Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: kpuZKOgapDM6DQRSpegXA3fGYLiD3vggKoRlmjXqCRI=
Subject key identifier: E2:64:06:8B:FB:8A:30:65:C2:F9:39:90:65:42:AA:0E:7F:99:D1:0F
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 019D337684B34741FF37B9E6AF9D91DF1AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 09B2
Signing time: Sat 28 Mar 2026 08:01:38 +0000
Manifest this update: Sat 28 Mar 2026 08:01:38 +0000
Manifest next update: Sun 29 Mar 2026 08:01:38 +0000
Files and hashes: 1: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: kfPD6tr8KbiUX5A2ulST/x4rE6FlEcvzpgl/y0wPLCg=)
2: betqUpBNxt2fw8P1gRb-nmRchZ0.roa (hash: TA1LiGt+yd3esB5iVavjPJEuxZ2ixHs066seZWy0AXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:84:b3:47:41:ff:37:b9:e6:af:9d:91:df:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Mar 28 08:01:38 2026 GMT
Not After : Mar 29 08:01:38 2026 GMT
Subject: CN=e264068bfb8a3065c2f939906542aa0e7f99d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:b0:88:b5:71:65:ac:79:fb:cb:33:8e:19:
50:77:62:4e:48:9b:49:ff:ca:39:d5:82:c5:0b:e8:
ab:8c:89:f1:94:24:e4:13:bb:4f:09:78:0d:d5:de:
f1:88:ea:be:e7:61:b4:2d:b8:6e:99:58:37:05:7b:
e0:d3:fd:30:a5:50:ab:96:8d:b8:9a:1b:8d:ce:c7:
bf:21:93:49:3e:ec:0e:0e:ad:49:28:87:56:42:04:
49:d0:08:2a:bb:ad:17:d1:12:af:62:9d:8f:98:b1:
56:99:62:c8:3f:39:a1:fd:51:62:ca:83:c5:66:7a:
04:1b:ca:59:d9:e6:32:14:13:84:f1:55:70:97:3b:
24:c7:09:f0:80:06:16:65:83:f7:51:74:47:46:1e:
ed:07:1a:1c:c3:69:db:11:be:20:53:54:d2:9a:63:
18:30:a5:6d:6a:6a:cf:f9:bb:ff:53:55:37:3a:5b:
b7:0b:58:ad:d8:d7:da:87:09:03:f8:e7:5a:67:3b:
d4:f0:aa:e1:b1:75:bc:b2:6b:92:37:57:20:62:69:
33:96:9a:42:99:93:64:7b:0b:7f:95:2c:ab:58:1b:
17:e2:cb:35:bd:a3:a1:8b:4d:86:b4:e7:c7:27:67:
09:80:19:82:06:2f:ba:04:9a:44:13:24:21:ac:b6:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:06:8B:FB:8A:30:65:C2:F9:39:90:65:42:AA:0E:7F:99:D1:0F
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:fa:01:22:6b:4d:c8:df:ab:30:d2:bd:c8:80:b2:ae:4d:
39:04:7c:4e:19:93:4a:b2:9d:db:bc:35:02:15:99:19:43:cb:
e2:27:dc:bd:f8:0f:8d:3b:a6:b8:ed:e8:c5:8c:7c:5a:e1:5c:
36:81:1f:0a:99:86:bc:ae:cf:9f:f1:ac:92:53:de:e0:b7:a4:
4d:d5:64:3a:59:87:c7:c8:af:8a:a2:8f:14:26:3a:bc:e6:db:
41:b6:33:76:21:be:86:24:07:4e:0f:dc:cc:65:c3:95:6a:28:
a7:28:94:ff:7c:32:1a:e3:92:8f:e9:27:a7:ab:e7:0c:b1:ec:
24:4d:72:38:53:a1:3c:ae:3b:01:41:57:6f:d3:43:47:59:df:
4e:36:58:0b:f4:98:09:cb:cb:94:72:fd:df:ca:03:8f:16:23:
c7:97:20:83:4f:a6:3c:05:17:8f:4a:fd:44:50:33:01:02:40:
6e:ee:2b:9c:be:0e:c4:f2:ee:a1:66:4f:29:3b:c2:e7:3f:20:
36:45:e3:e4:a0:7e:35:2b:0d:63:96:1b:e4:58:5b:a1:1c:67:
26:09:58:97:bd:91:5c:d8:fa:23:b4:54:2d:fd:97:aa:c7:9b:
0e:b5:03:27:41:de:35:80:02:67:42:bf:22:af:b3:5d:ae:71:
77:7b:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:14 2026 by rpki-client