Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: dB1ZuZk+NsubUuNzH7LxEVyRCWMWqZ1i96oqT2CK/T0=
Subject key identifier: 45:78:C9:5D:EC:4A:3D:B6:12:A0:E8:2F:6B:D0:0E:1A:2D:6C:46:3B
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019D389C5917350D2510D051A9763311DF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 054B
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: 814sGk57VEqHV45+1BgHqTqoXltNbl3zsUOwPePrvyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:59:17:35:0d:25:10:d0:51:a9:76:33:11:df:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=4578c95dec4a3db612a0e82f6bd00e1a2d6c463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1b:12:e3:ff:76:bb:54:ef:98:c4:a1:05:bf:
7c:74:b6:73:d0:61:db:31:cb:06:98:96:28:84:b8:
09:db:3c:02:c6:53:9a:cd:4c:90:da:c2:6c:d0:36:
d7:35:38:40:be:b8:1a:96:95:9a:6d:6c:a0:88:a6:
ed:c6:e1:79:4d:5e:27:21:13:70:89:b8:f7:1d:eb:
2d:20:ef:4c:39:29:49:21:c3:93:35:a5:8f:ad:32:
0d:e5:7c:5d:29:06:ff:63:84:d5:17:36:e4:49:95:
9f:9e:43:12:e9:85:8e:e8:41:68:53:ff:23:e7:a6:
c8:ae:de:9e:07:43:6f:33:d4:8b:19:32:ba:08:06:
3a:df:5e:10:8c:20:7a:d8:92:db:cd:7e:0b:9e:e5:
f3:4e:86:17:db:b7:bc:97:63:45:bf:9c:20:a6:5d:
6d:39:0a:2a:c5:d2:d4:ba:41:b2:7f:2e:04:ab:3e:
a1:88:27:62:78:8c:2c:b2:32:8e:07:ba:37:2d:b1:
c3:b2:82:60:76:fd:03:00:d6:39:04:1b:39:b9:27:
a6:63:21:b4:69:1f:a4:11:77:89:c5:7a:18:d0:9c:
3b:5b:fd:b7:0f:39:97:76:8c:d6:68:4c:86:e9:43:
f0:4f:95:4a:80:0f:9b:1f:43:7c:69:db:c6:96:73:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:C9:5D:EC:4A:3D:B6:12:A0:E8:2F:6B:D0:0E:1A:2D:6C:46:3B
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7c:04:5e:97:25:0a:4b:32:fa:ec:64:a2:4d:71:9f:f5:dd:
6d:ef:69:3d:f7:aa:9c:12:e0:4c:de:21:db:cf:ed:58:16:ed:
a2:12:68:34:12:24:68:65:1f:44:fa:89:ce:4b:94:20:47:39:
fc:6e:e5:76:60:ba:51:65:bb:df:b1:52:51:89:1e:f9:1c:a5:
a4:b2:39:f9:4f:55:f6:d5:25:74:a8:76:7b:a1:06:89:fc:53:
a9:39:b3:93:96:5c:18:f8:ce:9f:ee:e3:df:42:e6:c7:6e:7c:
d6:7b:58:f7:e9:d1:f6:ba:aa:d9:97:98:d5:c9:75:32:9c:2d:
5b:05:35:2c:4e:93:e3:be:fc:b9:96:22:b1:c9:a0:7f:23:3b:
03:dc:e0:6b:47:53:1f:b2:2a:e3:d8:15:f0:11:d3:29:c8:67:
9d:68:1f:0e:2d:18:e5:51:3c:e7:7b:08:9a:5f:05:66:52:ff:
cf:2f:f4:6b:1b:e1:cc:95:5c:75:c6:b1:ac:8a:4a:ea:f3:83:
1a:49:c5:ce:f1:05:96:52:97:5a:67:4b:a9:00:6f:6b:33:aa:
62:30:50:7b:d9:51:85:6a:21:8e:8d:b8:fc:82:64:13:a1:53:
d0:f7:69:8b:f2:cd:2c:89:5a:c7:bb:b1:d4:89:81:0c:7e:dc:
3b:f5:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:05 2026 by rpki-client