Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: 5AdNw7K5w8Z55X/8s6ZtA6rkQF0cxxqlqCq1Xb+PC4w=
Subject key identifier: FB:54:5A:68:CD:82:B9:52:F9:34:12:33:B3:2F:17:CA:40:1E:8A:5E
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019E913844EFB236C6750BB18548B6C96033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0FE3
Signing time: Thu 04 Jun 2026 06:00:44 +0000
Manifest this update: Thu 04 Jun 2026 06:00:44 +0000
Manifest next update: Fri 05 Jun 2026 06:00:44 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: sJqefigIVlXUEZuCSwU21BdKwNLVUAtFpj9rGNE9i8c=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:44:ef:b2:36:c6:75:0b:b1:85:48:b6:c9:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jun 4 06:00:44 2026 GMT
Not After : Jun 5 06:00:44 2026 GMT
Subject: CN=fb545a68cd82b952f9341233b32f17ca401e8a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:8b:1b:a2:a4:7d:8c:f8:1f:27:46:35:b2:
07:06:66:48:29:ac:67:ce:21:34:9a:df:db:7b:3e:
ed:c0:75:b9:fa:f3:0b:f8:48:e0:80:75:9d:18:36:
2a:5b:bb:b3:a5:d1:2c:86:b0:e3:54:62:02:e1:9d:
43:c5:d4:cb:a1:cd:5b:bc:3c:b3:c7:23:53:93:75:
1a:fc:87:d6:f7:6e:be:7c:bf:b8:28:a1:20:03:3d:
61:e5:6a:b1:39:57:7c:25:2a:c4:81:7c:80:b2:ba:
33:09:e7:8d:17:e8:50:7c:9f:b8:d4:c0:5d:14:ff:
27:86:f9:4d:08:07:21:be:92:4a:5d:60:f5:49:a9:
b0:94:5b:9b:dd:34:ec:e9:33:5f:d2:30:ca:c7:ea:
5a:86:58:d0:77:ff:51:6e:9c:fd:a8:5b:34:7a:f3:
bd:eb:71:42:60:49:d0:cc:ff:72:ad:1a:43:7f:2e:
47:53:f0:95:3b:b6:9c:68:9d:5c:1c:d3:46:0e:21:
0d:86:2e:f4:9a:fe:45:04:1f:1a:37:0d:3a:1d:0b:
c1:d7:28:e5:06:28:43:3b:b1:6a:a4:fc:8f:5c:5d:
70:c8:91:c0:98:a8:70:3c:39:d3:0b:f4:4f:f0:80:
8f:ff:17:ff:29:55:db:63:85:68:64:ac:e0:d8:a0:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:54:5A:68:CD:82:B9:52:F9:34:12:33:B3:2F:17:CA:40:1E:8A:5E
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2d:b6:75:21:3d:36:bd:4d:84:f9:e9:05:59:2a:87:36:d2:
66:46:94:28:8c:16:e2:dc:a4:48:31:92:b0:37:98:2e:bb:26:
83:41:ea:f3:9c:82:65:e2:5a:a9:e1:29:59:83:1c:9e:15:e6:
31:c5:a2:de:38:34:7e:d9:ee:88:5e:76:d7:fa:f8:85:76:06:
a0:ec:83:71:36:b6:88:b4:2d:7e:75:94:06:22:97:43:df:d8:
d9:d6:fa:8a:3d:e3:aa:e2:8b:d7:1b:48:7b:8b:c0:55:b3:7b:
83:8c:02:8b:66:a9:f5:01:69:aa:c7:1b:04:e4:fc:cf:b5:db:
5f:61:00:fb:e8:d5:c1:53:fe:72:58:40:0c:d2:df:12:8f:30:
05:e9:af:d4:94:bd:10:52:bd:3f:10:b3:88:a6:0b:88:82:bf:
aa:c7:d0:8d:7d:b3:14:82:eb:1c:ef:dd:9d:93:bc:34:d8:0b:
94:7c:40:be:c5:06:51:18:49:75:e8:bd:d4:14:3c:db:b5:05:
0c:91:02:87:d8:f5:e8:df:ea:fa:94:95:25:77:04:ba:6a:d5:
ec:10:15:11:e9:ce:0d:ce:9f:47:06:04:05:2d:35:5f:64:99:
91:1e:f1:7f:02:10:26:91:1b:8e:b7:c9:6e:87:2e:a2:7f:91:
7e:a3:65:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6ROETvsjbGdQuxhUi2yWAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm
YzY4YjgwHhcNMjYwNjA0MDYwMDQ0WhcNMjYwNjA1MDYwMDQ0WjAzMTEwLwYDVQQD
EyhmYjU0NWE2OGNkODJiOTUyZjkzNDEyMzNiMzJmMTdjYTQwMWU4YTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3eLG6KkfYz4HydGNbIHBmZIKaxn
ziE0mt/bez7twHW5+vML+EjggHWdGDYqW7uzpdEshrDjVGIC4Z1DxdTLoc1bvDyz
xyNTk3Ua/IfW926+fL+4KKEgAz1h5WqxOVd8JSrEgXyAsrozCeeNF+hQfJ+41MBd
FP8nhvlNCAchvpJKXWD1SamwlFub3TTs6TNf0jDKx+pahljQd/9Rbpz9qFs0evO9
63FCYEnQzP9yrRpDfy5HU/CVO7acaJ1cHNNGDiENhi70mv5FBB8aNw06HQvB1yjl
BihDO7FqpPyPXF1wyJHAmKhwPDnTC/RP8ICP/xf/KVXbY4VoZKzg2KBq3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtUWmjNgrlS+TQSM7MvF8pAHopeMB8GA1UdIwQY
MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt
MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk
LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy22dSE9
Nr1NhPnpBVkqhzbSZkaUKIwW4tykSDGSsDeYLrsmg0Hq85yCZeJaqeEpWYMcnhXm
McWi3jg0ftnuiF521/r4hXYGoOyDcTa2iLQtfnWUBiKXQ9/Y2db6ij3jquKL1xtI
e4vAVbN7g4wCi2ap9QFpqscbBOT8z7XbX2EA++jVwVP+clhADNLfEo8wBemv1JS9
EFK9PxCziKYLiIK/qsfQjX2zFILrHO/dnZO8NNgLlHxAvsUGURhJdei91BQ827UF
DJECh9j16N/q+pSVJXcEumrV7BAVEenODc6fRwYEBS01X2SZkR7xfwIQJpEbjrfJ
bocuon+RfqNlKw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:56 2026 by rpki-client