Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: uNMpLKpPn5H4XeiHidUT1bBJ60Ns2yDsxdszTgo1dQs=
Subject key identifier: D4:E9:77:4C:41:EE:74:5F:36:C6:97:75:88:C7:80:5C:CE:9C:90:F3
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019D27E01744E4F44D36B6E2145AABF88A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0DD0
Signing time: Thu 26 Mar 2026 02:01:30 +0000
Manifest this update: Thu 26 Mar 2026 02:01:30 +0000
Manifest next update: Fri 27 Mar 2026 02:01:30 +0000
Files and hashes: 1: FuIldjWwC771dcFJZ2BXXg7QNtE.roa (hash: 0/YvhnNfmrfW1rIeAImBgzBQVqK+XQUOllK6k6PziVo=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: ajYVBYqhKYq3M6hJkV5oMvoYmjHOVGdqVJf0qLIMR2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:17:44:e4:f4:4d:36:b6:e2:14:5a:ab:f8:8a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Mar 26 02:01:30 2026 GMT
Not After : Mar 27 02:01:30 2026 GMT
Subject: CN=d4e9774c41ee745f36c6977588c7805cce9c90f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:00:00:0a:dc:de:fb:b2:08:7e:da:03:43:
62:a8:3d:cc:b7:0c:58:5f:05:62:c5:2f:f6:7c:45:
9a:d5:de:2b:d9:e7:23:f8:a5:69:4d:98:41:5e:63:
1e:60:b5:3b:d0:98:8e:0c:d3:18:58:18:c0:d9:3f:
74:5d:f9:67:dd:94:93:97:af:b0:6d:a1:b6:0d:aa:
20:6b:c9:f7:bc:a4:fe:da:e0:8c:2e:05:ca:28:c3:
ec:43:55:40:db:91:22:4d:96:80:0f:d7:1d:bc:13:
98:24:23:ea:5e:89:ac:61:c1:aa:f6:cd:18:84:ea:
49:5c:ff:81:bc:42:d5:e5:4d:f6:c5:7a:2a:b2:8b:
1d:5a:82:07:4f:8b:62:ee:4a:60:93:47:a2:1d:12:
45:ef:49:45:5e:6b:1b:e9:4b:94:0f:2a:f6:21:85:
fc:a5:38:bb:80:ac:e9:39:98:c5:90:8f:b0:b5:13:
81:21:71:ac:9e:3c:8d:41:10:c0:3a:2b:a5:21:30:
6e:7e:75:af:d8:8c:9e:10:a7:56:d7:26:2c:39:ca:
59:7a:ae:4c:33:c5:95:68:ff:a8:f1:a4:ac:c4:f8:
b5:6d:44:6f:49:a5:93:cb:b1:97:0e:36:5c:74:5e:
2d:0f:12:91:49:f8:5f:80:24:6b:7a:85:9d:c1:df:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:77:4C:41:EE:74:5F:36:C6:97:75:88:C7:80:5C:CE:9C:90:F3
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:c5:32:8a:c8:23:be:b1:7a:3d:b7:01:32:54:b7:d3:b1:
9e:e7:0c:08:5b:32:73:b1:29:cd:88:9e:b6:65:cf:a6:6b:af:
89:4e:e9:d8:2b:61:02:76:e8:02:52:72:fb:e9:f2:d4:1d:76:
51:85:eb:05:6f:71:f2:12:23:07:26:fe:51:2f:53:b4:b8:7e:
fd:9a:f2:38:85:a6:2a:c0:a3:4c:a1:bc:95:48:7c:8b:ff:38:
47:42:15:d5:4c:a7:4f:c6:d3:5b:4b:5a:3e:31:ad:bc:c2:59:
79:3d:0a:91:f5:2b:ed:da:cd:4e:c6:58:87:f9:d6:a4:e9:4d:
6d:7a:5c:a8:30:d8:30:0b:92:f6:20:b6:9c:b1:68:d0:29:61:
0e:c0:6b:33:01:60:be:a5:8c:c0:21:5b:00:a7:7c:25:bc:7d:
80:bb:eb:56:6b:13:5b:90:d1:a4:42:c0:18:98:fb:03:b7:bd:
de:2b:bb:45:4d:c9:1b:57:34:54:32:09:72:b4:1c:4c:86:62:
b8:29:08:32:b5:af:a8:6a:13:a6:bd:0f:bf:43:4b:b3:28:15:
77:21:2f:1f:86:a8:e2:1f:ad:8f:6a:f7:74:92:e3:c1:80:e8:
cb:54:d4:0a:c8:f5:12:d6:35:35:66:bd:8c:af:fc:94:c3:6a:
1f:2c:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:49 2026 by rpki-client