Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: pel5x/1GW84AkGKftZUa6dUqBmzf0Vhr0To813b6cpI=
Subject key identifier: 8F:A1:CA:64:14:42:64:38:CB:37:9B:0C:5A:5E:A4:0E:E6:DB:AC:BC
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 019D389BA6E749B3D53E71169DB45B0F5EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: 025B
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: S9GFuqPx3pmtwS1MoMcLtkAXPcE12VnMUiWIVwTdXxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:a6:e7:49:b3:d5:3e:71:16:9d:b4:5b:0f:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=8fa1ca6414426438cb379b0c5a5ea40ee6dbacbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:46:54:64:cf:cc:23:ee:fd:35:30:92:06:
0e:23:96:11:ed:45:09:92:ed:90:8a:c5:f7:a2:ec:
68:bd:dc:7e:1e:a9:e8:5a:14:67:6f:e5:34:36:32:
26:e4:4d:69:b8:ad:e5:44:d0:47:29:4f:8d:9e:10:
83:e3:d1:fe:3a:b9:6a:28:06:c3:a7:a0:86:6b:9b:
de:cd:68:ed:bd:76:69:6a:0a:70:a4:6c:9a:ad:a0:
50:7a:d4:c0:3a:86:4e:f3:3e:a3:7b:eb:3f:85:b7:
cd:05:6c:11:82:ca:9e:44:1e:b6:47:16:1d:16:67:
8b:a0:5d:1e:ba:4d:3c:41:3a:e5:6b:04:1c:60:fd:
55:2c:f1:4e:07:a1:c9:b0:34:4b:4d:a5:1b:0d:8a:
a1:ba:a0:b4:25:34:09:e5:86:5f:2b:0e:f9:a2:c7:
75:18:08:89:04:46:2e:1c:75:ca:6b:d7:b7:df:ad:
a1:f4:6c:ea:c6:ce:e7:95:bb:85:68:fa:6c:8a:85:
58:16:7a:e8:a0:94:4c:81:f4:89:c3:08:90:2b:2e:
e5:0e:f7:66:b3:4c:78:18:35:76:93:8e:03:1c:d6:
2f:91:50:0d:fa:80:2c:c1:5e:fc:21:2e:1e:65:72:
c7:e3:b2:b7:57:99:7a:cf:28:b1:e2:2b:01:00:da:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:CA:64:14:42:64:38:CB:37:9B:0C:5A:5E:A4:0E:E6:DB:AC:BC
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:46:b2:88:ba:bd:0e:3f:ec:db:e1:04:69:b9:32:78:d3:94:
d4:33:2f:3e:e0:a3:12:db:fe:69:3c:14:fb:c4:c7:42:41:4e:
e9:df:34:0e:4a:d0:78:e7:c0:74:e0:0e:42:0d:4c:2a:63:85:
28:ab:54:b3:89:1c:46:5a:b4:73:d2:3f:55:b9:cc:d3:e2:07:
b2:c3:dc:09:7d:29:5a:1d:b3:be:7a:e4:ab:2e:78:79:e3:52:
45:9c:76:33:49:6d:87:a4:05:d1:78:ad:bc:8b:bf:4a:df:43:
19:9c:40:84:5c:29:c8:97:59:d4:bd:14:56:31:10:59:51:47:
08:91:9a:e3:82:1f:2e:0a:b0:9a:96:ab:62:2e:fa:37:57:41:
d7:f0:08:77:3e:2c:0e:82:16:6b:7f:bc:43:2b:2e:84:50:bc:
ba:a0:7d:30:70:94:84:75:58:e4:95:73:06:ba:f6:74:0e:ea:
cc:0f:15:b9:53:10:ef:58:a8:78:21:68:51:18:43:1a:8a:93:
d9:bb:cd:49:62:10:f6:f6:ed:f7:73:c2:f2:10:5f:fb:9c:8b:
54:fc:40:a7:aa:27:a7:54:1f:bf:9a:79:0d:f2:95:bb:12:8d:
d2:87:7f:7c:5d:4e:a8:af:fd:24:85:24:b1:49:3a:2b:3f:35:
f8:de:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:41 2026 by rpki-client