Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: NnAYqndRQHbXTAcGxSETrCj5yoNsscy5XkP8OnTdxyA=
Subject key identifier: 2F:AF:45:04:B9:32:C0:4A:F3:0A:83:BC:C8:AF:2D:E1:23:B2:52:25
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019D2A3C2560398AF377A619325E5A9C1D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 05B3
Signing time: Thu 26 Mar 2026 13:01:17 +0000
Manifest this update: Thu 26 Mar 2026 13:01:17 +0000
Manifest next update: Fri 27 Mar 2026 13:01:17 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 6sPLBe/vSjWRRebCYJqNYcPCV3cqoBpO3HsnSOIX/gA=)
2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:25:60:39:8a:f3:77:a6:19:32:5e:5a:9c:1d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Mar 26 13:01:17 2026 GMT
Not After : Mar 27 13:01:17 2026 GMT
Subject: CN=2faf4504b932c04af30a83bcc8af2de123b25225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:a3:2d:7b:c3:aa:db:41:e6:66:a4:c5:70:
0a:8a:5c:6f:de:b0:48:bc:cb:5e:f1:5f:eb:14:ea:
a9:c5:c4:84:31:2d:ef:ca:05:b8:c1:fb:99:fd:83:
9d:36:d5:5a:95:b1:0b:d0:9c:fc:c1:d9:88:be:4c:
25:55:53:ff:e3:14:f1:24:48:02:48:47:45:cf:e0:
43:92:44:e4:63:bf:78:00:b1:89:33:97:68:bd:c8:
68:9b:32:8b:bb:5a:04:0d:8e:d5:0e:4e:45:47:b9:
08:18:c8:ab:3e:4e:7d:12:3c:2e:14:b0:7c:e8:74:
1f:8c:a6:fa:0d:41:7b:ba:1f:48:08:a6:93:86:50:
65:67:35:94:d9:05:26:bb:8c:9a:3e:c2:30:a8:ed:
ff:01:84:8a:8e:c9:52:d6:d9:b7:37:1b:f5:e2:6e:
b8:ed:a2:4b:12:79:e8:2c:ee:9a:eb:ab:13:61:f6:
cf:f0:96:a2:09:5e:ef:bc:b9:25:57:f4:2d:aa:e4:
85:24:24:ca:7a:43:c8:a1:73:79:5d:d3:a6:37:c9:
75:77:e3:72:a9:6e:e3:34:fe:a7:6f:33:94:f7:c4:
4b:0e:7a:5a:d0:08:8c:e6:8e:80:28:ac:37:dc:51:
ce:4f:09:b1:ef:0e:2c:d2:2c:c2:93:e7:f1:6d:c5:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:45:04:B9:32:C0:4A:F3:0A:83:BC:C8:AF:2D:E1:23:B2:52:25
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:92:69:98:61:c0:84:6c:bc:9b:47:37:df:79:b0:c3:a6:24:
64:b0:f6:06:bd:51:ec:fe:8a:06:b4:1b:d1:d1:d7:a4:df:8b:
fd:af:89:3a:a3:40:0c:42:35:51:26:85:cc:27:19:65:49:87:
bf:4b:06:d4:3c:ad:ca:cc:ab:e3:cd:35:a7:82:e8:35:d5:5e:
81:ec:de:28:1b:5e:d8:21:d8:87:e6:e0:10:74:61:91:56:b9:
fd:32:1b:3b:1f:04:e6:48:93:ae:15:6f:67:ea:c7:c9:7f:f5:
8c:fd:43:cc:b5:73:ed:99:30:77:ff:2f:51:88:fe:18:8d:aa:
9f:8c:85:36:fe:da:7e:fc:6a:c9:83:2b:27:18:f1:d6:85:04:
f1:87:14:8a:dc:1f:29:2e:04:47:8c:84:e2:78:20:88:39:60:
e9:a6:8c:85:7f:33:ee:05:3c:56:fc:b1:43:54:8f:8a:a3:2d:
3e:01:24:fd:8d:8d:33:36:a5:c7:47:05:f3:48:b7:3a:5f:74:
6c:88:14:6b:7a:f9:f8:bf:d7:cf:ef:55:aa:a1:dc:60:05:c9:
38:25:9c:65:01:2c:3c:e4:8d:ea:83:2c:54:ca:d4:1d:fb:f1:
47:05:c6:c8:e4:0a:62:62:bd:c5:60:b4:1d:a0:02:06:6d:3f:
e7:dd:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:08:08 2026 by rpki-client