Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: 1LP1vDFqqL0HQDdEvBbetvf835pPxhFBDHG+WSlLpb4=
Subject key identifier: 49:B1:49:7D:F2:0C:78:BA:2E:51:7A:E5:02:CE:B6:C6:B7:16:FD:3A
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019D9C2D575D86AAEBB6FCE06F5187249FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 05EE
Signing time: Fri 17 Apr 2026 16:01:50 +0000
Manifest this update: Fri 17 Apr 2026 16:01:50 +0000
Manifest next update: Sat 18 Apr 2026 16:01:50 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: Gg+llZ5FXeDNnLFDcO4LEtnmKEmV/n+BC02Tnm22Ln8=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:57:5d:86:aa:eb:b6:fc:e0:6f:51:87:24:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Apr 17 16:01:50 2026 GMT
Not After : Apr 18 16:01:50 2026 GMT
Subject: CN=49b1497df20c78ba2e517ae502ceb6c6b716fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:c6:9a:f0:18:4d:24:bd:7c:93:9f:84:f4:
21:eb:aa:7e:32:de:75:7a:54:de:80:c6:5e:8f:90:
2a:d2:67:c7:4a:30:7f:03:07:d4:d6:d5:92:c1:36:
63:75:2e:e1:c6:6d:00:1b:01:4c:4b:a0:89:3f:65:
8d:86:63:e7:c6:27:75:ea:1c:4f:d9:6c:ad:20:ee:
30:51:f4:41:68:3f:f4:29:11:e9:ab:11:4d:b4:94:
1e:16:2b:93:99:53:22:35:85:81:e8:ab:10:2b:11:
e0:43:d1:67:36:80:b5:e8:1c:34:2f:12:6f:fc:b9:
60:0a:9e:77:01:f3:c9:85:f9:0f:97:ff:96:5a:b5:
1c:48:a0:e7:98:f4:7e:cb:90:f8:ae:a2:a0:e1:1d:
5d:eb:f1:d1:ac:fb:76:fa:43:8a:d6:5a:c1:ee:da:
79:cd:5a:df:6d:8a:54:59:b6:0f:9f:3c:65:ab:1f:
94:c9:33:66:84:4d:d8:51:2c:a7:a8:26:bb:39:d9:
d2:ee:48:a4:f0:bb:e4:90:b7:af:d7:74:90:ca:00:
b2:f4:6a:72:70:76:ee:35:f4:99:31:53:89:42:f8:
77:44:e2:a9:fb:ad:ba:65:01:9a:07:e5:07:e6:15:
78:85:45:3b:e1:38:dc:06:65:e5:f9:39:20:92:30:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:49:7D:F2:0C:78:BA:2E:51:7A:E5:02:CE:B6:C6:B7:16:FD:3A
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e1:ac:d0:09:bf:c6:72:34:aa:bc:f0:f5:b6:9a:b9:2b:d7:
d4:8a:64:3e:0c:db:b6:fe:0c:b4:ff:48:a4:d6:e2:7c:00:2b:
bc:a2:fb:8c:77:5d:0a:2e:f6:8c:2d:fb:5e:de:f7:3d:f8:1e:
38:55:89:4d:cf:df:20:91:ce:f4:b6:37:b4:81:c4:bc:b1:dc:
87:04:15:a6:60:81:8f:5b:66:22:c4:d2:06:d9:7f:02:b6:7a:
ee:61:e8:a6:10:86:b8:0e:53:b4:88:f6:17:02:73:0b:09:aa:
72:a0:57:d3:b3:61:7e:a6:32:5e:6e:0d:ee:bd:56:4d:d0:98:
07:7a:a4:65:4e:f5:76:56:35:18:f7:3d:ec:12:99:b3:42:e4:
6a:cc:ea:fc:6a:db:d0:84:82:6f:d3:08:0e:d3:0e:38:82:8f:
96:a5:3b:9c:a3:ee:01:63:45:5e:63:ed:a9:89:60:17:39:53:
86:45:ae:c0:eb:3f:c3:78:64:84:9b:d3:e2:29:fb:ef:db:10:
b7:72:a5:7e:35:88:9e:26:a1:74:28:19:4d:dc:d7:ea:63:44:
c7:2a:bd:af:6f:13:0b:ff:49:89:b5:e8:a6:67:f9:25:d8:6c:
02:d9:1f:c8:44:1a:ed:9e:59:16:45:d2:e0:4b:8c:ff:f7:2d:
c2:0a:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:58 2026 by rpki-client