Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: yBMMJPGkCntWivZ3qadqBMJ1E9ayM8bqPyIluoT+waI=
Subject key identifier: 6F:A7:C2:41:6E:80:89:58:0E:B3:42:39:CA:DA:96:06:CB:A5:47:A4
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 019D2A3BCECB9028E3954246A7FFC21DE19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 0648
Signing time: Thu 26 Mar 2026 13:00:55 +0000
Manifest this update: Thu 26 Mar 2026 13:00:55 +0000
Manifest next update: Fri 27 Mar 2026 13:00:55 +0000
Files and hashes: 1: 0Dg7ApkC7AP2Avn6x1J-1flmrKg.roa (hash: qG/3sEaE6hIKkBZX7yiUf0VUZdejvNknPMp0eVon50w=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: c+Rh2M4vs/djZpjhNCSs+kFmZCTV4mGjwRR+lEQLjfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:ce:cb:90:28:e3:95:42:46:a7:ff:c2:1d:e1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Mar 26 13:00:55 2026 GMT
Not After : Mar 27 13:00:55 2026 GMT
Subject: CN=6fa7c2416e8089580eb34239cada9606cba547a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:d5:9f:e5:05:f4:70:03:81:71:8d:9a:b4:
8e:3b:dc:c1:31:55:a8:d9:af:8c:ed:eb:1e:3f:03:
c8:9d:76:d1:68:32:22:59:b3:0b:6c:55:97:01:a8:
1c:19:a0:ea:95:dd:4a:52:4c:0a:48:18:aa:49:89:
c6:e1:75:de:02:5e:cf:4d:81:79:c4:e0:ca:3c:56:
0c:a7:09:9c:10:d5:37:d7:4d:a0:2e:69:dc:0b:2d:
35:33:5a:e5:8c:e3:15:71:63:09:4d:28:1c:21:75:
99:31:d6:86:39:b8:04:6c:e9:6b:b3:46:8c:a1:9f:
d7:48:e6:c1:de:a2:f7:fd:2f:9f:f4:bc:9b:ec:33:
7d:a0:7a:39:29:b0:42:7b:3d:88:cf:ed:06:3a:33:
62:73:97:01:30:04:3c:b0:17:a2:2b:66:cb:29:25:
36:a1:13:a0:54:18:85:94:61:e5:27:9c:24:af:10:
61:e7:ce:4a:7d:23:03:53:b8:70:db:55:16:3e:17:
fc:19:7a:bd:4d:61:a1:85:07:63:1e:68:e8:fc:4d:
0d:c2:72:3b:02:50:3f:ed:d0:5f:1c:37:f4:a9:7b:
f5:95:c9:94:d3:29:aa:7a:b9:a5:e5:9e:03:61:08:
a9:a4:76:90:2e:2c:e6:9c:b2:a8:a1:81:ec:b8:56:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:C2:41:6E:80:89:58:0E:B3:42:39:CA:DA:96:06:CB:A5:47:A4
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:92:7d:db:28:a4:5e:91:44:1b:5d:5f:f2:1e:de:91:3c:
53:50:2f:f6:ad:82:7e:17:8b:f4:53:a3:43:e1:6b:b7:75:1e:
68:1f:3d:c8:f6:01:a0:5a:2a:c7:b5:6e:50:08:ea:8e:01:7c:
c4:93:55:bb:33:ba:05:aa:1d:ca:b0:a4:94:3e:55:fa:bc:2a:
f6:03:f3:79:99:d0:62:8e:17:ea:61:69:b2:62:9b:12:7f:cf:
a7:ed:64:ae:98:4f:34:56:04:16:b6:8b:79:53:ce:fb:6c:d7:
79:19:f4:40:86:2e:a9:74:26:b9:f8:7b:e5:61:e9:13:67:bc:
7e:f9:d6:d9:12:d4:cb:c9:0e:36:d6:72:c1:0a:be:f5:8b:14:
28:95:4b:13:27:cd:a7:22:33:32:cd:a9:a1:d0:62:39:8c:4c:
ac:27:36:ee:f0:8f:01:cd:bc:86:42:e0:f4:ad:09:de:25:d3:
c3:8d:fd:7e:52:ce:b3:cb:06:e3:52:ef:21:5d:79:1a:94:25:
21:8a:a3:40:f1:f8:70:6e:70:c2:5a:3f:fd:86:08:06:b0:01:
78:1f:ed:6d:d6:50:45:69:87:13:f7:ed:27:70:7f:df:07:ca:
c1:6b:cb:f2:eb:b2:af:98:df:65:41:14:38:97:1c:2a:36:1c:
9d:db:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:06 2026 by rpki-client