Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: 3fVOXfMJvlSAjLziS6lb3LSLDC/w7cC9JnXBFrfetbU=
Subject key identifier: FE:4C:A5:9D:AF:A4:97:CB:14:8F:4C:0C:B8:31:EB:D8:93:75:D9:0F
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 019D371B3C3809691C77F6F8B16BD1639CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 0755
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: 9rV/oGGrao6ONwrkvB+Gpc70nRmzYfFBRDqblfa661U=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3c:38:09:69:1c:77:f6:f8:b1:6b:d1:63:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=fe4ca59dafa497cb148f4c0cb831ebd89375d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:f2:06:81:b2:42:fe:01:6a:87:e9:58:cf:
ce:3c:ee:d3:e0:61:40:23:07:69:75:9d:c9:cc:61:
1c:8d:f0:13:e0:16:44:37:1a:1c:e2:76:69:c0:fb:
59:fe:66:9a:58:2c:e7:ea:3b:d3:2e:84:0d:9e:12:
f5:e7:6e:2d:56:02:5e:a8:3e:1f:c9:95:df:d1:88:
aa:d7:69:19:52:3b:2b:cd:c0:59:da:35:9a:7a:4f:
f4:25:97:5a:bf:70:2a:81:ae:0e:4f:84:37:19:3c:
40:6d:7c:55:70:b1:5b:0e:89:94:f1:43:08:9c:ac:
df:2b:c4:f9:bd:d8:db:24:ac:0b:b8:f8:e6:7b:1f:
52:4d:56:fa:cf:75:a2:47:d2:6b:11:bc:53:13:65:
55:9a:20:f3:9c:c9:e4:9c:2d:87:72:cf:63:5f:df:
50:d4:32:8a:eb:77:1f:01:dd:44:c2:c3:78:17:20:
4f:67:92:6b:59:e4:32:94:e2:7f:95:87:9e:f6:10:
17:fb:e2:55:eb:99:94:c6:0b:25:31:e0:fd:91:42:
87:a0:cc:65:ea:da:8a:1f:08:f6:1a:fd:9e:8b:71:
54:43:65:50:08:95:13:24:80:d6:f5:63:e5:94:f1:
d5:0e:ab:84:28:d8:d0:2a:4c:71:95:46:aa:d3:01:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:A5:9D:AF:A4:97:CB:14:8F:4C:0C:B8:31:EB:D8:93:75:D9:0F
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8a:0f:90:c7:f4:29:e8:6c:c4:9d:1e:00:4d:87:1d:8b:1f:
da:36:3f:1c:8f:56:c4:55:58:8f:f6:7c:48:66:9d:75:20:e3:
a3:6e:77:f0:39:31:26:9d:6b:b5:c8:3f:25:b2:e0:39:1b:d4:
24:a3:f5:78:a2:c4:b5:c7:29:2d:5e:a3:db:fd:ae:d1:d9:15:
a6:57:ae:26:c2:3d:69:fc:ab:97:3a:2f:0a:12:54:c3:b8:bc:
23:8e:b0:cb:4b:13:7f:6f:c9:b7:65:6e:86:2f:24:6d:e4:ca:
7b:18:de:75:f8:7a:37:ee:91:63:36:44:ff:92:46:5f:13:10:
f3:9d:d0:62:63:96:62:af:45:55:65:60:b2:22:03:6b:a9:bd:
cd:2c:ba:c0:7d:6b:d1:a3:d9:c0:da:22:dc:5f:5a:c0:e1:b3:
8d:ee:8c:6c:1b:77:c5:b6:22:ef:c1:0e:af:fd:e1:e7:7e:1b:
5a:77:80:72:57:a9:3d:bf:db:3a:e2:97:5f:0a:97:ee:f8:dd:
c3:89:7e:f5:87:23:51:3c:b0:97:16:ab:6c:32:e9:ac:51:b3:
ed:e6:08:b1:53:06:0c:42:56:5a:e7:62:6d:3a:f1:bc:97:ed:
64:3d:71:f4:70:6a:38:a2:83:10:8e:f5:44:6b:4d:3a:53:e1:
b6:6c:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client