Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: LYXPorv3llmJ0E92kMXMn/o9hhhtpIDD68ZldQt6/JQ=
Subject key identifier: BC:1F:6D:DA:9E:36:B7:7F:DE:33:E2:8F:03:3A:76:6E:E1:AA:6A:F2
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 019D37C0F01555715377148CCD3ECE41AAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: 7QiDXNBqXjpXW3wGWrXluUEa4lh1Jlue1NwRI07M8mA=)
2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f0:15:55:71:53:77:14:8c:cd:3e:ce:41:aa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=bc1f6dda9e36b77fde33e28f033a766ee1aa6af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:1b:07:8e:ab:5f:8e:ff:96:92:98:50:43:
a4:98:f4:6b:76:cb:2f:ef:8c:fe:9c:1a:eb:51:db:
5c:9f:36:87:bf:9f:5a:4d:7a:14:d6:95:d5:0d:5b:
f3:5b:fb:8b:f0:3d:9f:34:04:98:1d:4c:20:d7:61:
d8:0b:7f:8a:18:16:e5:a6:33:db:f6:75:f2:6b:d1:
46:f0:0f:a2:75:07:7f:d5:91:73:41:63:55:99:0e:
ac:c0:0f:12:9f:f9:fa:1c:81:54:f5:88:b4:bb:65:
5e:1c:3e:5f:1e:69:ed:60:24:c6:6b:8d:d4:46:b6:
dd:a4:7d:93:7d:d0:db:b6:05:74:2b:33:e7:31:58:
1c:18:d7:75:79:d3:5f:9b:2f:3b:28:22:bb:28:18:
43:44:af:8a:05:c2:85:c8:15:c6:0a:12:d1:3b:6d:
de:5a:ed:0b:33:fd:f7:07:7e:0e:f7:db:ff:e2:0a:
aa:87:80:bb:cc:39:80:20:0a:fa:45:8e:d4:ed:4e:
c9:37:2c:0e:1a:d2:80:0d:d1:91:e1:19:5e:1c:e2:
27:5e:8c:50:89:3c:49:f9:98:00:66:cf:27:79:ac:
28:fb:17:b3:8f:17:f6:44:96:64:83:65:d9:fd:bb:
43:f2:94:39:06:78:fc:3a:a9:1b:42:1f:ac:94:b4:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:6D:DA:9E:36:B7:7F:DE:33:E2:8F:03:3A:76:6E:E1:AA:6A:F2
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:22:ea:66:c5:a4:76:89:4c:b7:39:be:65:3f:44:6a:4c:c6:
9b:73:4c:e0:a1:94:4b:2c:e8:69:70:02:1e:ee:ab:15:bf:e7:
ab:df:73:a3:1b:90:f0:9d:6e:db:cf:0a:8f:9f:4c:86:e3:8e:
f8:2a:ef:f3:34:72:b3:ad:e0:c0:c5:38:45:8b:3f:cf:00:bd:
c5:1e:38:0b:27:b3:9f:fe:4d:da:c0:e2:ea:3a:dc:a5:c1:87:
1c:25:45:b9:52:fc:0a:fe:6d:89:f6:1c:1d:7a:62:c0:2b:38:
47:dd:17:a9:7e:91:cd:1a:14:dd:41:85:8b:45:43:b9:fd:47:
38:78:73:dc:e9:ab:8d:7b:a0:b9:c6:d5:74:6c:eb:89:c8:80:
2d:58:0a:1e:29:cd:c0:73:ee:71:01:18:75:19:47:79:b9:4a:
49:69:2a:59:13:d3:22:3a:55:8c:89:93:09:42:61:35:61:00:
de:fe:cc:e5:b2:55:33:57:71:1d:ef:aa:73:ea:b6:5e:80:f1:
e7:51:4b:84:7f:9a:d3:cd:5f:ed:21:b9:7e:67:43:29:a5:62:
49:7a:64:65:f2:7c:d3:12:c4:20:da:dd:92:67:4d:20:1c:6d:
72:8e:c7:9e:96:5b:31:ef:24:8d:55:23:df:be:a3:e6:a7:f1:
77:bf:34:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:09 2026 by rpki-client