Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: a0bVmPkr3uokBFs7XQWUmTHEeQFEqd4x72Hzpsgpkl0=
Subject key identifier: 08:AD:68:EE:2A:F6:17:05:79:FE:68:C8:4F:68:EF:1C:37:F6:74:8F
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 019D284DD212BCBBE7506A1620BDB92054E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 0B4E
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: Vi-50rUJqypgGVlY1PnfgRKVJPc.roa (hash: JefSHWYR7YbXg1+D5PyzTIFvu4XKwcfsRRc2C4+Vfyg=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: 68pwBNuJkMCYYg/QccMuvzp3xx83Zzfl/sUsD1KHeVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d2:12:bc:bb:e7:50:6a:16:20:bd:b9:20:54:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=08ad68ee2af6170579fe68c84f68ef1c37f6748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:9d:bb:17:46:ee:83:22:56:1e:1c:3f:84:
ea:63:59:98:c7:b8:d7:9f:e8:29:a9:2d:30:4f:58:
aa:d8:34:3c:e2:d3:6f:5a:0c:44:9f:fc:6d:5e:02:
f4:99:07:d6:cd:6d:85:16:fc:ef:b7:32:c2:34:1e:
9a:04:29:05:83:bc:4b:c1:64:46:42:a5:45:c6:fa:
6f:01:6d:b7:e6:d8:86:52:f8:9f:5b:2d:b2:b6:9e:
4b:42:cc:97:5a:14:0c:52:ce:6a:45:cc:ce:c1:42:
c5:52:35:92:a4:a2:31:6a:b5:2c:fd:b6:d5:96:8a:
4f:d9:54:ea:f3:0e:8f:24:eb:3a:e2:62:ea:fe:3d:
ca:0f:2f:00:4f:7d:f5:23:5f:1f:d9:2e:d0:06:94:
0f:49:19:ec:73:df:e3:81:ea:7b:d2:aa:2b:b4:52:
5e:b8:75:c4:c5:7b:3f:e0:57:de:f6:ac:11:9e:cd:
70:fb:4b:03:7b:7a:48:04:1e:e7:f2:48:85:02:a9:
4c:96:54:2b:b2:3a:aa:d0:17:5d:6d:5e:1d:d9:06:
da:e4:07:43:cc:e4:b5:c7:98:f7:2b:3e:f1:4a:90:
ec:36:2e:b8:1b:cc:73:e0:63:7e:90:aa:47:ab:11:
0d:51:9f:76:e4:3c:1f:9f:fe:dd:93:dd:12:15:eb:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:68:EE:2A:F6:17:05:79:FE:68:C8:4F:68:EF:1C:37:F6:74:8F
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5c:a1:1a:f6:71:90:d1:2a:a3:6a:8e:97:d3:6a:d4:e9:06:
42:fe:3b:42:77:b1:b9:0e:d1:3d:60:22:28:1a:7a:d3:21:c5:
ba:97:59:78:6e:5c:6b:b9:6b:72:44:71:2a:d9:fe:0a:4e:59:
69:49:e2:58:b9:8c:c7:70:75:15:f7:80:70:33:e2:04:98:ee:
ee:71:bf:65:87:04:94:77:5d:9f:d9:81:84:63:78:68:e1:2a:
5d:99:5e:4d:6d:a4:9d:17:6f:65:22:8d:15:e5:71:b9:4c:32:
80:b9:a5:b7:b4:bd:35:a0:af:e2:93:d3:46:c9:92:a9:a4:20:
68:10:b7:12:76:27:57:fc:40:f5:cc:60:d5:3c:66:fe:e8:57:
e6:29:f7:8d:2e:74:83:1e:0b:09:71:40:24:ac:c9:14:d6:65:
bd:f9:f8:05:6a:76:25:8d:05:2b:3f:ee:50:4c:be:30:a5:00:
7c:0a:a4:2e:33:7c:3c:4c:c2:e5:44:cd:ca:90:4c:6f:51:a8:
23:e6:ea:e8:f4:98:01:b5:fa:58:a6:91:ac:ba:2b:4f:f8:ca:
45:1e:52:b1:93:8e:dc:32:dd:4c:a6:b9:46:c7:4d:6b:ca:92:
00:a6:86:6d:1f:fc:16:a7:11:f5:0d:01:c0:63:be:29:4f:60:
e6:5e:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:49:44 2026 by rpki-client