Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier: 5HtiZeP6n3dM2SCmxldrV/4HNLLAPOX0lEYVZBB69UQ=
Subject key identifier: 58:39:91:3C:B1:5D:71:30:C9:A6:7C:1F:6E:B1:2D:EC:D9:F1:48:39
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 136AF40465917106F0898C425A287A790E321A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number: 070C
Signing time: Fri 25 Sep 2026 13:51:35 +0000
Manifest this update: Fri 25 Sep 2026 13:46:35 +0000
Manifest next update: Sat 26 Sep 2026 15:11:35 +0000
Files and hashes: 1: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: BOiw8BrW5c3eGb/8Yl+NK5e2ibm7xNR9VblDQ5Ntoi8=)
2: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: TbGFvgtgWSAZHxb3hPH46QipjihxuX4FrvDSW9hazIY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6a:f4:04:65:91:71:06:f0:89:8c:42:5a:28:7a:79:0e:32:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Sep 25 13:46:35 2026 GMT
Not After : Sep 26 15:11:35 2026 GMT
Subject: CN=5839913CB15D7130C9A67C1F6EB12DECD9F14839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:85:42:d9:80:12:06:77:36:84:26:a1:16:
08:81:ed:03:50:35:1d:37:e4:52:a4:70:ed:4d:b8:
09:a2:de:82:63:b6:5c:dd:94:c4:56:fd:80:09:40:
06:a9:62:e0:ec:64:fc:07:a6:e7:05:c3:af:69:70:
b6:45:83:80:54:7f:ed:39:db:98:2f:d0:b3:20:03:
9e:75:6e:93:3c:4d:db:86:1d:f9:38:18:26:77:96:
3e:ed:71:38:f0:4d:82:94:3e:3a:18:03:c1:8c:c6:
08:6c:d9:88:1d:d0:92:d9:e5:03:88:18:c5:99:6f:
01:36:18:02:19:d8:74:ed:c4:c7:3d:38:4e:40:a6:
ae:a1:2c:35:a5:cb:f4:05:9d:0b:66:dc:ac:ae:d6:
19:78:85:d7:71:e3:97:b9:e5:85:f3:d8:d1:9a:ea:
aa:7e:ef:96:06:fb:52:61:56:94:0a:6c:ee:58:80:
ec:38:69:c4:22:a8:27:ba:c5:3a:95:5c:86:0b:0a:
07:65:cc:15:05:e5:60:37:da:08:c7:5f:e7:50:99:
0a:f1:cc:9b:c5:a8:16:78:f5:9f:ec:fd:02:67:e1:
f2:43:bb:94:3d:cc:b6:bd:3c:0e:06:df:5b:ff:28:
2b:ce:1b:31:f7:1a:ed:ea:ac:99:87:2d:08:2f:33:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:39:91:3C:B1:5D:71:30:C9:A6:7C:1F:6E:B1:2D:EC:D9:F1:48:39
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:94:44:fc:a3:64:a8:21:8a:f0:d8:51:2b:7d:47:92:d5:
a8:d9:1a:49:e8:28:2e:a7:f7:1e:00:3b:37:0c:60:88:3b:12:
11:53:80:52:60:1b:a1:76:a4:9d:4a:05:ad:5c:6c:df:a3:18:
0c:2f:5b:df:1c:e2:56:3b:e9:02:45:71:c4:25:33:a1:04:f0:
8f:39:21:b9:b3:e0:88:0e:5f:b7:71:37:17:f2:f1:c6:d1:e3:
8e:6c:da:08:f7:09:df:97:81:fe:9b:4f:5b:45:a6:66:4c:99:
7e:dd:81:d8:7c:ac:44:0a:29:0f:7d:2a:9b:d4:90:f0:b2:d4:
29:b6:07:96:e6:36:ad:d9:0d:e2:99:72:73:46:33:c3:9e:31:
47:27:5f:c2:0c:cc:16:a5:06:c1:7f:e4:2f:99:a3:ca:8f:0a:
ef:6d:17:7b:9a:e3:cc:a1:4b:c0:3a:3d:fb:d5:3a:ab:e7:6e:
8e:4e:db:99:66:38:01:20:7c:e6:cd:80:b3:a6:8f:fb:d7:99:
fc:ed:5c:30:84:ea:df:3b:e6:21:e2:62:38:67:4e:26:5b:94:
8b:5a:dd:55:f2:24:10:14:74:08:40:7f:bf:b8:f4:84:16:11:
b4:13:4a:bb:3f:d1:0c:13:09:ae:1e:1f:ce:e4:32:aa:a7:05:
89:36:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:46:34 2026 by rpki-client