Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: EQNl5Hkz3SZxzpKGfZ+l4ISHJUF71SZuis/xhRjHTrI=
Subject key identifier: 2F:65:64:65:A4:9C:EC:8C:4E:85:93:F0:7A:9A:15:A5:31:60:E4:64
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019CBA024857F28340C4BEB2BEB6F4F7DCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0EEF
Signing time: Wed 04 Mar 2026 18:00:37 +0000
Manifest this update: Wed 04 Mar 2026 18:00:37 +0000
Manifest next update: Thu 05 Mar 2026 18:00:37 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: HnnzB5ZbsT2mVL4mViaklO7meVGdBIckkyemS7ZLuPI=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:02:48:57:f2:83:40:c4:be:b2:be:b6:f4:f7:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Mar 4 18:00:37 2026 GMT
Not After : Mar 5 18:00:37 2026 GMT
Subject: CN=2f656465a49cec8c4e8593f07a9a15a53160e464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:0e:91:f7:10:91:26:cd:0b:3e:98:2f:81:
0e:84:d3:37:99:fe:1f:40:c0:fc:bc:5b:34:1d:63:
50:24:96:5e:e3:27:7e:4d:da:1b:a7:90:7e:cb:2a:
4e:04:ad:dd:7f:47:42:f4:28:71:94:14:67:28:4c:
c4:ac:4c:05:ae:50:35:4b:33:32:52:56:e0:20:fa:
fc:f2:44:7a:ec:a7:30:16:44:8f:ac:e9:50:cf:02:
f5:60:49:e7:12:3b:7b:e1:47:f8:8f:eb:dc:06:ca:
a1:28:ba:e9:b9:96:c8:c9:f8:a6:56:c4:b6:a0:30:
62:fe:3a:a1:e2:ee:7e:05:3b:84:2b:e0:21:3b:0c:
71:c9:fa:95:6a:6e:09:30:f0:01:f7:69:36:11:c1:
0b:42:5f:98:b9:7a:59:e2:bd:37:ff:25:61:6d:81:
a1:22:27:70:cb:2a:90:96:bb:3c:48:84:98:fc:bf:
6b:80:c0:76:84:42:b6:f9:34:a5:2c:6f:b1:b8:f3:
42:99:f9:83:66:3e:cd:85:e6:58:c1:6d:c4:3b:cc:
d6:4b:37:43:8b:26:17:4d:cb:19:88:ef:0b:04:13:
b9:2c:b8:5d:62:fd:23:f0:df:0c:81:49:50:0c:81:
cf:72:80:24:a8:fe:56:9e:13:6e:5a:75:d0:46:bf:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:64:65:A4:9C:EC:8C:4E:85:93:F0:7A:9A:15:A5:31:60:E4:64
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b8:22:fb:db:c3:11:d5:b2:3f:a8:77:cd:f4:8f:54:4c:e5:
a3:10:bc:ee:a5:48:12:51:0f:9b:b0:be:b0:06:54:cc:80:7f:
74:7e:de:1e:3c:6e:47:a6:b8:ca:f9:55:51:cf:2d:87:42:e0:
bd:1e:1c:2d:81:92:db:85:09:60:d7:ca:55:85:21:65:3d:6c:
a3:c8:9a:1f:db:ee:6c:d9:9c:84:06:ee:4d:6b:2f:73:dc:d8:
66:78:1b:3d:c9:af:2f:66:fe:16:7c:c7:64:40:34:22:a1:8c:
94:f6:a1:f8:47:9a:72:9b:e7:ab:6e:43:1d:43:5f:8d:64:e4:
02:cd:93:e7:68:86:d0:69:be:cd:f5:6b:a2:ad:c4:73:75:84:
4a:4c:74:aa:8c:cd:e5:7e:bf:f5:89:c0:c0:9b:48:d9:de:be:
79:52:1e:37:7c:b2:62:da:19:5f:76:d4:a4:21:5b:d5:9f:5f:
3b:ba:dc:b2:d0:55:32:6e:af:bf:7c:c3:64:62:2e:99:dd:96:
6d:3a:bd:3d:0c:e8:75:7f:ae:ed:5a:cf:77:41:84:7f:b7:69:
85:68:11:0c:e8:c2:56:64:24:27:3a:49:c2:be:c6:1a:35:41:
ac:c8:67:3c:35:37:80:28:b5:42:78:be:76:7a:9e:ef:f4:50:
9b:a8:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:04 2026 by rpki-client