Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: GUHoRAmBnwsg9DLbU41TPzg+jgrXCVJUYCysOpXbbFI=
Subject key identifier: 5E:8A:9A:96:9C:35:A9:EF:CD:78:C3:62:49:09:8B:4B:18:F2:6D:7C
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019D3909CD5A26A1A17352BE2C63EC65CA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: /L+MxpSloTZoMNPruFs95TSEBvkpV7HdggR2cLVAMFk=)
2: m0eeq8va8tOdR0d6vhTGR-m4r9c.roa (hash: IJmLN6gAClo8Re6n699DAImPd6vNHSacFHQGbqXGAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cd:5a:26:a1:a1:73:52:be:2c:63:ec:65:ca:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=5e8a9a969c35a9efcd78c36249098b4b18f26d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:e1:7b:a2:25:93:d0:ee:88:68:a4:cf:9b:
ea:e0:8e:8d:9d:57:43:e1:59:34:06:ce:8e:c8:6c:
a2:59:08:a0:08:c9:81:67:cd:55:0c:ba:32:57:da:
3c:f5:35:04:22:7c:96:6c:d5:ab:ea:69:1b:b5:1c:
0e:a5:f0:7c:1f:e9:b1:26:b8:95:e5:c7:76:66:a5:
6f:0b:4d:bb:d3:16:12:ba:9c:3b:62:d6:6f:35:68:
35:1a:4a:96:81:e5:66:67:74:2e:da:a7:c1:41:fa:
e6:2a:73:2f:2c:38:6d:87:e6:aa:07:84:e5:1b:79:
42:2b:0d:96:64:70:fc:3d:09:74:f9:2d:cd:0a:fb:
fe:9f:9e:13:dc:8a:3b:ae:7b:94:4a:b0:3a:8f:24:
b4:50:a0:db:14:eb:7e:56:ee:4b:b7:d9:a1:f7:fd:
7d:a8:c3:66:bc:17:7c:3c:ca:35:5c:10:bf:5a:f2:
9d:57:c4:7b:6c:77:fa:42:39:14:48:f1:4e:0d:b6:
6f:83:63:86:8b:93:02:83:43:56:3e:43:2c:96:e7:
c9:4b:4f:5f:6c:5f:b4:fe:78:b4:f3:6f:96:e7:67:
8a:ca:7b:50:56:b6:2d:4d:ae:8d:13:53:6a:99:24:
6f:96:e7:95:ba:60:a7:4e:bf:ce:17:55:34:e8:04:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:9A:96:9C:35:A9:EF:CD:78:C3:62:49:09:8B:4B:18:F2:6D:7C
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:1b:bc:e9:50:b5:c6:39:e3:4b:a4:f3:1a:1f:45:1b:e5:
88:43:f1:b8:bc:9d:b1:8d:66:b2:43:ce:78:87:15:0e:61:d9:
d3:ba:ce:63:bb:27:d6:3f:8b:ef:8b:a1:d9:6f:da:e6:e8:3e:
81:d8:d6:14:d0:5b:4d:82:2d:6a:95:79:b6:6e:f1:57:86:73:
77:35:ad:6a:96:33:1f:07:e6:94:b6:b7:cb:23:a0:ec:f4:16:
2c:61:a0:cd:fc:e9:e3:17:d5:b5:3b:2f:55:24:e6:d9:c0:96:
49:75:d7:cc:61:62:13:2d:5f:26:8c:ce:97:5f:04:9f:f1:ac:
82:ad:f4:43:04:40:da:65:03:2a:90:3a:5c:91:38:a8:19:21:
a0:fb:0a:a3:cf:40:b3:92:74:3d:f2:84:a9:28:ae:3b:7d:44:
23:84:f6:04:f6:1b:db:12:b4:24:16:4d:8e:c2:09:f1:29:9b:
e6:fa:5e:27:d9:39:b3:46:9a:c3:ee:a7:96:24:54:17:fd:65:
7d:ee:79:c1:90:11:00:dd:4d:04:2c:41:a9:9f:57:d6:7e:01:
65:fb:5d:f4:f0:df:8b:73:59:ae:35:47:af:9c:68:7c:a5:d4:
aa:c5:7a:c5:e6:ba:32:07:fd:1f:e4:32:0a:52:f2:50:b5:f9:
23:ac:ea:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:59 2026 by rpki-client