Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: cSNY/58AdZRgPFX05/WwfZUoWdhKK/mEGl4zhIfPzWY=
Subject key identifier: 90:37:A5:9B:27:FA:B2:7C:0E:67:2A:A3:C1:05:D2:EA:F3:9A:8C:BF
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019E1F7F5CD537DEB17CD7E945D70FDA4BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 04:01:40 +0000
Manifest this update: Wed 13 May 2026 04:01:40 +0000
Manifest next update: Thu 14 May 2026 04:01:40 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: A2UmDrD+UfBRe/qvnJFOr8RTgsExetMmpEPPZ6AcF8c=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:5c:d5:37:de:b1:7c:d7:e9:45:d7:0f:da:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: May 13 04:01:40 2026 GMT
Not After : May 14 04:01:40 2026 GMT
Subject: CN=9037a59b27fab27c0e672aa3c105d2eaf39a8cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:52:f6:9e:1e:52:96:9a:f7:ae:12:64:53:
ed:6e:56:bb:75:36:e5:b3:13:84:96:ce:fb:55:69:
bc:c3:05:0b:15:10:9a:21:57:02:eb:1a:df:32:b2:
07:22:63:e6:c0:7a:d9:0c:13:3c:88:65:65:53:32:
6a:5d:ea:1f:41:67:2d:a6:1b:38:7d:df:9b:13:d4:
07:21:07:cf:11:2e:b4:c0:23:76:d3:b1:3c:56:4c:
6a:35:e8:09:5d:d5:a8:9e:1a:d4:81:c9:40:ce:c8:
ca:c4:d9:3b:dd:ce:79:4f:7b:1f:27:15:11:86:1e:
01:b4:42:b9:e5:4d:36:ec:cb:55:22:d4:1c:e1:b0:
5b:e5:c5:2b:b3:fb:8a:98:da:49:41:aa:c8:46:4e:
91:2e:e3:5b:4e:d1:48:33:a0:ad:07:04:27:5c:49:
ea:37:87:2b:2d:2a:f0:61:6b:f1:ec:c4:00:10:0d:
00:df:2c:39:5b:43:31:66:d3:2d:03:92:5f:fe:bc:
1f:3f:6e:72:d1:a8:48:c1:de:5f:14:05:80:35:23:
d1:80:31:c6:54:1e:88:94:d3:fa:47:47:89:d1:3c:
fd:fc:a0:93:53:c9:c5:c4:1c:8a:88:0f:27:5c:d5:
23:df:ad:34:74:59:a1:1a:98:54:13:55:75:52:06:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:A5:9B:27:FA:B2:7C:0E:67:2A:A3:C1:05:D2:EA:F3:9A:8C:BF
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:ba:64:1e:f3:99:c7:58:59:0e:e1:b7:a3:b9:3c:8c:70:
75:65:51:1d:d0:73:d4:44:53:a2:3b:cf:af:3a:1a:53:e5:9c:
7d:4f:dd:57:ed:74:a0:18:91:55:03:81:2f:06:60:c8:62:01:
fe:97:28:aa:8a:ab:3a:3d:af:0c:87:ee:23:64:74:2c:02:4d:
45:c4:d8:58:85:bd:5b:6d:23:d5:3f:f8:ce:9c:2f:08:47:de:
59:d6:7a:50:00:e5:1f:31:db:eb:a9:0f:9e:f7:01:5b:f1:da:
a1:86:d2:97:ce:4b:64:77:63:75:f7:8d:f4:d3:95:dc:8f:57:
dd:5c:a9:36:37:c9:6b:24:54:d8:32:1d:80:c3:9a:44:bc:1d:
44:90:31:f3:85:48:82:88:4f:75:d0:f4:78:fc:c0:92:49:d0:
f1:48:67:2e:da:ce:90:58:f1:f2:eb:56:ce:8b:09:89:95:59:
21:ac:4e:ef:e0:b8:9f:37:66:d4:d9:6d:fe:f3:10:7f:d3:b1:
84:77:ab:b3:c0:99:a0:53:6c:88:68:76:88:c4:15:88:43:ea:
e9:73:ea:a4:02:d6:5c:ac:2e:04:d9:e6:1f:c5:25:e1:5c:3d:
38:6e:77:78:e5:3f:be:a1:fe:cb:08:5c:81:9d:b2:be:ec:a2:
b7:7f:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:31 2026 by rpki-client