Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: 0Jjj8jYEEwZyuPmzIfQfsoRvCYHnoluhIOUDe0FROIk=
Subject key identifier: B7:13:A6:E5:29:2D:F7:DD:B0:CF:B0:6B:8B:AE:ED:2F:96:EB:B0:7B
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019D265F5A0CE79656CDBD80CFEC38AE6473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:16 +0000
Manifest this update: Wed 25 Mar 2026 19:01:16 +0000
Manifest next update: Thu 26 Mar 2026 19:01:16 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: PCmytHkHhPRw+nCsK0487c5bKQJeIhmsbqk/dxQEu6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5a:0c:e7:96:56:cd:bd:80:cf:ec:38:ae:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Mar 25 19:01:16 2026 GMT
Not After : Mar 26 19:01:16 2026 GMT
Subject: CN=b713a6e5292df7ddb0cfb06b8baeed2f96ebb07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:91:18:e5:4c:e4:45:80:46:da:eb:e7:8f:23:
c1:27:21:95:44:f3:f8:76:20:85:67:34:a1:0c:27:
28:f4:45:66:f5:e2:86:74:4c:8b:a6:85:37:b1:ad:
5d:ae:79:46:c7:11:82:f9:1e:83:28:5b:72:2a:2e:
f5:35:43:93:cf:ce:16:ca:06:df:b1:77:6c:32:3d:
ec:dc:9d:a5:7b:d4:64:d1:5a:c9:20:26:47:0c:2f:
b7:17:f5:ca:59:95:bb:3b:47:3a:1c:b0:15:6d:72:
a9:0f:d2:bd:de:9f:a3:8a:57:60:26:34:0a:75:7d:
f7:f2:65:42:e9:9a:14:a5:0d:5f:bb:3b:39:1e:54:
23:df:96:a1:0d:2a:5e:a8:ae:04:e6:06:cf:63:d1:
81:51:52:80:b7:59:3f:de:79:2a:cb:83:c7:03:2c:
4b:61:c2:db:77:90:a8:e1:af:ea:b7:40:ae:12:23:
ff:d0:ed:c0:45:6e:2d:f8:63:3c:35:11:83:21:cb:
fc:cf:a1:bd:57:b9:d6:c9:e2:17:89:0a:c9:95:68:
a8:07:86:36:d0:d5:44:25:7e:ee:6d:c9:96:b8:84:
43:54:4f:41:42:26:2b:16:16:a3:a1:b7:48:0f:f0:
74:c9:3d:73:ee:d8:23:21:54:ac:54:f7:ae:9e:83:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:A6:E5:29:2D:F7:DD:B0:CF:B0:6B:8B:AE:ED:2F:96:EB:B0:7B
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6e:b7:a8:59:6e:fc:a5:b1:0d:d9:b7:15:98:da:6d:01:dd:
53:30:d5:b6:81:8e:b4:c4:e3:a8:47:11:ec:60:34:2c:5e:96:
4a:18:62:3c:08:e3:8a:89:b7:aa:54:2a:3d:98:65:9d:88:7a:
d5:e9:48:4b:9f:8d:69:d0:0c:2b:08:12:2e:50:60:29:00:8e:
89:88:2c:86:61:a6:0c:68:ee:d9:57:ea:fa:24:8c:11:13:bf:
b9:03:4c:ce:fd:09:b3:7d:00:80:e1:66:fc:c4:ab:f5:31:30:
b3:72:6b:5b:66:b3:4e:81:56:35:d1:2c:69:c4:03:a7:cd:6e:
7d:b1:60:c4:b5:67:33:3f:86:59:b0:c6:b9:5a:95:4a:27:d3:
8b:b8:da:e1:39:98:1a:3f:c7:42:8c:31:cc:88:3c:95:ab:e8:
9a:0e:7c:e6:d5:f0:76:78:56:b0:c2:4b:b3:d6:26:72:7b:29:
5b:60:9a:f5:07:b8:89:cc:b0:44:27:8c:f0:15:ec:c4:14:b7:
57:24:b8:88:7c:47:68:a3:42:0b:08:4f:db:2b:3a:fc:58:be:
2f:74:4e:13:c5:fa:98:d8:06:80:f0:0e:79:77:31:a8:6d:70:
f8:de:de:a8:2a:5b:ce:5b:d0:42:39:6c:9d:6c:24:f6:58:b3:
23:7d:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:21 2026 by rpki-client