Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: yr2Sk7nKfkJZZhINWy86wBLpddmhg7pMoOHjA+0S6xI=
Subject key identifier: 4C:76:E7:47:E0:DC:E0:B8:DB:2B:A6:E7:82:52:AD:AA:6D:A7:0B:8C
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 019D382DDE66D860A73A79DEBE815800720D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0703
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: SHQ0owzC4Wk0U+u5KevAIGOmJIQwmO5VMFBz4h7rYL8=)
2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:de:66:d8:60:a7:3a:79:de:be:81:58:00:72:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=4c76e747e0dce0b8db2ba6e78252adaa6da70b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:9b:35:b3:be:1b:b9:3d:2a:bd:b9:82:f8:
79:67:21:b3:96:ab:62:ed:e7:9c:76:25:0c:a8:ad:
5c:c4:2a:c5:d1:4b:b0:34:58:f5:33:b0:54:a3:a4:
10:2b:2b:29:68:d3:bb:1f:18:ae:cf:db:b5:03:40:
c3:43:8d:45:75:f3:58:6f:83:41:d9:0f:5a:5f:0d:
7b:65:a4:e1:94:12:a4:9c:37:47:2b:fc:3b:30:99:
e6:1a:52:b5:d5:86:5b:4d:1e:7c:6b:9f:7b:78:55:
f9:d2:72:98:75:5a:9e:61:b5:f5:07:59:07:14:26:
04:c1:6c:4c:f9:bd:08:2a:5b:ca:89:e9:aa:29:1f:
f5:59:bd:67:00:99:34:d5:20:e1:0e:9d:9e:ca:7e:
7b:4b:e5:28:7c:42:af:98:11:f1:3a:cb:76:21:0c:
c6:e3:3f:7d:8d:5b:6e:04:b4:44:c4:8d:ff:0f:ab:
91:bc:cb:4c:2d:05:97:11:59:f4:dd:ff:40:23:31:
e1:96:b3:25:21:53:c6:8d:b5:b6:eb:51:42:72:c1:
52:18:70:d1:0b:ae:7e:9c:e2:87:aa:fe:fb:1e:8c:
e6:5b:56:39:c0:ea:66:3d:9c:c0:42:be:0b:87:99:
f1:2a:c8:c1:c9:7e:37:d2:d9:84:bc:2d:e1:ba:92:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:E7:47:E0:DC:E0:B8:DB:2B:A6:E7:82:52:AD:AA:6D:A7:0B:8C
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d2:c7:36:5a:7f:ca:96:b4:c0:08:91:18:a7:08:fa:d2:09:
f2:0a:7b:fb:19:8a:46:f1:dd:03:21:d3:a1:bb:c2:e1:57:3a:
2f:3a:e1:dc:55:a6:06:36:cf:af:f2:ad:77:31:89:2d:62:e6:
52:24:ad:2f:6e:b5:14:7a:c2:7e:ba:cb:16:e7:4c:54:92:ef:
54:15:91:a0:6c:27:71:3f:00:ea:96:ec:60:63:5d:a4:2c:fe:
aa:d8:d9:1c:a8:8e:d1:59:bd:8a:55:9a:b2:74:e1:50:b3:c2:
a2:d5:79:92:8e:c1:24:19:54:32:de:4d:70:70:35:4c:50:5d:
b4:9e:6c:af:a6:57:84:1a:80:cb:af:5c:5b:da:fc:c0:bc:5b:
ac:7c:c0:9e:fd:e4:48:eb:82:56:a9:37:ce:a3:33:59:aa:06:
ad:37:ca:8b:6a:33:54:de:f9:f6:c6:2e:65:ef:9a:ec:1b:a5:
35:84:77:4b:72:c4:dc:24:c0:9c:a0:c1:44:36:38:1b:e9:14:
c6:79:e5:67:c2:78:69:90:35:ec:a3:12:90:43:e0:11:1c:39:
fb:49:33:54:c6:bb:92:ab:8a:13:0a:7b:09:16:bc:01:4c:fe:
e4:70:22:e2:50:b8:c3:94:3a:11:42:70:c1:cc:f8:04:03:c5:
fa:ac:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:45 2026 by rpki-client