Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: mVX80PYvmFLSjkyxBGWlAm1G5CMOZQS2hUntdhHSWWs=
Subject key identifier: ED:E7:F5:52:A8:4B:61:C3:3E:BA:AC:64:DE:23:B2:FD:3A:1E:4B:9E
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019EC0DAC72CED759789456F57911AF33083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0906
Signing time: Sat 13 Jun 2026 12:00:23 +0000
Manifest this update: Sat 13 Jun 2026 12:00:23 +0000
Manifest next update: Sun 14 Jun 2026 12:00:23 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: vkmBXtYCpDNh4Y/4DSmanX4brSNXJC8vaRKlFaKsub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:c7:2c:ed:75:97:89:45:6f:57:91:1a:f3:30:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jun 13 12:00:23 2026 GMT
Not After : Jun 14 12:00:23 2026 GMT
Subject: CN=ede7f552a84b61c33ebaac64de23b2fd3a1e4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:28:b8:91:19:d4:2c:36:a5:af:5d:bc:5a:
c4:e8:b9:8c:35:c7:e8:02:c3:e6:e4:f0:3e:10:9d:
a1:f6:ff:19:6f:fa:26:53:e2:af:4c:ff:09:84:ff:
13:35:bd:29:c6:b0:d3:58:b7:8f:10:6f:4e:da:93:
4f:5b:98:1d:d8:83:0d:7f:2a:33:58:0c:ec:99:84:
e2:8b:45:29:ca:2c:12:87:c5:af:39:f2:0a:f8:26:
99:88:3f:b8:42:a2:c6:be:8b:c0:02:f7:6a:ff:cb:
83:b3:af:a6:c3:68:01:ac:a0:5c:83:86:55:d7:f8:
58:c3:01:87:0d:4b:94:ed:c0:cf:74:37:48:c2:12:
a6:41:8a:a1:e2:86:56:ab:f3:58:00:7d:1a:62:1b:
d9:9f:70:c7:fe:a1:1f:69:33:40:34:ec:a9:fa:f5:
aa:cf:37:3e:90:d1:87:55:8b:78:7d:6c:97:04:5c:
7f:dc:11:04:db:78:25:fe:41:c5:eb:08:02:22:d4:
34:59:bb:2c:47:86:8a:d0:19:6b:13:e0:7b:68:22:
f0:d2:22:c4:35:de:98:50:e7:fd:f6:c4:77:26:c3:
53:c0:7b:a2:af:69:d4:12:e0:b5:82:41:5f:7d:d2:
1e:58:24:3e:9c:5a:47:ed:a4:1b:16:72:e8:ac:ec:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:F5:52:A8:4B:61:C3:3E:BA:AC:64:DE:23:B2:FD:3A:1E:4B:9E
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:1e:f0:0b:aa:77:83:ba:6f:b2:3a:21:ce:8e:74:ce:71:
15:95:55:05:42:aa:76:da:64:26:b2:c8:fc:9e:20:24:bb:e2:
1b:33:2d:19:cf:ed:09:b8:32:b7:41:d0:c7:25:5a:4e:34:54:
96:8e:3c:df:fc:85:fc:93:bb:6c:3e:84:b9:e2:d8:06:79:92:
b5:36:bf:d0:2f:af:cc:13:1b:3b:92:3b:ff:1e:2a:64:5b:f4:
f8:31:00:0d:58:68:58:5e:d4:be:1c:42:d4:35:43:29:f8:6a:
d9:34:0e:62:62:10:eb:64:9a:79:d5:94:4c:5e:c6:82:26:4e:
12:b1:d8:a0:43:75:df:79:0f:6d:ff:ee:5a:44:cd:be:80:e1:
e2:6d:56:22:38:df:49:01:a9:17:3b:d9:39:83:55:28:aa:30:
0b:2b:bd:20:45:b7:7c:db:e6:ec:f9:8d:bb:b4:7f:b3:7b:94:
0a:d3:64:fd:f1:e2:6e:25:74:e4:e1:dc:64:5b:1b:eb:b7:c7:
52:71:89:88:46:aa:a1:ae:a4:65:38:f6:74:e3:5e:90:06:bf:
51:a1:42:f9:f0:f9:bd:36:2b:ca:95:78:6e:45:24:ac:da:f0:
64:c0:02:5d:cf:6a:26:ef:ac:4c:fd:3c:da:ac:61:ba:c9:92:
d3:df:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:17 2026 by rpki-client