Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: wUb5dKoUwl64f2k7h8s1+3NqH5C0ORUinnyEGw514Cc=
Subject key identifier: B6:32:2D:5B:C3:B9:B6:D3:39:39:DE:73:6C:27:B0:D2:87:35:B8:42
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 019D371B728A31863116B1E2B986AF1775CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0F70
Signing time: Sun 29 Mar 2026 01:00:38 +0000
Manifest this update: Sun 29 Mar 2026 01:00:38 +0000
Manifest next update: Mon 30 Mar 2026 01:00:38 +0000
Files and hashes: 1: IaeSkYat1pJQp7OhhzbXTpoQ0Bc.roa (hash: kULQgjnRtIN8FUzhGwvNrKQlXByrZkQ0qJzI1UvPnOM=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: rI7aFOokmuald0r0R1ikaflm/t00oNTG2hbtoTkhQ1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:72:8a:31:86:31:16:b1:e2:b9:86:af:17:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Mar 29 01:00:38 2026 GMT
Not After : Mar 30 01:00:38 2026 GMT
Subject: CN=b6322d5bc3b9b6d33939de736c27b0d28735b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:78:6d:3c:81:a7:8b:0d:e3:08:9e:36:bd:
6b:4a:3a:30:ce:54:19:f8:19:88:58:5a:6c:45:7d:
c7:02:3d:e7:89:6f:03:d7:75:d6:b1:49:71:bc:f9:
54:77:55:6e:6c:66:01:06:4b:5b:c8:ff:bd:1e:c2:
7a:d8:1c:a1:e4:9d:01:00:1e:ec:48:7a:9a:36:64:
2d:14:08:e0:fb:ab:78:74:bc:9c:08:8b:27:35:e5:
54:56:56:64:16:a3:24:b4:28:64:3e:64:61:a3:73:
49:c3:ad:09:47:06:ac:92:f1:2b:ce:1c:42:ce:07:
d5:99:78:aa:f6:56:6e:1c:0c:cb:84:0c:81:d2:50:
3d:de:a8:31:c5:32:c3:0f:80:e5:04:3b:e3:f2:fd:
e8:ca:b3:1b:7d:89:47:6d:e2:df:17:66:9b:5d:c5:
53:35:1c:fa:01:07:ba:85:2f:d2:69:82:fe:73:57:
f5:fb:57:1d:3b:51:96:b7:ba:72:f5:c4:df:a8:f2:
09:f2:09:3a:a9:64:49:28:c2:b1:25:29:97:21:09:
6d:79:1a:51:fb:3c:1e:b7:c6:95:11:27:dc:b0:5c:
37:f4:be:3b:29:2e:2b:dc:56:65:1d:09:33:84:26:
cd:ed:20:ff:30:90:1e:1d:0e:84:d1:88:b9:7c:2f:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:2D:5B:C3:B9:B6:D3:39:39:DE:73:6C:27:B0:D2:87:35:B8:42
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:b2:8a:47:9e:d8:2b:29:6b:47:f5:2a:a8:bb:8e:36:12:
bf:68:58:0a:5e:94:49:58:82:c9:d6:39:78:7d:55:5f:be:cb:
37:a0:56:98:21:cc:9f:a6:df:af:af:30:8b:eb:1e:f0:08:85:
33:87:4c:fd:f4:0d:01:5c:57:0c:d7:70:e6:03:aa:5a:3a:80:
23:ef:88:c9:86:eb:3f:85:2a:1d:32:90:ae:b3:33:c2:29:95:
3e:62:ca:1e:8a:33:f0:e2:a6:ff:0e:0f:8b:ae:15:e0:7f:35:
65:56:cd:9b:7d:2b:a8:26:6d:8c:4c:72:42:6e:f2:a3:aa:56:
ac:5d:8b:c1:08:9c:dd:a4:70:bd:0e:ff:05:9e:7a:23:66:b9:
89:66:cd:b8:59:d1:39:f3:61:e1:36:9a:f0:c6:f0:f4:98:ac:
65:42:d7:ab:b5:a6:c3:4a:e2:b2:6e:a9:fd:92:d6:41:5b:97:
34:6f:d6:34:70:d9:c0:85:80:1f:16:5f:53:92:7a:fb:bc:02:
78:22:4e:bd:16:34:23:ce:85:74:83:9a:d1:5c:dd:43:ca:96:
1b:2b:b1:e7:70:f7:a6:1b:83:f9:b7:65:92:d3:cf:b3:80:9b:
ec:3a:e8:23:d2:a1:ef:6d:0c:a0:9d:95:65:85:de:70:8d:71:
da:23:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:21 2026 by rpki-client