Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: Mbbig5LL1lpMZMARqq45jLEw1xx2Mc/vfylUx+qKhNI=
Subject key identifier: 0D:71:79:C2:BE:91:1C:7B:B0:A7:81:93:AD:50:87:12:27:EA:EB:40
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019F97A6697F3EFACD18019BE57AF0FBCDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0E0D
Signing time: Sat 25 Jul 2026 05:01:33 +0000
Manifest this update: Sat 25 Jul 2026 05:01:33 +0000
Manifest next update: Sun 26 Jul 2026 05:01:33 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: oqF9xzTdJDXEyLN4E1dn9qMGr6ox3//pI9+lHoo+fFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a6:69:7f:3e:fa:cd:18:01:9b:e5:7a:f0:fb:cd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jul 25 05:01:33 2026 GMT
Not After : Jul 26 05:01:33 2026 GMT
Subject: CN=0d7179c2be911c7bb0a78193ad50871227eaeb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:74:78:19:c2:1e:52:0c:ba:54:f5:da:60:
21:de:1b:10:99:11:6f:d1:0c:df:d0:96:61:9d:3d:
f7:73:f2:4e:d2:95:f5:b5:01:8a:5a:1d:d6:a5:9e:
42:0a:9e:08:40:15:e7:00:8a:ab:53:92:0f:bb:04:
7f:48:5b:c9:7e:32:7b:ce:2c:e3:c6:8e:d6:f7:5d:
21:ea:ca:c2:e0:6f:c4:b7:a1:a7:5d:63:4b:e0:bf:
45:c7:c3:a8:0f:ea:d7:02:0b:60:3f:1f:6e:0e:be:
43:59:52:a6:18:0c:45:0b:1f:48:3b:89:59:31:55:
a7:81:d9:b2:65:b5:82:a4:8c:aa:d0:69:44:4f:04:
51:1e:b5:99:8b:05:a9:91:7a:ec:fa:ab:40:cb:61:
d5:ad:a6:a3:55:2c:a2:03:35:e8:9f:42:8a:c2:7d:
9c:33:3b:7c:5c:b0:d9:ad:c0:0d:f3:e3:19:95:60:
4a:61:43:ed:d3:c9:f6:28:4b:16:56:9f:54:63:98:
e2:ab:5c:d6:42:a1:63:c3:89:c5:45:52:61:a2:7f:
a3:9e:46:d4:aa:d8:50:61:a8:e4:fe:fc:64:8b:05:
14:b8:4d:58:58:a2:d1:1d:8e:a2:c2:3c:72:80:97:
e8:f1:1b:54:96:3e:f7:ac:1b:39:c3:ec:22:04:1c:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:79:C2:BE:91:1C:7B:B0:A7:81:93:AD:50:87:12:27:EA:EB:40
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5e:1b:94:e3:b7:dc:93:50:8d:0d:4c:0e:58:0e:31:1f:85:
8c:c1:2a:0c:30:6e:48:36:6f:27:35:e1:f2:62:a1:b2:13:13:
82:b5:46:b3:b4:70:42:01:01:76:bb:8a:42:fa:24:e2:0a:ec:
33:86:0c:c8:a3:ca:1a:ba:86:78:61:53:1c:ff:81:b6:ab:8c:
35:8e:11:a3:5c:a4:30:4c:5b:f0:87:f0:0e:a2:13:7f:e8:3b:
72:dd:fa:51:50:f6:57:9f:5a:e7:31:f2:f0:3c:2d:07:ca:c5:
d5:72:ae:6c:a4:7c:56:a7:07:73:18:a2:13:b5:57:f8:1c:2e:
fe:7b:80:16:e1:a7:87:81:0e:9d:8c:ff:04:73:8e:0e:33:16:
6d:1c:7c:32:25:81:53:8c:bc:51:cc:a5:7c:20:ba:4b:83:7a:
7b:b8:37:ed:4d:50:4f:34:95:19:9b:19:9a:44:6e:c2:15:6e:
de:23:68:04:70:b0:43:87:5f:de:a3:ee:5a:9c:4d:42:60:9c:
50:c1:78:f9:fb:15:d2:98:8c:60:f6:6b:42:73:e4:d5:f2:bc:
fc:d3:c3:d4:93:c9:6a:41:54:5d:de:4f:eb:23:f0:a3:b3:28:
0d:54:53:7c:76:a9:0c:e1:64:0d:70:49:82:56:9f:73:bb:b8:
3e:55:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:09:44 2026 by rpki-client