Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File: _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier: I7Ly5VIR6TkiD8zIVrdEnr+TnUCPC4H195KmbQYxXhE=
Subject key identifier: BD:49:07:EB:9C:41:49:51:E6:54:1C:57:D9:C9:F0:8F:0F:61:50:7A
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial: 019D29CE6CEBD7796DD51208F62375A20B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number: 0138
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: N/JsCm+QtN3kQK/WL02hCWpnm42gWXAlD7J6V5oPXb4=)
3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6c:eb:d7:79:6d:d5:12:08:f6:23:75:a2:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=bd4907eb9c414951e6541c57d9c9f08f0f61507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:3e:03:c9:df:b5:2f:d2:eb:f9:94:67:0c:
2f:84:1f:2a:29:ba:fa:c8:7d:d0:96:df:76:14:a4:
3e:ef:59:09:cb:78:ca:79:79:ea:e2:28:eb:0e:6c:
b9:05:b1:00:fc:4a:45:48:09:35:07:f0:eb:58:a6:
6f:fd:2b:7f:c2:95:41:b1:f9:63:f1:b4:6f:a5:aa:
72:10:06:37:c4:6b:fd:74:f3:6a:ba:5c:f1:e3:26:
35:b5:b1:10:61:fb:c7:ff:df:2f:99:6c:a4:17:cf:
e2:fc:d3:d0:31:e5:34:ca:ea:6d:a4:62:fb:ba:65:
97:2f:c6:d7:4d:d3:a6:c6:d0:c5:4b:ac:01:26:72:
50:db:cf:15:f0:b8:f0:fb:d1:ad:13:8f:fb:c6:79:
f8:91:ac:fb:be:8a:13:c6:09:f6:ae:31:71:58:2c:
61:af:52:17:0f:9f:d5:3e:09:7e:b5:75:44:2b:30:
4c:7a:33:0d:e2:e4:e3:d6:87:12:e4:1c:85:a7:af:
53:20:61:d1:47:6c:ea:80:45:2c:67:5b:37:86:93:
73:22:3d:7a:c3:e5:db:4b:2f:28:f5:71:ef:c8:22:
2d:9b:b2:85:07:ab:0b:31:49:7a:fc:e0:6f:c4:65:
8f:99:cc:eb:dd:0a:2b:3f:bf:8e:53:62:f4:6d:df:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:07:EB:9C:41:49:51:E6:54:1C:57:D9:C9:F0:8F:0F:61:50:7A
X509v3 Authority Key Identifier:
keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:24:e5:74:7a:ee:2a:87:a4:27:bb:ac:4c:29:22:eb:34:b0:
ab:5f:b2:a7:55:a1:4b:9d:ae:44:44:46:e9:2f:f5:9e:bf:fa:
d6:1e:e3:4f:7a:33:ca:69:f5:7b:e1:a7:60:76:e5:9c:cb:df:
69:d4:fa:f8:96:f5:20:3a:bd:a0:c8:2e:56:73:93:f4:ab:76:
b6:ca:7f:0c:68:34:f6:41:3e:fc:a1:d6:03:6d:00:f6:da:0b:
2c:f4:f7:7f:27:e1:4b:ff:00:30:45:ff:e5:c5:f1:a9:67:25:
4d:8d:b3:b3:5a:d2:62:fa:b8:5c:1e:a6:2e:55:af:82:f0:3d:
8c:dd:ff:36:27:e5:90:77:1c:ec:07:9e:3c:fb:62:b7:f6:23:
28:64:35:e2:c6:a3:31:e2:8c:7b:dd:7e:e2:ef:52:8d:26:ab:
58:90:7c:f5:d2:92:75:2b:63:87:f5:d4:8e:33:a0:fd:0d:72:
41:8d:66:df:7f:b7:6d:cf:23:9a:5b:86:ca:d6:a3:8d:d3:35:
d0:b9:07:0e:fc:35:b7:6d:5e:a6:98:a5:b5:82:0c:1c:82:e3:
cc:e3:b9:0e:ce:95:3a:28:7c:b6:e0:59:93:d3:25:19:f4:bc:
0e:74:e7:78:23:d0:0b:59:8c:45:64:22:14:43:53:6c:5f:c9:
88:b6:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:36 2026 by rpki-client