Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: yExvacwh9nPsT5SKVxbj3zkV2r7bMCo2yGGfrqdpsVU=
Subject key identifier: 4D:06:63:B9:C4:33:CE:C4:35:80:9D:16:07:85:C9:9E:F9:65:65:B9
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 3ADDAD85C4BD03E7BB23EFEC10ACB093E6B08DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 0658
Signing time: Tue 12 May 2026 22:20:17 +0000
Manifest this update: Tue 12 May 2026 22:15:17 +0000
Manifest next update: Thu 14 May 2026 00:41:17 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: DsITZUU4XC2+OP0tZ5EYx71f2wffjh/LzIDuxOEyqwE=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dd:ad:85:c4:bd:03:e7:bb:23:ef:ec:10:ac:b0:93:e6:b0:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: May 12 22:15:17 2026 GMT
Not After : May 14 00:41:17 2026 GMT
Subject: CN=4D0663B9C433CEC435809D160785C99EF96565B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:b1:77:03:27:ed:01:6c:60:59:39:0d:eb:
3c:71:7d:7a:26:15:08:72:08:f7:4a:5d:86:2e:f0:
4e:9d:4e:8c:38:77:2b:39:5d:78:12:22:15:42:5b:
16:75:95:aa:44:d2:8d:ed:04:62:eb:8d:08:0c:64:
e7:ce:1c:bd:1b:9c:14:16:dd:ca:0f:b5:a6:28:1f:
b9:64:22:13:15:3f:53:95:d8:37:38:39:8c:6f:02:
26:6b:6a:30:56:fe:a0:2e:fa:3b:af:a2:5c:13:d9:
02:dd:76:5e:77:62:ae:38:0e:bf:99:aa:bb:db:58:
ae:f5:da:fe:25:ae:b3:32:62:f9:42:f8:17:75:d9:
4c:6f:fb:b3:6b:94:2b:78:cc:cc:95:8f:82:bb:91:
64:e5:ae:96:e2:2d:ff:a5:10:e7:58:67:b3:3a:7b:
76:28:2c:28:4e:f9:de:fb:e6:c1:37:d8:65:2a:b7:
27:ba:f3:7b:92:c3:b8:8f:5d:ef:97:2c:7c:72:4f:
a4:36:0d:92:8b:eb:4d:eb:8e:b1:85:41:13:83:58:
3c:fb:14:b6:3a:42:93:8e:b3:62:7c:91:62:d5:ec:
d7:48:68:4e:81:9c:76:d8:18:03:07:8f:15:58:15:
8d:df:45:8f:e3:9f:1f:42:15:9e:05:3f:49:d5:8a:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:06:63:B9:C4:33:CE:C4:35:80:9D:16:07:85:C9:9E:F9:65:65:B9
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:f1:21:2a:a2:24:bb:39:14:8d:b2:10:dc:0f:bd:ca:04:
b4:95:a0:f4:94:e7:ee:86:cc:43:6d:c6:e3:87:1e:7d:2c:c5:
04:d9:17:5d:5a:97:95:af:36:06:53:ae:95:52:14:34:c1:3c:
9f:50:8d:cb:a3:be:80:45:43:c1:28:96:a8:08:4d:e7:61:73:
9b:0a:03:6c:b0:84:94:51:70:3b:48:20:0d:af:dc:3f:de:cf:
1c:cd:ed:e2:8a:aa:10:11:fa:01:40:be:3c:12:ed:c4:27:99:
8f:10:11:7a:ee:58:8f:28:91:de:5d:38:74:af:43:75:b0:ed:
f9:a7:8a:0b:7c:4b:24:f4:49:bf:b6:6e:be:e9:20:d8:70:c0:
c9:f9:21:6d:d4:9a:bd:d8:f1:1e:a1:f1:a6:5d:41:38:ba:09:
90:0f:03:1e:c1:aa:21:45:94:63:a9:4d:73:3e:08:8d:0e:d1:
63:cb:6c:63:dc:26:f2:fd:6b:23:57:63:b8:e6:dd:03:1f:fa:
51:1d:e4:1d:81:03:9e:7d:b9:e8:f2:9f:96:5b:b6:4b:d7:42:
71:ab:42:4c:94:9b:f5:1e:43:43:96:99:cd:ce:d5:06:64:c1:
ae:b5:c5:ce:43:7a:a3:4e:cb:04:36:43:39:9b:4e:42:37:26:
f0:e7:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:35 2026 by rpki-client