Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: JXDlX6yPmLfGrmkRYMcwajD0Z594NrTu6oVZ9M6BgSI=
Subject key identifier: 2D:C4:C0:67:EB:56:0D:8B:9A:DC:75:2C:35:6E:42:C8:CE:7F:64:7A
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 73BBBC19589A066DEB7F6BB05EDE2E8D3BDA3D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 06B7
Signing time: Fri 24 Jul 2026 02:05:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 03:18:16 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: OZeuRvqb/RDsLa6xhCnpJoX6Zf1Rxcz1vofrQ7ORh2c=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bb:bc:19:58:9a:06:6d:eb:7f:6b:b0:5e:de:2e:8d:3b:da:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 03:18:16 2026 GMT
Subject: CN=2DC4C067EB560D8B9ADC752C356E42C8CE7F647A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:fc:98:d3:a1:d4:48:2e:d3:59:0e:4f:a2:
73:b8:f3:b0:ad:ae:0a:0f:06:2e:fb:5d:f2:ff:a2:
bd:47:8a:ba:98:03:60:c9:aa:50:85:30:5e:7c:35:
9e:53:76:6d:c7:b9:ea:85:ee:a5:25:61:9e:54:7f:
88:34:04:57:64:f3:61:66:ab:cf:d6:e3:4b:de:1c:
16:49:51:60:a1:8c:0d:e0:c8:66:a4:0c:4d:4d:d6:
89:1f:c2:8b:96:d5:a6:eb:2c:ca:04:06:cb:32:92:
e2:aa:77:0b:2e:42:3e:89:b6:39:3a:a9:68:cb:1a:
fb:cf:ed:eb:35:29:42:cf:0d:2a:30:f1:a3:00:59:
c2:1f:02:ad:6d:16:a8:8d:69:fb:d6:7a:1b:cc:23:
05:00:cb:4e:43:86:5f:5d:2b:84:9d:41:6f:07:33:
63:5f:bc:b0:ae:78:98:b3:ce:8f:ac:ef:e3:2b:8f:
2f:18:42:aa:d2:b6:a1:f3:a8:45:68:ee:1e:3c:74:
a9:e8:7f:fa:3f:42:0b:84:bc:ba:6c:1c:67:d2:14:
12:5c:01:2d:11:47:47:c6:71:95:9e:e2:27:91:b4:
cc:f2:28:04:20:75:dc:fa:f6:eb:94:3e:c9:11:b0:
8a:e0:68:90:29:e9:57:19:44:e7:55:65:b9:fe:99:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:C0:67:EB:56:0D:8B:9A:DC:75:2C:35:6E:42:C8:CE:7F:64:7A
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:23:de:47:92:b7:33:64:b6:72:55:a8:af:8a:df:aa:11:c5:
c9:62:27:b4:8c:0c:4a:77:0d:0d:15:16:97:cb:89:83:68:91:
31:68:93:6d:ac:8a:e7:de:05:4f:f6:1d:d4:91:a2:51:0c:21:
c7:cb:94:b0:2b:89:df:8c:9a:3b:99:97:e6:34:b6:6d:1a:bf:
6d:d3:ca:67:34:5d:41:cc:41:b9:2f:a3:ff:ea:e4:6b:e1:57:
53:8c:16:fc:5b:70:20:76:38:81:7c:bf:2c:04:af:06:a3:45:
9a:26:20:aa:49:9a:11:55:6d:29:81:b3:b3:10:1b:d5:65:39:
73:84:51:5e:bb:ed:58:b3:fa:4b:d7:2f:4c:89:fd:4c:e2:ec:
73:77:21:81:e6:aa:d5:ea:d4:91:fc:cb:e5:98:9a:5e:6a:9e:
55:53:61:b4:89:5f:76:c2:73:ca:cf:42:19:e4:f6:23:fa:e6:
06:ce:1e:71:1e:f0:5a:14:b8:ba:14:24:48:40:97:32:41:15:
72:87:6b:24:e1:63:12:b5:38:54:2b:71:6a:35:3a:7f:83:e2:
75:55:96:2a:2f:23:de:f9:51:74:fa:d0:88:25:e5:09:41:38:
69:17:4a:c7:bc:37:19:5e:8b:e1:e9:a9:66:c0:b7:27:b4:6d:
6a:6d:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:10 2026 by rpki-client