Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: m1g2FSuqvm9Cn4HHYL2IORYNdkPVydypH5xbGfsM0a8=
Subject key identifier: D0:40:15:CB:73:81:CB:7A:F2:AD:E7:80:3F:9A:56:E6:25:A2:E2:E7
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 6F3C46296F020F573A4EC0C77D213640E5357B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 05F8
Signing time: Sun 01 Mar 2026 21:27:23 +0000
Manifest this update: Sun 01 Mar 2026 21:22:23 +0000
Manifest next update: Mon 02 Mar 2026 23:21:23 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: QoGSlplwHJBa8sx5mf9GHalwcY+YkIeeE1vcnisqM08=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:3c:46:29:6f:02:0f:57:3a:4e:c0:c7:7d:21:36:40:e5:35:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Mar 1 21:22:23 2026 GMT
Not After : Mar 2 23:21:23 2026 GMT
Subject: CN=D04015CB7381CB7AF2ADE7803F9A56E625A2E2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:57:63:61:b7:3e:f0:54:e8:6e:f4:f3:a7:
15:bb:77:54:07:39:1b:e5:81:5b:0d:ac:8f:be:f5:
78:c8:33:55:3d:88:89:77:5e:97:5a:75:96:6d:1f:
29:4b:c3:40:17:13:e3:c1:68:c2:db:48:dd:46:29:
88:2c:93:cd:a2:bc:42:bd:eb:ef:f2:7d:c9:c4:39:
34:94:75:f3:1e:7d:1f:66:23:d7:a3:68:1c:76:8b:
6c:86:6f:35:fe:9d:0a:75:95:4c:ba:56:42:6c:10:
a4:c5:23:c1:27:46:94:49:89:2c:b9:77:33:f6:44:
94:76:ae:83:5b:bc:e1:c5:ab:6e:e5:07:71:18:3f:
e5:5c:66:a0:79:56:3f:0c:24:8f:ae:dd:95:ee:8e:
7b:79:88:d8:4d:da:aa:3c:34:af:fe:c4:95:2f:41:
4e:4a:f0:79:13:8e:2f:0b:bd:dc:af:ef:7c:30:ec:
66:0d:01:49:de:fa:e0:73:5f:a0:c6:5f:9c:f0:43:
cd:86:ed:d5:ac:d0:86:3f:91:6a:91:6d:2d:f1:f5:
8f:85:c1:08:73:74:30:47:ff:0d:d3:3f:32:b6:ad:
27:10:a8:fc:c0:70:90:34:68:dd:19:34:44:43:37:
4b:46:6f:ae:ec:26:99:80:95:81:3a:d8:84:06:cf:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:15:CB:73:81:CB:7A:F2:AD:E7:80:3F:9A:56:E6:25:A2:E2:E7
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:31:6e:25:63:c8:77:d0:15:c0:ae:21:bb:0e:a2:f1:a7:82:
30:0b:ef:50:83:55:c6:bf:5d:5c:80:00:cc:4d:6d:94:82:f7:
25:85:d0:d9:20:2d:0a:74:64:2c:7a:e5:cb:d2:04:6f:83:bc:
ac:8e:59:37:3f:df:5d:db:7d:53:d1:c6:2e:60:91:b7:fa:fc:
35:df:7b:78:0c:a3:c7:22:3e:e8:fb:b8:84:39:36:72:5f:32:
ed:ac:42:eb:ab:e8:18:08:e1:33:2b:d0:a0:a6:cb:27:31:a4:
4f:ce:dd:15:d0:cd:fb:7b:e7:a6:01:cf:e4:88:f7:e1:40:b1:
9e:b4:9f:5a:75:c0:14:55:57:7f:f5:80:84:6f:c9:6e:2d:3a:
27:96:b0:88:61:69:53:0d:94:b7:1e:fc:27:b5:74:b8:79:bf:
49:65:cc:dd:62:1e:fc:c8:41:a8:16:c0:fb:48:c0:58:58:d6:
ea:a0:99:1b:83:b5:3b:76:a5:83:1f:1b:30:cd:3f:15:af:b6:
cb:c0:03:25:05:ae:ee:8c:39:ba:ac:40:5f:0b:ab:f2:01:f2:
bb:5f:9d:55:ed:4f:0f:da:d4:25:ef:95:4b:5b:ef:66:1d:38:
7a:07:88:70:97:29:91:a0:7c:b7:65:e9:27:52:6e:de:5e:95:
b6:21:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:16 2026 by rpki-client