Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: otWiWOjKEu5HhTkM38VXAi7m+DOtHU6rV7JWKHFWuHk=
Subject key identifier: A7:63:D4:7B:B9:18:09:C8:8E:67:E4:84:1F:D9:E9:54:7D:01:2A:5B
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019E216DF2DF21B71DBDC8609A6B9B4A32C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 13:01:54 +0000
Manifest this update: Wed 13 May 2026 13:01:54 +0000
Manifest next update: Thu 14 May 2026 13:01:54 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: g0xp0niK4nJpYOAUzwZO3gD0XiKowlggnyfqvDHXhjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:f2:df:21:b7:1d:bd:c8:60:9a:6b:9b:4a:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: May 13 13:01:54 2026 GMT
Not After : May 14 13:01:54 2026 GMT
Subject: CN=a763d47bb91809c88e67e4841fd9e9547d012a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:a6:8a:14:f1:fe:99:a6:76:90:59:7a:10:
49:1f:93:2f:2b:3e:30:3a:73:7d:2f:49:7c:2a:f7:
8f:9e:e6:72:3a:eb:41:ad:4e:de:d9:34:63:d5:c3:
b3:46:cd:55:6f:d4:e1:aa:d6:b5:45:a9:ea:9d:1f:
55:2e:fe:cf:13:55:59:9e:57:a9:98:c3:90:33:22:
0c:00:70:86:db:36:83:47:2d:da:b5:1d:6e:7f:ee:
ae:f7:71:4f:fd:22:41:e9:6f:50:87:2d:6c:a4:d2:
3c:9c:27:1c:0d:fe:d0:57:49:b5:71:c0:ba:14:69:
bb:1d:82:55:0f:79:97:4f:c6:a0:ff:76:fc:da:f4:
09:0d:f6:4d:0a:41:bd:e3:91:b5:f8:94:c2:95:94:
48:42:8a:bf:12:3a:9c:ec:0a:43:07:bb:ab:41:cc:
8c:ae:4b:0b:07:9b:2b:29:44:8a:35:d8:a3:51:ca:
9f:ff:12:ae:9e:2a:e2:76:09:32:ea:f4:36:3b:bd:
13:25:3e:88:49:bf:1e:b5:8e:96:d2:2c:90:25:bb:
10:d2:bb:d8:8c:c4:56:8c:c6:be:f7:db:4f:25:ad:
c0:1a:53:7d:ff:75:bd:0c:4e:52:ad:7d:30:40:7a:
e3:60:ae:e9:86:cf:64:81:41:60:b7:8e:75:eb:89:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:D4:7B:B9:18:09:C8:8E:67:E4:84:1F:D9:E9:54:7D:01:2A:5B
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:69:77:12:2b:b7:74:45:3e:7a:ee:83:f7:5c:3b:c0:a9:1f:
89:0d:5a:31:9c:ed:f4:bd:97:6e:25:1b:b6:e4:65:1e:1c:6a:
65:ed:10:2c:59:f8:b8:1f:82:6f:66:0e:51:b2:16:0f:48:c2:
27:b9:6b:d5:80:6f:57:70:6e:d7:99:66:8f:8d:2c:09:05:c9:
f0:da:eb:03:ef:cd:03:fd:1b:de:c8:53:54:ef:f4:45:d4:11:
ab:8f:79:e4:86:4a:49:f3:06:ff:83:36:56:6b:0f:0a:2f:bb:
81:99:56:44:1c:04:3d:5f:de:cb:ff:a9:ca:b1:16:2e:73:52:
60:a5:e4:ca:01:c8:86:fd:ba:82:94:1f:0b:9f:08:30:57:a7:
22:d5:9c:c0:95:db:eb:e2:45:29:3a:71:d7:b1:0a:1d:9c:04:
22:22:01:41:66:3e:b4:e6:37:89:a5:10:7d:7f:a7:9a:18:c8:
d6:d7:4e:8a:b5:eb:7f:44:dd:1a:3b:7b:de:3f:fa:14:5e:45:
f9:ea:c3:c8:80:9e:1f:12:7d:cd:7d:08:52:2d:7c:a7:b8:d1:
6a:92:a9:06:c3:db:c4:2b:a2:5f:c1:68:09:57:46:c3:d4:54:
12:b9:e6:d6:b7:8c:61:02:ea:e4:a5:4c:58:aa:1b:e0:dc:03:
54:b3:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:13:35 2026 by rpki-client