Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: cbXJl+puyhvSuxvsZG5QmLmeGsUq01mId0BHheijVrg=
Subject key identifier: EB:B4:C6:5D:7B:97:5C:03:4A:6D:B0:55:75:BD:B2:37:AD:0B:38:99
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 019CAAC68856C8C6C9AAFDC10C4A23939397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: 04D1
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: 2eU00Nf2u118OUoh74WBl9apg8o.roa (hash: DO/KLuLEa1Pd1dwqSwrJA/xoUj9u/oxCfWB4M618KeI=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: vMb9kYdBW2ab5T5aqSv8sAu9wi0FFgHXZ8RF6UxJJ+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:88:56:c8:c6:c9:aa:fd:c1:0c:4a:23:93:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=ebb4c65d7b975c034a6db05575bdb237ad0b3899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:52:1b:68:02:03:53:b9:0e:06:6d:84:3e:
33:6d:c2:bf:ac:22:dc:30:b0:c1:99:46:56:7e:c0:
89:30:46:f6:24:8d:13:69:7b:8b:39:2e:3e:a4:3f:
b1:f3:c0:86:d0:fd:4b:dd:80:95:59:42:56:60:c2:
8f:f1:24:a1:1d:02:36:61:4b:f3:ee:57:d4:b1:d6:
d4:0b:27:c0:5a:ac:6a:bb:df:00:cc:bf:33:ac:c3:
1a:e7:53:79:91:90:21:f7:a4:ae:49:97:04:88:b7:
3e:18:2b:f8:59:5d:81:0d:95:12:d0:08:0f:eb:a3:
50:70:04:71:13:d0:68:1b:b6:38:75:92:7a:e1:43:
58:be:54:38:8a:06:49:8d:13:82:6e:0a:2d:37:e7:
bd:87:82:9d:67:a4:75:84:ff:cd:84:67:f5:04:7e:
e8:25:64:b8:09:67:ea:2b:41:74:df:0d:21:8f:77:
52:60:2c:ca:67:e3:4d:71:34:e3:8c:59:6e:f7:91:
11:c3:68:13:e2:9c:ff:9a:45:79:b3:05:c0:16:21:
3a:3d:72:81:d0:39:99:98:1b:1a:b5:33:37:a0:55:
03:5b:a0:64:06:6d:d4:26:7e:ed:3b:04:c7:b2:3b:
9c:45:3a:d7:f2:27:d6:c9:ee:59:eb:5d:ff:2d:56:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:C6:5D:7B:97:5C:03:4A:6D:B0:55:75:BD:B2:37:AD:0B:38:99
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:a6:44:08:4d:29:ab:9a:af:89:9a:63:c2:4f:51:26:b7:
76:d2:a6:50:17:6f:45:32:8e:df:15:7c:b6:bd:66:5d:94:63:
b6:aa:5f:a5:82:50:4e:47:f2:22:42:13:c0:91:3e:ad:55:4e:
65:f3:28:4e:df:1c:e5:3e:ff:b3:64:0f:9c:1d:cd:0c:ce:1a:
af:b1:8d:3e:15:c4:67:ce:1c:6b:ae:a1:10:1f:f7:60:17:11:
25:13:e5:cd:99:6b:10:46:e5:e8:c0:1b:2d:b9:35:c3:46:1f:
5b:1d:02:1f:ac:f9:57:23:ef:fc:bf:ac:8a:f3:32:c6:29:2f:
01:5f:07:de:51:51:cb:50:2e:1b:5f:ec:93:2e:c0:4f:2e:af:
76:e6:8b:95:13:49:85:80:63:93:9d:94:31:28:19:ca:3f:db:
96:d8:1e:c2:54:59:93:e2:b6:c1:05:06:ee:59:b7:3a:7c:77:
92:73:fe:34:a5:89:da:02:7e:18:27:e8:45:85:68:04:39:c0:
0c:95:9c:c7:19:ef:42:94:6b:a5:51:f5:3b:67:23:28:f8:f9:
3e:87:0d:bb:d3:1a:36:90:26:a3:20:08:2f:c8:54:33:92:53:
c3:ad:61:2e:b2:00:6f:98:da:6b:73:d5:50:5b:7b:5a:07:bb:
54:b7:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:34 2026 by rpki-client