Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: Lxz1JGMKhaWHb7+T4flzOEJojcKPuVnsy5xO8uY3stc=
Subject key identifier: F8:7E:8A:D2:83:51:E5:C2:40:5C:DC:56:17:4B:29:61:AC:26:4C:7E
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019D382E551D04594C8FF1E77235F68EBCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: 7KenStcrNDlKFqHeJx+OvORfKdBfpG+9Viz9VlWR+XA=)
2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:55:1d:04:59:4c:8f:f1:e7:72:35:f6:8e:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=f87e8ad28351e5c2405cdc56174b2961ac264c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:d2:bc:9b:c8:4f:59:a5:93:f3:a0:d4:50:
60:6a:da:f8:57:51:0e:7a:f1:5b:c0:41:91:b9:aa:
a6:f6:a2:49:e7:57:36:c3:76:dd:75:ce:5b:0b:99:
3e:3a:f4:2d:d6:c1:ef:fe:07:fa:de:23:02:da:70:
bf:b7:cd:3e:76:ff:91:3a:f3:65:0f:59:64:83:ab:
21:84:17:fc:33:e2:21:a1:4c:44:84:cf:c2:3d:f0:
67:41:e7:9e:8e:32:37:aa:55:59:99:56:eb:09:41:
a0:16:80:c0:c0:d1:7d:7f:78:ce:0e:7a:1a:f0:b3:
22:27:5c:e6:01:76:7d:84:3c:cc:06:7f:b7:55:de:
64:c3:b3:55:41:67:ac:aa:64:b3:fb:40:09:cb:d3:
1a:a5:96:99:e0:6c:37:cd:67:54:cb:41:7f:8f:f9:
d7:a8:f7:f7:2f:0a:cb:dd:d8:cc:b9:27:20:be:12:
3c:f2:b6:37:a6:8e:80:22:99:3d:3c:6b:db:d1:ca:
d1:8b:78:c7:ad:2a:9c:46:eb:7b:95:03:9b:2f:82:
20:a6:c9:09:48:3d:77:ff:a5:fe:fc:0a:bb:84:5e:
dd:e0:15:26:17:4a:08:dd:6e:12:ea:96:13:53:83:
08:e8:ae:3e:1d:0b:a4:0b:bc:31:3d:40:b4:0f:49:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:8A:D2:83:51:E5:C2:40:5C:DC:56:17:4B:29:61:AC:26:4C:7E
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:aa:f5:cd:60:41:34:49:dc:32:5d:37:13:82:25:a5:20:
5c:e1:43:80:cd:12:06:5c:3e:3d:ca:a3:f6:b7:03:df:25:39:
a5:68:42:22:11:fb:95:bd:bd:a5:9f:1b:a7:2f:5c:a9:cb:b0:
cd:05:ce:03:a8:01:1e:0f:1d:c3:30:f8:63:04:bc:4e:98:42:
97:56:25:21:78:d7:6f:49:a2:2a:d7:04:0c:79:cf:f7:c1:e2:
41:9a:e7:92:9a:5b:5e:be:0b:3f:d7:97:b1:a4:88:52:71:f0:
01:d1:ab:b3:a8:89:e9:2d:fc:a6:85:0c:91:39:7c:70:06:c1:
78:96:ad:04:de:4d:95:c5:e4:b3:69:db:04:57:bf:b0:2a:e0:
61:c4:b4:54:0f:35:47:cc:1b:f3:48:d5:ef:c1:01:02:df:af:
b2:2e:17:52:25:4f:e1:97:7e:58:20:1b:e3:3f:e5:ab:d1:b3:
b7:af:b4:5e:e6:e7:0c:71:a1:26:ab:17:31:c6:0c:84:d3:27:
7e:a8:e5:d9:58:9b:d8:f4:a1:c2:f9:db:27:f0:8c:35:05:57:
5d:7d:fa:c6:16:25:f4:68:de:9f:4a:25:ed:ef:e3:8e:0b:d9:
a8:6c:ed:46:5d:a8:0d:c6:4a:c3:3e:86:73:f1:05:f4:13:f6:
8e:56:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:49 2026 by rpki-client