Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: R27ztAllzqUWGPjeDHPmJFwJIrLy5fPKt2Q6BJfIc/8=
Subject key identifier: B9:C3:2A:F4:A2:73:DA:4C:1F:22:48:35:6D:2E:AF:E7:1F:F0:2A:3A
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 019E30E08232DD9960C683B9E24105F6BECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 1097
Signing time: Sat 16 May 2026 13:01:20 +0000
Manifest this update: Sat 16 May 2026 13:01:20 +0000
Manifest next update: Sun 17 May 2026 13:01:20 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: TykNfC6n7XxNySebV0qEuzwi4hZEAVIRLHMKjq5OH0Y=)
2: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (hash: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ=)
3: agPmj-1yZOqdW-zJe9GpIqUN03w.roa (hash: ToCg4vQlYxypC6RWyLP+F3bLTdA7lp0Hnkzv9RyJf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:82:32:dd:99:60:c6:83:b9:e2:41:05:f6:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: May 16 13:01:20 2026 GMT
Not After : May 17 13:01:20 2026 GMT
Subject: CN=b9c32af4a273da4c1f2248356d2eafe71ff02a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:01:e6:da:79:71:51:7f:b0:28:30:45:04:
d3:3c:8d:50:31:8d:df:79:14:73:1b:4b:c8:29:d4:
6f:3f:f3:2d:fd:51:30:b0:eb:77:2c:08:e9:ae:7e:
76:5a:b1:d4:45:95:0b:89:00:c5:54:32:75:f0:0a:
cb:a7:a1:e6:88:be:c7:af:6f:ab:58:6b:09:37:de:
75:fc:7f:75:ee:5d:12:6d:b4:49:2c:34:6d:cc:a6:
64:35:43:f6:7d:d5:ea:29:c9:66:ee:96:1c:db:7a:
5b:3e:41:dd:47:8e:29:48:75:fc:67:bf:af:b2:ea:
66:6a:54:73:4d:e0:f4:0d:38:6b:f9:1b:0e:ff:8d:
9c:f1:20:36:9f:8a:b4:72:34:c9:8c:29:6d:88:c2:
2b:6c:0a:f6:48:27:f3:60:d3:e8:e9:f9:a8:af:9b:
6c:20:c7:bc:dc:83:6b:12:a7:45:6c:a6:28:de:e1:
57:a9:a0:9b:74:e4:42:69:e0:39:85:8f:4c:32:66:
1a:74:40:dc:32:76:27:45:7d:2d:8e:7b:b8:3f:14:
ac:30:35:e3:ce:8d:96:14:17:de:6a:14:0d:12:83:
91:6d:af:5a:1f:7c:30:3e:12:eb:33:19:ad:d2:15:
79:7f:65:38:ab:bc:28:ef:2d:2e:e2:f0:d7:3a:6d:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:2A:F4:A2:73:DA:4C:1F:22:48:35:6D:2E:AF:E7:1F:F0:2A:3A
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d5:04:08:2b:d4:f9:12:6c:5f:a4:83:bd:b3:c6:c6:b4:9e:
2a:bb:c4:82:44:75:15:6e:8b:97:50:c5:39:1b:2f:e4:64:9e:
91:66:60:eb:8e:9c:0f:ab:aa:31:43:57:d3:cf:a2:59:d8:dd:
28:5d:86:dc:43:13:7d:17:b9:34:dc:99:fc:44:ee:d9:d2:38:
3f:dd:f5:9c:83:1e:74:b0:b9:a3:cd:d6:d4:79:a7:42:93:db:
33:16:95:e6:65:13:0c:22:4a:44:8e:68:d9:f0:36:2f:00:e6:
d8:ff:42:37:56:c7:cd:c6:1b:d1:ee:f8:2b:0a:56:74:e2:80:
3e:e3:81:e9:26:e6:87:f6:01:7d:61:b7:da:35:5a:51:24:5e:
b3:3b:02:ae:5a:0c:31:92:59:34:59:ce:33:fc:26:4b:f5:73:
86:da:ca:e3:17:cd:b1:f9:00:bf:0d:8a:e9:b9:9a:cb:b9:78:
cf:bc:36:1a:3d:31:6b:d9:9b:5c:5d:f6:cd:e9:ac:81:ed:7b:
49:0b:3f:c5:20:61:83:c0:bf:7d:e1:4d:fd:1d:23:82:9a:8d:
0f:03:a8:f0:ea:9b:ba:24:7c:76:82:7d:5f:0b:a3:e9:c7:e4:
e1:2b:62:de:b6:e5:5c:83:07:ea:a9:da:8f:c2:c5:ec:da:4a:
10:b0:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:48 2026 by rpki-client