9:e5:f7:20:9d:65:3a:5e:e9:61:73:ff:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:F9:0E:9D:B6:22:33:D2:5E:92:69:7E:B0:7A:D6:D2:B0:6E:3A
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8b:80:36:73:bd:bc:47:2c:18:3a:44:d2:5c:dd:74:84:d4:
78:01:96:33:a6:aa:e5:c4:3d:29:96:af:6b:34:3e:ed:e2:f3:
f4:8e:04:c1:3e:47:cd:64:5f:a3:07:ef:4f:45:93:15:1f:0b:
3b:03:a6:1e:5e:78:49:2a:c0:ce:da:b8:fc:28:60:d1:c3:af:
fa:e6:d0:09:2f:32:cf:c3:0f:9a:ca:d1:23:71:51:ba:43:46:
37:a1:20:c8:4d:91:9d:a5:8c:e2:ef:03:99:ce:18:59:12:54:
ca:82:29:f4:52:ee:3d:b3:03:44:b6:7a:13:52:c8:d8:78:d2:
7b:db:f5:3c:3c:b4:98:c3:ba:13:1f:8e:bc:c3:b8:61:e2:89:
cc:b2:2f:b5:bd:68:74:5d:3e:2d:b9:a0:b3:45:33:c1:5e:f2:
05:eb:cf:59:d6:74:37:f0:ce:c8:1c:0c:10:9e:12:2f:9a:37:
bc:a4:96:11:23:e8:35:15:95:fc:b2:f7:29:c6:b9:c4:75:ed:
27:f2:19:d2:32:07:aa:18:5c:0b:81:e8:ee:19:7c:2b:4c:ae:
fd:34:e5:ca:db:bd:f4:6e:9d:f5:a0:c2:5c:e7:14:d4:60:46:
7d:cf:ba:65:8d:42:77:4e:48:a9:8c:4a:51:f4:17:67:90:e3:
74:68:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:56 2026 by rpki-client