Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: mYeURYqtTv3w2qyAW/6j03pQs8nnEZhRDeilQNf390k=
Subject key identifier: D8:90:C2:C9:88:0E:64:C8:A7:6F:7C:78:B1:CF:EF:2A:93:67:42:C3
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019EAC0B479E24612F663A3BD9AA87706432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0D93
Signing time: Tue 09 Jun 2026 11:01:20 +0000
Manifest this update: Tue 09 Jun 2026 11:01:20 +0000
Manifest next update: Wed 10 Jun 2026 11:01:20 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: Jk3aaxgnuzPggzLaDq9thhyBJcXclCCWNYQKokTJGBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:0b:47:9e:24:61:2f:66:3a:3b:d9:aa:87:70:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jun 9 11:01:20 2026 GMT
Not After : Jun 10 11:01:20 2026 GMT
Subject: CN=d890c2c9880e64c8a76f7c78b1cfef2a936742c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:d5:d0:56:d0:05:5c:64:72:ff:16:83:f1:
f9:e3:3c:7b:35:36:a6:45:a6:b8:e4:db:d9:0b:86:
bd:14:a8:8a:0a:e2:67:c6:b3:3e:54:66:ec:ff:dc:
dd:b9:ab:da:e9:4d:7c:e3:bb:b7:67:79:9e:3b:c6:
9a:d9:1e:3a:39:33:59:e1:3e:95:0e:ce:13:17:69:
94:68:43:a3:5a:96:b9:b3:29:7d:58:bb:e1:87:33:
dc:d2:39:7e:be:2c:de:8b:05:a9:68:09:af:d5:7c:
93:67:fc:84:b3:ac:68:26:69:85:bb:22:aa:c8:9c:
65:2f:e4:6e:1a:6f:ac:60:ff:fe:43:2d:19:a4:3f:
98:13:dd:d8:ac:a2:64:16:c3:29:fd:34:a7:fc:4d:
ad:92:22:79:f3:d4:00:b1:7e:9d:fe:28:b5:8b:e2:
96:25:38:1b:13:c2:9a:8d:03:09:6f:63:27:c3:be:
a6:2c:5b:00:0c:dc:ae:7e:27:01:c1:2c:cb:8a:75:
c8:31:57:66:52:7c:9a:f2:4c:2f:61:5a:eb:9a:62:
8b:a9:86:cd:38:f2:86:f7:1c:66:e2:57:48:d0:08:
63:aa:30:a7:b9:34:0a:57:a9:7d:72:eb:0c:f4:04:
9a:c5:51:de:96:f9:eb:5b:7c:e4:a1:50:a7:21:9e:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:C2:C9:88:0E:64:C8:A7:6F:7C:78:B1:CF:EF:2A:93:67:42:C3
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ee:c5:eb:8a:55:6c:3e:04:a2:a4:ae:24:0f:1e:74:6e:26:
33:c2:91:17:b1:a2:1f:15:ef:4f:8a:eb:c6:d8:64:3c:e6:99:
93:a1:11:5d:24:07:06:78:d5:ca:94:8f:cf:bf:00:05:44:ed:
fe:46:51:d3:e3:cc:00:9f:ba:33:dc:a7:47:b5:d2:31:99:da:
9b:55:9e:fc:16:95:54:a4:1e:cc:ea:4d:9e:68:55:93:fe:fc:
56:d0:89:b7:9a:80:02:3f:fa:c3:00:04:cb:13:9a:53:58:15:
1b:a2:26:52:d5:6c:33:c0:d1:bb:92:67:ed:20:eb:95:13:9d:
fd:b3:7a:4b:2f:24:2c:b8:ed:66:56:a8:91:31:d9:ea:26:55:
05:27:fb:c1:72:38:a1:2f:21:e9:5f:a0:14:c0:bd:93:cb:3b:
41:aa:c5:cf:32:b0:6d:26:30:67:d5:c7:9e:08:29:1b:dc:94:
0c:59:40:52:63:57:26:31:e9:89:4a:d9:dd:89:c3:9d:9a:86:
de:af:d6:06:87:72:06:54:92:ae:af:21:69:6c:b2:01:2c:59:
66:be:e1:82:00:24:79:25:7a:f0:ee:4b:68:6f:33:9d:52:b9:
99:ed:91:db:df:13:01:b6:a9:9a:51:7e:3c:cf:01:7e:ff:c3:
13:ca:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 21:30:47 2026 by rpki-client