Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: N6m8G26JstLsAuDYwA4KXYLedn+i5rcybUhyQPic34k=
Subject key identifier: C0:BA:01:72:AE:63:24:5E:80:5D:FA:D3:A0:5D:5A:81:71:B0:58:68
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 019D378964FE9D25C1C2DBEAB6B7521770A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 03DD
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: yB0yqDMo1jaJ++5fGZsOJPgkcJtrYriY/UrsGZ81BrQ=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:64:fe:9d:25:c1:c2:db:ea:b6:b7:52:17:70:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=c0ba0172ae63245e805dfad3a05d5a8171b05868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:e8:cf:67:c2:5f:89:d8:24:e5:7a:ce:0a:
60:d3:c4:28:b7:52:0a:28:34:06:a2:66:37:14:fb:
33:f6:94:e8:53:f8:1a:e2:b9:9d:30:34:a1:e6:fa:
1f:63:fb:b5:94:81:53:23:f8:54:c0:78:fb:02:a6:
b8:57:72:22:62:53:6a:f7:8a:99:8f:84:19:27:b7:
26:34:53:73:ef:ee:b5:30:81:d2:56:7e:45:8c:26:
87:30:08:c3:73:cd:0e:83:a5:1c:f5:94:53:02:e1:
b1:71:a8:ec:c0:8e:ea:cf:07:11:4f:98:62:35:d2:
e7:e3:a5:19:7f:80:ce:7c:4c:42:f5:36:0d:63:0c:
8a:a9:5e:4a:90:5a:95:aa:96:26:82:73:c4:69:bd:
f5:ed:ca:c4:3a:61:b9:16:bd:35:68:43:1e:8b:46:
a4:f8:5a:58:27:b0:ce:7d:07:1a:f9:88:9c:38:a1:
3d:8b:12:f0:93:c0:fb:df:43:94:0a:83:23:e8:c1:
72:f3:5f:64:41:1d:b4:82:a1:38:43:f2:de:7e:66:
78:5e:62:4c:10:2d:ef:f7:b3:b9:dd:91:d5:4a:55:
5d:52:3d:00:9a:94:69:4b:f4:91:8f:61:e5:51:2b:
94:0f:cd:31:3d:f2:d7:53:fe:72:04:7e:56:d6:64:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:01:72:AE:63:24:5E:80:5D:FA:D3:A0:5D:5A:81:71:B0:58:68
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:34:7b:be:22:f2:df:02:ee:a6:f3:7d:dd:a1:38:ef:b0:16:
e7:81:d5:44:a0:2e:94:9f:56:26:d0:f7:7e:36:38:9b:4d:b5:
9f:a1:78:91:30:f9:1a:ee:eb:24:ed:31:ac:0d:26:b5:09:c5:
4d:1e:31:3a:02:74:4f:94:ac:1c:56:c6:d6:2e:07:57:1e:29:
95:c4:b8:02:83:1c:a8:bc:7e:79:3d:e4:30:b5:9f:56:77:70:
c5:e2:d1:f6:d1:fe:6c:65:97:f5:b4:7b:f9:86:66:97:02:d7:
62:4c:9d:88:49:1b:84:d2:8f:f6:f3:92:8b:e4:e4:f6:7a:7c:
0c:88:eb:cb:56:ce:ad:f3:d2:ae:42:63:fa:b8:24:82:36:37:
10:7e:16:b9:d5:9c:86:e1:5d:7e:e6:d4:8a:a9:b6:db:54:67:
25:3b:54:67:0a:cc:ac:04:55:91:85:b6:6d:19:f7:cc:f7:59:
fa:5b:b2:cc:89:96:4a:cb:c5:04:f5:a1:e2:7d:fd:97:90:c1:
2e:08:31:06:e9:4d:c7:d6:c7:1e:62:1b:25:bd:e4:3f:21:63:
79:b7:32:e3:82:62:2f:25:05:70:d0:ff:e5:e4:59:75:30:75:
93:94:45:2f:a0:94:b4:0e:49:99:18:03:42:ef:34:e8:e2:0f:
cb:1f:36:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client