Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: 60bgHv8G6dvY4F8HaOJq+nenGhn0+XeSg+cJpVdc2Cc=
Subject key identifier: 07:57:6C:8A:60:7F:04:8B:6E:4F:0F:4D:48:3D:79:11:59:B6:DB:73
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019E1F7F5468E6BCE50060B875B1BA373191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 0632
Signing time: Wed 13 May 2026 04:01:38 +0000
Manifest this update: Wed 13 May 2026 04:01:38 +0000
Manifest next update: Thu 14 May 2026 04:01:38 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: D5zz2rls9I/nLBULQuRzoIHl1L/gprQwE9ZCBpxBUXY=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:54:68:e6:bc:e5:00:60:b8:75:b1:ba:37:31:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: May 13 04:01:38 2026 GMT
Not After : May 14 04:01:38 2026 GMT
Subject: CN=07576c8a607f048b6e4f0f4d483d791159b6db73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:28:71:7e:4d:13:8b:06:3e:5f:6a:d0:44:
1c:94:8b:97:4f:c7:e6:b3:6c:b1:51:c5:dc:ab:73:
01:7b:c5:16:79:0e:eb:8a:8a:2f:97:38:18:8c:ce:
3b:45:6f:57:bc:ae:c6:b1:30:1e:47:b2:32:13:fd:
83:e8:4b:e5:8d:6a:05:4b:fc:03:ff:30:fe:50:b2:
68:d6:d8:79:e3:41:d3:6b:c1:78:3b:5d:e1:b5:d4:
2d:6d:48:76:eb:00:15:e9:3f:ef:96:2e:17:93:8e:
a8:6e:5b:75:5a:6a:ae:9b:f8:3f:54:50:14:b8:79:
39:a5:2d:be:09:54:6f:c6:63:68:e3:78:c0:27:97:
9c:73:d3:65:2a:f9:e7:2c:5c:db:7f:df:4e:50:51:
ff:bb:a8:a3:a4:bb:71:71:36:25:ff:45:51:1a:70:
3e:30:4f:bb:f6:6c:35:be:3a:17:2f:61:6b:1d:79:
bf:81:73:c4:82:e2:5e:eb:f6:93:ce:bf:5a:7a:c1:
0d:c2:24:9d:20:65:ad:0e:d8:68:1e:8b:f1:21:25:
5d:eb:bb:ef:90:d6:5b:b5:98:db:6d:1b:75:88:4e:
a0:84:56:be:c5:34:86:5a:06:46:38:b0:0a:11:03:
24:45:55:be:f5:4b:b9:80:65:66:90:32:19:f1:a7:
ba:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:6C:8A:60:7F:04:8B:6E:4F:0F:4D:48:3D:79:11:59:B6:DB:73
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:e4:76:19:cd:f8:42:82:10:c7:ad:64:f8:16:6f:39:c9:
ac:28:c3:f2:dd:49:dd:96:ac:c8:94:29:13:24:42:e3:53:15:
67:f1:c4:07:8f:c5:98:33:db:52:44:c7:f2:1e:16:ae:8e:5d:
ce:1c:89:6d:1f:da:18:ea:8e:aa:01:ac:08:d4:af:62:9c:83:
81:b6:ea:8c:9f:5e:a4:26:65:a9:81:82:58:e9:f4:7f:d0:ed:
90:27:91:1b:cd:fb:6a:c7:79:6e:fd:64:e6:ec:c0:a2:9a:4b:
f9:00:08:e7:11:b1:66:97:4f:8b:7b:03:e2:35:44:39:26:55:
11:e6:c2:87:18:de:bc:9d:e4:0d:65:f5:13:0d:cc:15:37:5e:
d5:21:39:98:e6:18:8f:ef:df:74:01:16:1b:12:74:03:58:eb:
f6:e0:e7:a0:c0:64:b5:4d:b7:ef:45:12:a9:4c:b8:1e:77:9b:
2f:00:b1:a2:fe:f4:cf:6a:f7:b8:4f:e1:48:36:06:fc:8e:76:
c0:ab:0d:50:67:70:81:81:0b:bf:6f:b5:63:65:58:2c:2f:7c:
c4:b6:50:72:09:ea:d2:48:f7:2a:55:82:6a:ed:3b:12:64:8c:
69:7a:b1:93:de:25:a3:ac:fd:47:db:2d:90:5e:0e:06:2f:04:
5a:55:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:06 2026 by rpki-client