Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: 06FrxAdr04EK8/QNUwkTIY12VsW7aLT2W0jEgNBfa+0=
Subject key identifier: AA:7A:03:EE:AE:30:72:C5:F4:02:36:2D:95:50:78:78:BB:5A:76:94
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 019D265EE1778BC78675CA5063905B1FD870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 0973
Signing time: Wed 25 Mar 2026 19:00:45 +0000
Manifest this update: Wed 25 Mar 2026 19:00:45 +0000
Manifest next update: Thu 26 Mar 2026 19:00:45 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: 8cljPtXFsR3zgZXW2gHraHcCRbMfrredwjOr8sL4ztc=)
2: EvH3doWBTY4fyL5WPp2H-GkyEew.roa (hash: 22wTI0vwTm8O372x/w8nuNJMOHJy0ekZTdOAKD7lcp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e1:77:8b:c7:86:75:ca:50:63:90:5b:1f:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Mar 25 19:00:45 2026 GMT
Not After : Mar 26 19:00:45 2026 GMT
Subject: CN=aa7a03eeae3072c5f402362d95507878bb5a7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:16:0f:5a:e1:bc:0f:ed:42:61:d7:82:d5:
3d:bd:6d:8b:1c:89:eb:35:fa:b3:19:8d:0a:75:aa:
2d:bd:8d:1c:96:ec:39:bf:01:9a:29:08:67:6b:94:
71:b3:89:d3:c4:b3:05:8e:84:71:d2:9b:80:73:4a:
f8:c7:b7:5e:8e:42:23:0f:8a:69:bc:c1:e9:93:9e:
54:0f:93:9c:4d:47:af:85:2d:34:58:59:72:cc:8d:
da:b2:d4:9f:f9:c4:5e:ca:c8:63:f3:b0:19:15:18:
06:34:46:10:b7:73:5e:ec:80:27:64:0f:23:0d:61:
e8:47:0a:ba:6b:b3:cf:56:c2:b6:38:31:08:d8:6a:
c3:6f:88:15:bd:d4:e8:36:ff:41:cc:57:1d:f3:08:
67:c9:ab:0a:c9:70:0f:5a:07:2c:89:ac:7d:3a:1b:
a6:22:83:0f:21:b8:ac:b9:ed:82:17:ec:ee:cb:6d:
28:aa:80:6e:45:db:a3:45:d7:ab:89:c7:27:dc:7b:
32:29:33:88:79:90:68:38:cb:a8:06:30:6e:d2:99:
51:ce:10:aa:77:f9:69:83:8c:93:df:ef:4f:c4:98:
9c:3c:f8:5c:14:86:10:99:9f:10:44:09:82:a0:a6:
4a:5f:61:cd:b0:66:f0:23:0b:9d:d0:b8:4c:f5:ff:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:03:EE:AE:30:72:C5:F4:02:36:2D:95:50:78:78:BB:5A:76:94
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:1c:7a:c2:a9:90:7e:00:42:91:e4:3d:ea:b4:78:83:7b:
c9:82:18:63:5f:66:cb:63:22:e6:56:da:86:d4:de:f8:2d:85:
d6:fa:89:48:44:46:18:cf:3a:04:17:d2:08:5e:fd:51:85:c5:
54:66:7b:f8:55:9d:c6:8d:7b:cc:90:a6:ab:8d:47:90:4f:6d:
69:9f:f4:26:55:d1:96:7d:d4:a9:2d:fe:20:41:f8:70:e6:6b:
29:ff:f8:27:84:31:30:dd:bf:5f:c3:6f:cd:eb:02:77:5d:91:
19:3e:40:2e:74:51:c2:4a:2c:84:45:be:3a:08:26:a5:d6:69:
e6:bf:7c:ce:f2:e3:f6:22:05:97:cc:8f:26:a3:6c:41:b6:ab:
27:2d:88:58:41:48:68:df:af:50:d0:c8:92:65:66:ad:76:00:
fd:24:ef:a1:cb:62:ce:8f:3b:5f:01:94:2d:2a:fc:f5:f0:e7:
13:9e:6e:36:6f:2d:7a:97:f2:20:08:38:47:d7:7e:90:1a:37:
1c:49:c5:ee:fe:92:8b:8e:2e:d7:b8:08:72:26:f3:c3:88:2e:
d2:44:90:ab:60:55:5a:fa:c1:38:7b:5d:68:15:64:95:d0:68:
fb:f0:e8:b6:33:24:22:90:1a:a0:f4:4a:c9:87:b4:6f:fe:9c:
f2:fa:32:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXuF3i8eGdcpQY5BbH9hwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYTZkYzJmMjY2OGViZGNmODZiNmMwMjU4YTgxODdlNWY3
Y2UyNzAwHhcNMjYwMzI1MTkwMDQ1WhcNMjYwMzI2MTkwMDQ1WjAzMTEwLwYDVQQD
EyhhYTdhMDNlZWFlMzA3MmM1ZjQwMjM2MmQ5NTUwNzg3OGJiNWE3Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUwWD1rhvA/tQmHXgtU9vW2LHInr
NfqzGY0KdaotvY0cluw5vwGaKQhna5Rxs4nTxLMFjoRx0puAc0r4x7dejkIjD4pp
vMHpk55UD5OcTUevhS00WFlyzI3astSf+cReyshj87AZFRgGNEYQt3Ne7IAnZA8j
DWHoRwq6a7PPVsK2ODEI2GrDb4gVvdToNv9BzFcd8whnyasKyXAPWgcsiax9Ohum
IoMPIbisue2CF+zuy20oqoBuRdujRdericcn3HsyKTOIeZBoOMuoBjBu0plRzhCq
d/lpg4yT3+9PxJicPPhcFIYQmZ8QRAmCoKZKX2HNsGbwIwud0LhM9f8BlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp6A+6uMHLF9AI2LZVQeHi7WnaUMB8GA1UdIwQY
MBaAFAOm3C8maOvc+GtsAlioGH5ffOJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUt
ZWJkMGMzZWU0NGFlLzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUtZWJkMGMzZWU0NGFl
LzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeUcesKp
kH4AQpHkPeq0eIN7yYIYY19my2Mi5lbahtTe+C2F1vqJSERGGM86BBfSCF79UYXF
VGZ7+FWdxo17zJCmq41HkE9taZ/0JlXRln3UqS3+IEH4cOZrKf/4J4QxMN2/X8Nv
zesCd12RGT5ALnRRwkoshEW+OggmpdZp5r98zvLj9iIFl8yPJqNsQbarJy2IWEFI
aN+vUNDIkmVmrXYA/STvoctizo87XwGULSr89fDnE55uNm8tepfyIAg4R9d+kBo3
HEnF7v6Si44u17gIcibzw4gu0kSQq2BVWvrBOHtdaBVkldBo+/DotjMkIpAaoPRK
yYe0b/6c8voy9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:22 2026 by rpki-client