Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: psFywolybe2rI5AER9Tw6z6z8qzvhmPR+vLDtS+m1U4=
Subject key identifier: B9:75:7F:BF:B0:1E:CC:7F:64:E4:AF:EB:71:59:33:0C:51:A6:50:FC
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019D37C05F0EEB2DCAC12806C2F5536A4A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0D7D
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: J8CaNfRVP9HQTQPvmOjauPfEx/EwYRitHvwz/aOtZRw=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5f:0e:eb:2d:ca:c1:28:06:c2:f5:53:6a:4a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=b9757fbfb01ecc7f64e4afeb7159330c51a650fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:8c:f6:a2:52:9c:ae:d2:00:95:6d:16:ec:
fc:2b:02:9a:e3:3e:07:88:06:ed:ed:7c:5f:0a:7e:
d5:44:be:40:c4:b0:2b:09:19:13:de:1b:81:f1:c2:
cf:bd:b4:ee:aa:68:f5:21:35:f6:01:c3:cc:64:34:
c1:d4:cd:69:45:5c:e6:7f:2b:4e:fe:32:63:45:a9:
a4:94:f6:8f:39:55:f6:f8:86:bb:23:43:f9:46:81:
cf:44:ff:b2:50:03:f3:83:f1:ba:81:86:42:7c:49:
04:80:9b:cb:4a:3a:da:61:2f:1f:23:b2:92:ec:c8:
b3:c1:4f:13:3e:4a:34:85:62:f0:34:5d:db:f7:84:
77:b3:27:10:91:a6:6a:7b:97:52:ab:32:7c:0e:7f:
9c:69:2f:c6:01:8d:83:41:25:7c:f0:a1:79:03:87:
f0:fa:df:a3:4d:91:a8:7f:7e:b2:22:5d:9a:79:be:
9e:a3:83:6b:0c:e7:9d:d0:bb:02:37:55:a8:dd:ea:
82:a4:c5:ab:47:27:4e:d8:be:a6:1d:a9:8f:4e:c9:
06:f4:26:18:ef:5c:1d:b7:c0:18:bc:a6:85:42:b2:
16:f2:e4:52:3d:92:f0:f1:41:f1:91:27:bc:48:f0:
6a:cb:dc:0f:46:53:ba:55:78:02:88:19:a7:0c:f6:
6d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:75:7F:BF:B0:1E:CC:7F:64:E4:AF:EB:71:59:33:0C:51:A6:50:FC
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0c:a7:8f:ca:d9:2e:50:67:37:e1:23:d5:12:e5:d7:0c:42:
79:72:5a:1f:6d:4d:be:b8:45:07:53:9c:95:47:36:40:e4:f2:
ab:d8:8c:27:02:71:ae:8f:66:44:78:6e:23:c5:82:2b:d5:90:
37:8f:8e:79:77:93:dc:be:cb:0f:51:65:71:c5:db:96:d2:1e:
36:ec:14:57:66:8c:27:e7:83:a5:c1:6e:f8:e1:d6:a1:43:3c:
5c:b3:73:2b:2c:e8:a6:4f:2f:4c:76:ce:1b:14:a1:12:51:e1:
c6:98:48:ce:b2:52:a3:10:f3:1e:b3:75:1d:cf:1e:76:83:07:
42:64:6f:a6:af:14:ce:c6:bb:22:a5:40:21:1b:95:93:be:1e:
13:2b:0f:c7:84:3c:72:ab:c0:e5:d3:4e:e2:32:c2:70:72:11:
26:14:05:28:90:ce:4a:9d:43:00:a0:a3:cd:0d:1d:a7:8a:e2:
e1:9d:26:5e:b7:55:f7:ff:81:09:0a:3f:91:3d:53:00:68:eb:
b7:4b:82:1a:98:02:c9:ff:e2:6e:ed:3a:51:ec:ca:e7:92:0a:
b6:00:ad:32:0d:7e:22:02:57:f4:70:ac:49:b9:ff:ca:ec:d6:
bb:66:d7:64:3a:80:a5:dd:27:63:d6:43:d9:94:80:fa:05:be:
0f:32:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:39 2026 by rpki-client