Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: fLEM0I605ZfuzCtBUjGtaJQuv2AcMw9h6vJLOtQkK38=
Subject key identifier: 94:07:FE:1B:E7:2C:CE:E7:C8:10:04:F6:BE:E6:5C:5A:8F:27:54:82
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 588F41DAC1AE44F324A3A6567A217A01E1E50238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 06BD
Signing time: Tue 28 Jul 2026 12:08:27 +0000
Manifest this update: Tue 28 Jul 2026 12:03:27 +0000
Manifest next update: Wed 29 Jul 2026 15:24:27 +0000
Files and hashes: 1: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
2: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: 0GFi5s83cSk+xL6/e68Nojqgwj1g395Xvr0I5riC/Xg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:8f:41:da:c1:ae:44:f3:24:a3:a6:56:7a:21:7a:01:e1:e5:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jul 28 12:03:27 2026 GMT
Not After : Jul 29 15:24:27 2026 GMT
Subject: CN=9407FE1BE72CCEE7C81004F6BEE65C5A8F275482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:5c:5e:09:cd:72:c8:db:ff:c8:c1:85:03:
26:5b:8a:e7:82:76:9d:b5:06:ef:83:2f:2b:21:dc:
04:10:f1:e8:cf:eb:59:87:11:56:d7:f1:c6:33:43:
8d:18:93:43:91:80:f9:74:bf:58:7f:8c:7b:96:5a:
36:f9:3c:7e:82:7b:7d:5b:b1:45:c2:d8:66:7a:cd:
59:fb:c2:18:be:d7:54:76:af:e5:c9:66:14:2e:2a:
e3:1a:43:5f:2f:73:6e:10:0d:0c:5d:f7:d0:d6:ba:
b0:38:d7:33:f1:46:c3:24:b7:9d:fb:6b:cd:21:aa:
7b:4a:e5:b5:14:18:38:3d:93:3c:45:68:40:cb:94:
6d:01:b9:b4:81:25:7b:45:28:e3:94:23:ff:d6:68:
b9:d3:e8:42:3a:03:7f:c8:8d:38:bc:ee:bf:e7:f9:
1b:de:0d:2a:d2:ce:5b:d5:38:7c:06:de:46:c2:b2:
3f:ae:43:85:34:12:b9:7e:49:ce:62:7d:d0:bd:fc:
21:60:dd:1c:75:69:83:c5:62:f0:99:58:a1:b8:13:
e7:b0:78:af:dc:32:f8:9f:dc:5c:71:82:87:f0:df:
40:e4:c9:a7:aa:36:23:51:68:9c:ff:3a:64:6e:10:
03:02:9d:2a:d2:94:4d:5f:13:bc:67:73:3a:1d:9d:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:FE:1B:E7:2C:CE:E7:C8:10:04:F6:BE:E6:5C:5A:8F:27:54:82
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:dc:f0:46:96:f0:d2:33:8d:a7:eb:0d:d4:2a:14:69:35:08:
37:cf:29:33:90:1b:ec:2f:f3:59:88:89:15:d5:29:2c:6f:33:
29:d0:49:11:00:02:27:45:e3:84:c2:df:29:f4:6c:6e:87:d0:
75:e8:c4:15:19:61:ae:f2:51:b2:ae:a3:50:b6:ae:63:64:fe:
3f:44:8f:ac:fe:b5:9c:43:09:97:d9:0d:6b:95:d4:fc:ff:7d:
41:81:50:3a:c1:28:ed:99:02:1f:1e:c7:de:86:72:42:9e:9c:
26:aa:29:c0:c5:f1:1a:90:62:5e:64:1b:00:c6:ce:ec:f9:bb:
a3:01:23:d3:14:f5:53:3b:fd:18:b5:97:5d:60:57:90:0e:cb:
eb:08:26:f9:3f:58:9c:18:85:98:a8:5b:ce:d8:af:7b:04:bc:
2f:f5:2d:c7:f5:ee:55:f2:51:07:5c:e0:ba:7c:1d:52:65:59:
0d:9f:8a:59:08:36:6f:40:2b:20:62:87:84:6c:2b:55:f7:e5:
7c:e1:d3:f7:1e:37:6d:40:05:bf:d7:ef:b9:bb:7b:c4:3d:1d:
b7:ba:ba:8f:a8:dd:a1:27:6a:48:49:7f:48:86:a2:58:4f:f2:
aa:cb:b7:82:d0:fd:38:71:2f:df:02:78:89:69:97:83:67:82:
eb:e2:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:49 2026 by rpki-client