Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: OG8jGsUoHipBIauk1MUcxcRqt1+R88ZnzU4NCNkd+z4=
Subject key identifier: 8F:92:9E:BD:5F:8F:15:6A:0B:89:AD:E4:80:93:98:C5:CD:C9:F3:9F
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019D284DB812115155C4443CCBC80F4EED30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 04:01:15 +0000
Manifest this update: Thu 26 Mar 2026 04:01:15 +0000
Manifest next update: Fri 27 Mar 2026 04:01:15 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: 3jc5FA7gNmKiwnfWFU8+ofWCe4RqZd+8duSHRWEj9qA=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b8:12:11:51:55:c4:44:3c:cb:c8:0f:4e:ed:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Mar 26 04:01:15 2026 GMT
Not After : Mar 27 04:01:15 2026 GMT
Subject: CN=8f929ebd5f8f156a0b89ade4809398c5cdc9f39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:31:e1:4f:6a:ca:55:4a:d4:c9:ad:fe:82:
92:99:20:99:6b:76:82:ad:8f:ef:a9:f6:ba:a2:0a:
4f:d8:f8:42:76:ee:21:ec:cf:06:3f:bd:7f:ab:cf:
d1:74:7f:08:e4:de:6a:92:6a:c8:7c:9c:92:70:69:
84:69:37:09:71:77:0f:47:43:a3:76:66:cf:17:6d:
b6:92:7b:f7:55:38:65:6c:ec:c5:b5:3a:40:0a:75:
75:57:4b:9d:f6:bd:c1:8e:a0:45:1e:8d:5e:99:d5:
d6:5c:6f:74:3a:47:a4:b1:55:c3:a7:81:9d:a1:39:
0a:db:4d:36:ae:3c:29:01:0b:a0:d3:9e:42:07:7a:
9b:70:07:09:84:58:9c:9b:75:66:40:00:48:3e:64:
4b:6a:71:8c:62:57:ac:1d:56:4c:76:c4:0a:de:2c:
db:84:96:62:dc:ef:95:9b:60:c4:9e:77:d4:38:c7:
47:4f:af:41:ec:b1:c4:fe:89:16:aa:41:a5:44:9b:
9e:c1:6a:66:97:9d:8c:8d:af:13:64:97:b6:98:54:
96:2e:92:4c:d7:44:0b:a4:22:63:b1:8e:0a:e7:42:
8a:71:d3:5a:2d:20:05:53:a2:f8:6a:21:09:ea:10:
c3:c7:a4:65:63:6d:84:4a:23:6b:fb:fa:ee:05:e0:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:9E:BD:5F:8F:15:6A:0B:89:AD:E4:80:93:98:C5:CD:C9:F3:9F
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:18:a2:fb:18:1e:64:5c:da:11:65:6e:ea:b3:ba:cf:16:
9e:f7:d1:6f:ae:bc:4c:28:58:86:03:a9:42:c4:95:32:5f:58:
c4:4e:24:73:c2:22:72:be:e7:a3:9a:95:d5:c6:fd:7c:bb:3b:
c1:31:6d:70:d8:23:eb:d9:1b:6c:4d:ed:d2:ce:e5:f8:15:d1:
c3:9f:2e:29:03:1b:a6:79:a6:12:33:fe:5b:05:60:57:3a:db:
14:ca:7e:65:ed:b0:81:5e:42:d8:1b:c8:0d:8b:65:c2:fb:ae:
56:11:e6:80:a4:3f:09:31:72:f7:5d:c2:9e:21:fc:6c:25:c4:
b9:33:65:bd:e1:19:14:10:5c:fc:26:a4:ff:6f:75:64:8b:cb:
50:05:8e:18:97:1b:54:47:af:e1:6f:32:a7:78:61:6a:9c:41:
0f:2a:69:2b:da:23:2a:0f:ee:67:93:40:01:3f:4a:1f:c3:7c:
03:38:f3:cb:dd:93:31:36:11:b9:b5:8b:a9:29:5b:29:de:dc:
2d:e8:68:af:01:e5:bf:4d:45:c4:de:41:2e:02:80:df:a7:5a:
7d:3f:68:cd:69:73:04:84:85:3e:71:d9:96:4f:7e:54:e1:3e:
d5:72:4a:52:09:05:70:66:c9:d5:57:6a:ad:18:54:47:58:22:
3c:b5:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:52 2026 by rpki-client