Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: 8/gT66jFlgMAv5DOYPBWfSgmPWDQxU3rKgIrMgwo8zI=
Subject key identifier: 85:B2:02:37:AD:A6:FA:4C:69:B2:6D:5F:6C:1A:F5:68:B8:5A:90:4D
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019D3940CE5F80A05F64EF59EE7F11C42605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 096E
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: L7fzf27U11gpKBaCEjK4/sg1lOTS8XvvRcgyiXY3P3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ce:5f:80:a0:5f:64:ef:59:ee:7f:11:c4:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=85b20237ada6fa4c69b26d5f6c1af568b85a904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:eb:02:bb:ff:d3:b1:70:a4:a5:7b:d5:a0:
9a:93:0a:e9:d2:41:cb:3c:63:77:bd:2c:ba:88:86:
e2:93:78:c5:4b:0a:62:4d:62:1f:80:86:9f:c7:3c:
03:e9:aa:81:81:b9:70:a8:17:95:fd:a8:91:13:c3:
de:a1:79:54:cf:d1:01:a6:f5:14:e6:59:ac:4b:56:
fd:80:5f:26:e4:1c:31:08:6c:3e:c1:75:68:ab:f2:
60:c9:63:de:7e:3d:86:72:16:f2:b1:6f:c9:91:3a:
73:cc:c4:89:9e:2e:91:37:e4:70:ce:1f:50:e2:a8:
71:a7:a5:05:ec:34:37:f8:e2:ea:dd:28:06:39:3c:
7d:0e:c4:09:88:a1:7b:e8:ef:ab:fe:9d:fd:e6:11:
a5:b2:be:be:07:eb:98:1d:ec:9f:f0:3c:1e:99:9a:
ba:36:cb:db:07:07:b3:64:36:5b:c3:22:9f:08:a5:
90:89:2e:4d:d9:f2:d7:78:62:df:97:64:0e:de:9f:
84:f6:c6:88:b9:88:fa:6b:d3:07:c2:32:89:bc:e1:
40:b0:1d:d5:d5:ab:0d:9d:74:4a:56:18:67:b9:9f:
c1:e8:ca:c0:cd:cb:d5:f1:fc:94:05:7d:88:b7:56:
31:c0:55:5c:55:07:93:5c:1b:4b:7b:2a:14:b8:c8:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:02:37:AD:A6:FA:4C:69:B2:6D:5F:6C:1A:F5:68:B8:5A:90:4D
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:87:35:66:be:94:bc:a5:e0:85:c9:b2:41:70:e7:a0:db:00:
4f:a9:eb:29:e2:83:93:63:b1:5d:09:73:38:a2:f8:d7:8c:00:
49:0a:22:ae:78:1e:91:8f:70:70:d1:32:9e:18:00:82:9a:1a:
49:c9:b2:34:59:cf:2f:ae:cd:04:d4:39:cd:fd:ec:c2:de:c1:
a3:26:70:e3:96:4a:af:28:74:4a:f5:f3:a3:c9:64:34:95:36:
88:aa:24:0a:24:f6:47:ff:3b:55:2c:0e:b3:a4:69:db:d9:fe:
5e:5d:8d:26:89:05:3c:69:30:12:41:59:f9:52:b3:fb:30:34:
61:ec:91:6a:c8:88:d4:6a:fa:95:d0:d5:5f:56:38:95:0a:18:
08:d5:3f:7c:6b:3a:39:a1:02:e0:46:99:b3:a9:41:38:73:ea:
bb:a6:a4:8e:b4:9f:b4:39:58:d2:48:03:6b:b7:2a:88:69:28:
a2:13:b3:c8:5d:7c:f3:b8:49:55:c5:ba:a6:f9:1a:ee:62:87:
36:8f:0c:30:59:a7:04:1a:a7:61:d5:5c:72:ab:d3:13:44:9b:
07:5a:c7:c6:ce:16:ad:1e:34:c6:b1:ff:9a:1a:f9:0d:f9:55:
64:be:cf:27:8d:52:b7:a8:ee:06:c2:7c:b6:9b:27:25:1e:3a:
34:64:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:10 2026 by rpki-client