Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier: /1SeiBI/u2I1R4BmxAiit6RW5zjVxr8lG7TPI9xSoRk=
Subject key identifier: 7A:1E:A4:98:22:36:74:A8:74:B5:87:E5:9E:00:C1:0D:CF:0C:8F:AC
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer: /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial: 019D29CE61D2B8E791F50C45C00D17725015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number: 0AC0
Signing time: Thu 26 Mar 2026 11:01:24 +0000
Manifest this update: Thu 26 Mar 2026 11:01:24 +0000
Manifest next update: Fri 27 Mar 2026 11:01:24 +0000
Files and hashes: 1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: Pxydgfmfzgvz9bZz4I/xCsmEBRIO+bDvGArf78TocOk=)
2: cmKY5ceisIdSEDxZAHQoFXS37F0.roa (hash: sNf/iuxeatsIfNnR4y3DdWxX9LCuZ9ar0ao5hSS62EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:61:d2:b8:e7:91:f5:0c:45:c0:0d:17:72:50:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
Validity
Not Before: Mar 26 11:01:24 2026 GMT
Not After : Mar 27 11:01:24 2026 GMT
Subject: CN=7a1ea498223674a874b587e59e00c10dcf0c8fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:a4:42:bc:bd:84:1d:1d:0d:8e:df:92:02:
58:b4:02:a4:45:32:48:8c:00:3c:83:b2:d3:16:40:
df:c8:8c:f7:f5:6c:83:58:5e:f3:6c:5e:fd:35:ef:
d4:d1:f5:d3:9e:b9:7e:b1:64:b0:e7:5e:bd:61:2c:
1b:04:36:26:c2:52:99:53:5d:1f:26:2c:e8:ae:d6:
e7:00:e4:88:3a:b4:7c:4b:f5:85:fb:b5:ea:08:30:
00:15:fa:5d:80:56:5d:49:51:dc:0c:ee:ef:98:0b:
1b:8d:44:44:b6:18:82:2a:85:8d:4c:0d:f4:e2:53:
04:06:9e:22:88:e2:0e:62:13:90:67:db:42:62:1f:
21:e7:5b:0f:d6:d0:fc:85:ca:02:4a:8c:84:7a:01:
52:f7:90:c2:2d:30:27:31:74:80:a0:6e:e1:4d:a6:
2f:46:b0:21:78:86:b4:55:0b:b8:7a:b0:ad:ec:ee:
6f:ef:45:b6:75:6b:07:b9:36:44:81:1e:2c:e6:8b:
08:d9:51:37:ba:c4:44:cd:84:66:64:85:7a:29:a1:
ab:f2:f3:d9:27:08:22:cd:29:11:fe:87:60:55:68:
39:87:11:de:ea:e9:ea:c5:ce:aa:47:63:ef:87:d0:
cd:8e:47:3d:cb:3b:33:c3:04:7d:0a:bd:91:75:d3:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:A4:98:22:36:74:A8:74:B5:87:E5:9E:00:C1:0D:CF:0C:8F:AC
X509v3 Authority Key Identifier:
keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3f:a8:08:b0:44:45:ce:e4:90:2d:a5:8c:8d:3e:89:84:25:
a1:23:21:53:a7:5e:28:34:e8:4b:3e:40:69:49:64:c2:b8:e9:
7d:02:7f:4f:81:33:b9:e2:7d:83:47:d5:40:29:2e:8b:e5:ce:
23:90:36:da:db:1c:53:1e:c1:1a:02:ab:3c:34:2f:15:65:11:
40:f3:ce:35:a2:b1:51:0d:20:6d:ef:ee:9e:39:f4:a3:a7:05:
d7:71:75:b5:41:51:09:24:11:e4:18:f5:f4:2b:ee:24:e0:fb:
16:5c:11:f0:51:fc:18:a9:98:24:3c:e2:e2:96:11:91:ea:4c:
77:5b:86:38:bd:e7:98:2d:58:ec:29:d0:00:28:35:56:1b:b7:
d2:06:3e:fd:42:7b:0e:18:cb:92:d4:14:3a:2d:ce:a2:1b:46:
eb:25:78:a6:db:41:81:8f:a4:cd:c6:a1:a5:85:74:eb:48:28:
f2:b7:6f:cb:28:59:4a:72:aa:d1:cc:48:e1:1a:7c:9c:47:c9:
1f:80:7b:28:1c:3c:cb:a3:61:bb:5b:0e:c6:d7:5e:b7:e5:04:
5b:df:02:e5:42:41:3c:43:54:83:b3:ae:c3:ed:32:a4:0f:37:
e6:16:a1:56:b9:64:39:bb:dd:2b:06:57:4f:a6:74:51:57:ab:
c0:00:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:06 2026 by rpki-client