Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: SC+DOU7GlRQtvLd03aEojVuonSFKQ4aoTAUUwSsAjng=
Subject key identifier: 7F:AE:D1:40:FA:4C:BB:E2:F9:98:53:D3:A7:2D:34:9E:71:8B:0B:EB
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 5204DF780A200A212D0B1D14F0F4B9E3AB2081BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 0635
Signing time: Thu 16 Apr 2026 19:44:42 +0000
Manifest this update: Thu 16 Apr 2026 19:39:42 +0000
Manifest next update: Fri 17 Apr 2026 21:16:42 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: CpthdR/3zAcNdEtadRgf49FospkmZWzog9aJ/xkpWp8=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:04:df:78:0a:20:0a:21:2d:0b:1d:14:f0:f4:b9:e3:ab:20:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Apr 16 19:39:42 2026 GMT
Not After : Apr 17 21:16:42 2026 GMT
Subject: CN=7FAED140FA4CBBE2F99853D3A72D349E718B0BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:e2:c8:5a:87:be:47:ab:95:cd:b3:d8:fa:
59:af:c4:ee:72:35:ab:4c:86:e9:c0:55:45:32:29:
7b:30:1b:30:c3:a8:8b:ca:d6:a1:7a:30:f2:39:80:
d3:0d:af:94:9d:9a:fc:b8:e8:4b:74:42:24:a0:e8:
b6:c6:bf:65:b3:82:11:59:09:91:ba:01:e6:3e:3f:
49:3a:d9:42:dd:f2:1d:31:f6:e0:bc:b5:a2:90:f5:
b9:34:a2:e0:24:a2:01:f2:5e:43:08:0b:a5:99:aa:
c7:fa:b2:ec:e0:66:a7:6c:6b:24:f3:28:75:55:0a:
9b:fd:e7:24:40:31:e9:5e:ea:ac:fa:62:df:1a:b8:
a4:4f:2c:a8:db:cd:b9:0e:ca:43:52:a2:16:7f:02:
b6:73:75:dd:d4:97:c7:57:f1:e6:a1:22:44:06:de:
ac:1a:6b:ed:b3:06:69:f3:28:74:8a:74:21:d3:40:
b3:c0:21:f1:d7:ce:4e:e5:83:59:3e:53:0d:26:17:
a3:4e:e1:83:d0:07:98:e9:a8:f3:46:30:9a:82:ce:
b7:57:1f:32:63:e3:a5:47:7a:53:1a:8c:06:5c:66:
31:dd:af:c0:1e:68:ee:cd:56:54:77:66:da:6e:cb:
3c:6f:09:8f:be:3b:55:4c:cf:56:9a:e6:da:ea:35:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:D1:40:FA:4C:BB:E2:F9:98:53:D3:A7:2D:34:9E:71:8B:0B:EB
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:1f:f4:78:62:ea:0f:2e:9e:97:31:b0:23:e2:60:d4:4f:
f9:6f:e5:2f:16:5d:94:95:53:a4:18:8e:fa:05:94:ce:69:99:
29:c0:66:68:d2:e6:bd:d2:eb:41:58:15:f9:1d:02:bd:0c:19:
dc:93:55:50:c4:4e:0b:d7:6b:af:0a:50:b9:38:35:ba:39:29:
34:e5:e0:9f:55:3a:a0:53:45:90:68:d9:31:b4:69:b3:20:78:
af:30:a8:45:68:22:3a:19:b6:a1:26:6d:28:29:90:29:82:f3:
f5:ab:ea:d6:22:1e:cb:83:57:36:87:8b:ae:f7:05:f9:8f:e0:
ca:8c:77:f5:b2:3c:0e:b2:bb:83:3c:95:90:39:1e:c3:05:f1:
65:e3:42:ea:1b:22:a6:36:31:d7:0f:27:a8:2c:cf:e8:5c:e8:
48:f2:98:ae:fd:32:67:76:a9:b1:32:bd:a0:05:96:7c:b3:78:
31:c0:b9:fe:cc:4c:62:29:43:c5:fa:09:28:21:07:11:e8:bb:
9f:54:a9:5f:04:d0:e8:2a:0f:12:83:81:f8:0b:28:ed:4e:27:
61:65:95:f1:89:50:78:6d:56:a0:d2:a1:91:de:63:af:ba:7a:
66:5b:f0:7b:09:c7:c9:dd:26:07:06:e1:fb:c2:fd:47:21:c7:
28:bc:6b:1a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUgTfeAogCiEtCx0U8PS546sggbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yNjA0MTYxOTM5NDJaFw0yNjA0MTcyMTE2NDJaMDMxMTAvBgNV
BAMTKDdGQUVEMTQwRkE0Q0JCRTJGOTk4NTNEM0E3MkQzNDlFNzE4QjBCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgeLIWoe+R6uVzbPY+lmvxO5y
NatMhunAVUUyKXswGzDDqIvK1qF6MPI5gNMNr5Sdmvy46Et0QiSg6LbGv2WzghFZ
CZG6AeY+P0k62ULd8h0x9uC8taKQ9bk0ouAkogHyXkMIC6WZqsf6suzgZqdsayTz
KHVVCpv95yRAMele6qz6Yt8auKRPLKjbzbkOykNSohZ/ArZzdd3Ul8dX8eahIkQG
3qwaa+2zBmnzKHSKdCHTQLPAIfHXzk7lg1k+Uw0mF6NO4YPQB5jpqPNGMJqCzrdX
HzJj46VHelMajAZcZjHdr8AeaO7NVlR3ZtpuyzxvCY++O1VMz1aa5trqNXNrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUf67RQPpMu+L5mFPTpy00nnGLC+swHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05
MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1
NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPof9Hhi6g8unpcxsCPi
YNRP+W/lLxZdlJVTpBiO+gWUzmmZKcBmaNLmvdLrQVgV+R0CvQwZ3JNVUMROC9dr
rwpQuTg1ujkpNOXgn1U6oFNFkGjZMbRpsyB4rzCoRWgiOhm2oSZtKCmQKYLz9avq
1iIey4NXNoeLrvcF+Y/gyox39bI8DrK7gzyVkDkewwXxZeNC6hsipjYx1w8nqCzP
6FzoSPKYrv0yZ3apsTK9oAWWfLN4McC5/sxMYilDxfoJKCEHEei7n1SpXwTQ6CoP
EoOB+Aso7U4nYWWV8YlQeG1WoNKhkd5jr7p6ZlvwewnHyd0mBwbh+8L9RyHHKLxr
Gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:36 2026 by rpki-client