
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: Kjmifm9JjPTdHMnBkvQM2q3Mt4P/7pLg9j5y23K0uDc=
Subject key identifier: BC:21:57:1A:62:14:3B:02:7F:74:8C:89:FF:D8:54:19:C3:F3:BB:A0
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019E30A9080CE0082AC66BAB41FD1D29212A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1476
Signing time: Sat 16 May 2026 12:00:44 +0000
Manifest this update: Sat 16 May 2026 12:00:44 +0000
Manifest next update: Sun 17 May 2026 12:00:44 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: TE51xH8S3qucpNLs3hW+4IZfgiAo/D/B5mix3Rq45Hc=)
2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:08:0c:e0:08:2a:c6:6b:ab:41:fd:1d:29:21:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: May 16 12:00:44 2026 GMT
Not After : May 17 12:00:44 2026 GMT
Subject: CN=bc21571a62143b027f748c89ffd85419c3f3bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:5d:a9:66:81:cb:e7:46:0a:b8:74:70:d0:
54:0c:99:2b:82:77:39:a2:f5:2b:57:05:73:84:7e:
4a:3e:e9:74:1b:56:e7:b7:de:06:59:02:ed:14:b7:
2d:bb:78:13:e5:19:c3:94:d6:e1:c4:19:6b:05:2b:
be:77:0d:14:53:41:36:51:7e:c0:26:b6:b9:7f:99:
f9:7f:f3:bf:e0:e9:97:66:13:4f:a5:f5:98:f4:e0:
38:2a:26:e6:8c:b2:ca:5b:6a:8e:8b:8e:ba:73:35:
73:fe:49:91:6a:45:be:30:15:50:9a:fb:96:46:33:
46:da:23:ef:6e:00:98:d3:14:98:b3:62:55:3e:3a:
77:b3:b3:14:80:a0:8e:28:68:10:ac:5e:51:96:97:
a1:59:cb:f4:57:ce:a6:7c:3e:af:84:36:65:cf:43:
ce:f6:08:a9:af:99:8e:bc:85:b0:28:72:2b:cf:d1:
7f:cb:a8:c0:9b:6c:86:07:b7:3a:1f:26:74:9c:5e:
e9:b0:df:33:89:72:9c:13:43:8f:ee:2d:74:00:e4:
ef:cc:44:aa:b4:fd:8f:d1:fc:c4:27:31:79:0b:8f:
f8:a4:0f:2b:dc:48:cb:f3:49:f5:9b:48:c7:5d:a2:
2b:e9:f0:cd:14:e9:8d:82:25:a2:91:32:8e:f9:d7:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:57:1A:62:14:3B:02:7F:74:8C:89:FF:D8:54:19:C3:F3:BB:A0
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bf:8e:fe:90:0b:ab:8b:6a:33:37:52:47:d0:70:ac:48:41:
73:ba:84:eb:ed:78:a9:27:7b:d2:85:47:ca:56:5d:06:f7:23:
b1:23:bd:bd:3a:04:f5:71:db:da:11:0a:88:f5:a5:9f:2c:f5:
27:97:8c:c1:2a:e2:04:96:d8:ef:d1:a4:4b:91:99:0f:89:a7:
d4:95:bc:c7:fb:86:ef:76:f3:cf:0e:bb:06:33:97:93:b7:be:
05:0c:ab:34:d8:db:fd:83:4f:1d:c2:a0:2a:32:c8:de:d8:0a:
11:7c:03:d9:bf:73:d1:05:e7:3d:3f:42:5f:cd:b5:16:0e:f5:
02:80:a1:0c:db:ff:8c:53:85:d8:ef:fa:1d:55:b2:c7:b8:66:
d7:9d:63:93:5a:b6:2a:2d:91:6b:74:dc:21:ff:3d:66:87:20:
77:f7:4e:3d:60:e4:98:e9:51:26:d8:41:04:7c:6f:e0:8f:17:
a6:5d:11:11:5f:54:3e:3d:bc:7c:1c:bf:97:0a:16:02:da:f6:
1a:35:65:23:e5:93:d4:28:9b:b0:df:90:ae:95:21:1f:cb:7d:
e2:f1:e2:ad:19:e2:f8:8e:f9:5a:59:d4:8d:86:d5:d9:ce:1f:
c7:07:89:5d:d0:12:73:1b:05:b1:4f:5c:6a:2a:51:d6:06:5c:
95:c5:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:09 2026 by rpki-client