Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: bcpw8+mFYryoNm4YMXcW4JY9DQ1Dq27oJ1mpmUBluJQ=
Subject key identifier: 58:61:F5:AA:C2:9B:77:C3:F3:48:D6:1A:B6:94:95:C7:CE:4F:A5:00
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 4C418504D4CE08F23ED963D64DD73E894277548E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 0618
Signing time: Wed 25 Mar 2026 23:57:12 +0000
Manifest this update: Wed 25 Mar 2026 23:52:12 +0000
Manifest next update: Fri 27 Mar 2026 00:06:12 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: Iz1CPbjA+uD3AOuoi9vcI7F8L/s6e7hppcwcKNmBEjs=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:41:85:04:d4:ce:08:f2:3e:d9:63:d6:4d:d7:3e:89:42:77:54:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Mar 25 23:52:12 2026 GMT
Not After : Mar 27 00:06:12 2026 GMT
Subject: CN=5861F5AAC29B77C3F348D61AB69495C7CE4FA500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:59:75:d8:4c:a0:52:55:ff:7d:55:df:4e:
2f:7d:6e:67:5c:c8:9f:86:55:27:a4:d8:d2:fa:7d:
21:93:38:ec:4c:64:74:90:8e:60:65:9f:c8:e3:67:
83:4a:d4:27:88:0a:46:00:5a:89:ef:76:f1:b7:64:
1a:dd:8d:bf:9c:05:30:a7:7d:86:7a:22:23:a1:ee:
85:87:44:d4:01:75:9e:9e:3b:27:59:d1:92:7d:41:
99:fc:6e:74:11:f6:eb:db:a3:fe:51:dc:55:ec:a4:
ec:ff:c6:a0:b3:43:eb:dc:16:15:99:36:5c:6e:27:
42:96:37:f4:c0:a4:6f:43:01:a3:9e:66:15:54:1e:
0b:62:59:0b:8b:4d:76:7d:50:85:a0:30:8d:2d:ff:
88:32:ff:04:1b:12:5a:62:2e:22:b8:cb:a0:e5:ff:
d0:1d:51:b4:32:6d:ef:5b:ce:94:d9:9b:c8:0d:d5:
8e:5a:61:27:0c:af:d8:87:15:bc:e9:cb:9f:d8:ad:
76:84:df:05:f6:27:fc:b6:5c:39:f2:74:53:7d:e8:
64:eb:7d:bf:90:99:1e:57:30:f5:fa:98:61:12:c9:
c8:d8:4a:4f:dc:38:38:c0:46:3c:34:09:d2:61:38:
52:bf:c4:3b:87:70:bb:4f:95:a8:2a:1f:1d:87:98:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:F5:AA:C2:9B:77:C3:F3:48:D6:1A:B6:94:95:C7:CE:4F:A5:00
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1c:9a:bb:2d:da:61:87:5f:20:0f:d6:d2:4e:d2:af:5a:0f:
0c:39:3a:be:d5:ac:1f:01:e2:f7:0b:99:c2:9f:c7:70:95:12:
27:27:05:ee:1e:6a:ea:bf:11:35:15:17:76:60:ad:e6:cc:c5:
2f:7e:ea:a0:c2:77:3d:46:ce:54:03:20:b4:e8:a6:5d:bd:69:
68:63:eb:3f:5c:7d:22:31:82:7e:15:84:d7:b2:9d:43:81:91:
79:e0:f8:2f:4e:a0:7c:cf:1c:a8:85:ef:1e:cb:35:09:15:6d:
21:e0:57:7d:b4:74:d7:fe:ac:6a:2a:9f:35:9c:71:27:c5:c8:
a6:26:12:38:22:4f:74:d5:68:fb:b6:88:48:01:c6:0c:03:a9:
99:2a:e2:4d:9a:f8:ea:fe:6d:8d:4b:2d:3c:c7:a7:45:1d:7d:
de:b2:ad:da:11:bf:cb:71:11:77:a5:9b:95:fe:ff:d6:24:f2:
ab:5c:ca:d5:71:54:6a:6c:10:70:7b:81:14:3d:07:5e:57:50:
23:8b:02:b2:b6:95:b1:7e:35:47:6a:f9:77:8f:33:d3:34:4b:
5f:f4:f6:d8:42:b2:f5:6f:5f:d8:12:61:31:b3:0e:d4:ee:ff:
c4:70:95:b5:14:0e:e4:75:e1:38:fd:ee:b9:d6:97:31:95:b4:
78:47:ad:ad
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTEGFBNTOCPI+2WPWTdc+iUJ3VI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl
MTZkODdmYjAeFw0yNjAzMjUyMzUyMTJaFw0yNjAzMjcwMDA2MTJaMDMxMTAvBgNV
BAMTKDU4NjFGNUFBQzI5Qjc3QzNGMzQ4RDYxQUI2OTQ5NUM3Q0U0RkE1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeFl12EygUlX/fVXfTi99bmdc
yJ+GVSek2NL6fSGTOOxMZHSQjmBln8jjZ4NK1CeICkYAWonvdvG3ZBrdjb+cBTCn
fYZ6IiOh7oWHRNQBdZ6eOydZ0ZJ9QZn8bnQR9uvbo/5R3FXspOz/xqCzQ+vcFhWZ
NlxuJ0KWN/TApG9DAaOeZhVUHgtiWQuLTXZ9UIWgMI0t/4gy/wQbElpiLiK4y6Dl
/9AdUbQybe9bzpTZm8gN1Y5aYScMr9iHFbzpy5/YrXaE3wX2J/y2XDnydFN96GTr
fb+QmR5XMPX6mGESycjYSk/cODjARjw0CdJhOFK/xDuHcLtPlagqHx2HmEqtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWGH1qsKbd8PzSNYatpSVx85PpQAwHwYDVR0j
BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G
dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05
MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1
NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShyauy3aYYdfIA/W0k7S
r1oPDDk6vtWsHwHi9wuZwp/HcJUSJycF7h5q6r8RNRUXdmCt5szFL37qoMJ3PUbO
VAMgtOimXb1paGPrP1x9IjGCfhWE17KdQ4GReeD4L06gfM8cqIXvHss1CRVtIeBX
fbR01/6saiqfNZxxJ8XIpiYSOCJPdNVo+7aISAHGDAOpmSriTZr46v5tjUstPMen
RR193rKt2hG/y3ERd6Wblf7/1iTyq1zK1XFUamwQcHuBFD0HXldQI4sCsraVsX41
R2r5d48z0zRLX/T22EKy9W9f2BJhMbMO1O7/xHCVtRQO5HXhOP3uudaXMZW0eEet
rQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:46 2026 by rpki-client