Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: CWoSAXHzYPeYdXFjzdInpg6Qd/dUYb3Y9Qy/5+WUDD0=
Subject key identifier: 64:C8:7B:A5:E3:90:03:B7:A9:64:14:EB:1F:3E:6C:7E:5E:D7:F5:0B
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01A189E476A45EDB6F0890AF14602FB2E123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0F0F
Signing time: Thu 29 Oct 2026 23:00:13 +0000
Manifest this update: Thu 29 Oct 2026 23:00:13 +0000
Manifest next update: Fri 30 Oct 2026 23:00:13 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: ubMvhGvIW8QAgLVng/BeMhi2FZywbtnd77SUxeAq5Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:e4:76:a4:5e:db:6f:08:90:af:14:60:2f:b2:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Oct 29 23:00:13 2026 GMT
Not After : Oct 30 23:00:13 2026 GMT
Subject: CN=64c87ba5e39003b7a96414eb1f3e6c7e5ed7f50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:19:46:f5:bd:24:23:24:9d:54:41:a6:8d:
17:52:3c:81:26:d9:e8:66:82:fb:db:23:06:57:23:
22:c2:2d:f6:30:ba:c8:34:88:61:00:5e:db:4f:6d:
57:e8:a3:40:19:5c:14:0d:34:62:dc:ce:46:a5:4e:
44:ea:a3:80:8a:1f:f0:5e:9f:e7:1b:5e:2c:a7:b1:
e4:45:52:49:8a:bc:46:98:56:c9:a4:50:3f:df:b3:
9b:fe:50:ee:39:d4:11:98:93:e4:09:c6:e1:86:ff:
79:03:86:c6:99:5c:eb:2e:f4:7e:4a:fe:bc:bc:c4:
6f:89:4c:31:60:67:3f:7d:b1:b8:01:c6:75:e8:7d:
14:75:4d:d1:f5:ff:ba:dd:65:81:2c:a5:98:f2:38:
63:8d:c2:9e:4e:0a:9f:9c:d9:c6:e4:cc:a4:6f:07:
ab:d7:ed:2c:66:7f:e3:35:3f:e4:37:0c:4b:04:25:
2a:d2:86:e2:a3:37:4f:99:61:06:16:63:71:37:16:
eb:dc:e9:c7:75:9e:66:86:fe:9e:77:1e:45:a9:8c:
1c:ea:e8:bd:73:82:a0:86:43:62:d2:65:2c:90:9e:
a5:c1:88:df:2a:78:b4:ea:1d:9b:ca:03:27:7b:30:
df:f8:a4:59:d7:20:8a:e7:98:1d:30:89:56:f5:0a:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:7B:A5:E3:90:03:B7:A9:64:14:EB:1F:3E:6C:7E:5E:D7:F5:0B
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:fc:a0:10:a9:bf:bb:12:48:83:0e:3c:d6:55:66:eb:13:
58:c5:fa:22:39:04:67:ca:9e:3a:74:d0:87:4c:45:de:f9:58:
3b:70:f2:b8:16:db:61:81:70:31:b0:c9:3e:ab:99:4d:46:c2:
66:ed:99:de:4b:bd:2f:44:71:85:fd:d6:aa:f6:6b:06:a4:a9:
d8:a6:a4:07:a6:fd:9a:dd:c0:67:32:1d:1f:46:6e:23:1d:d1:
f2:96:f6:14:b1:e7:e7:df:40:94:14:0f:42:90:fc:82:5c:87:
19:8f:6e:71:92:2e:cc:c0:fe:d5:fb:79:07:9c:5c:3b:e6:e2:
d2:ac:25:9e:e4:fa:e3:e0:00:3c:75:b7:13:43:2c:b1:ff:0a:
29:cc:6e:cb:a2:d6:ea:40:6d:da:d9:d4:30:47:69:dc:e6:d1:
3e:e0:83:e3:ba:f9:85:25:3d:5b:ad:2e:c2:b3:15:ef:9d:47:
0e:35:8f:08:22:4f:2b:92:b4:25:8f:c4:92:d7:6d:52:14:0a:
44:35:51:eb:e5:a7:dd:15:06:3b:2d:8f:13:f4:40:08:56:05:
cb:46:43:d0:3b:f8:8f:71:f1:42:51:4b:30:3d:93:b3:01:0a:
64:72:4f:8a:ee:c9:0d:b7:16:ad:f8:88:8c:30:40:7b:9f:09:
a7:84:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:49 2026 by rpki-client