Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: fIHlF8RaZLCyEZGP4QX1i3j7kaurSrnSSpWrqYYBeAc=
Subject key identifier: 15:7F:EB:52:D3:D9:BA:47:39:E1:7E:18:EF:A9:E8:EF:81:61:92:21
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019E30DFF7CDBDDFA8517CBAC29AF827C3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 190E
Signing time: Sat 16 May 2026 13:00:44 +0000
Manifest this update: Sat 16 May 2026 13:00:44 +0000
Manifest next update: Sun 17 May 2026 13:00:44 +0000
Files and hashes: 1: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: LYBdPGCyNDTY+bbHp2Q9c4/aqLJMPFBV+ELWPq+GXnE=)
2: eG7fxABMtqyI5yUjBnhzemDqnwY.roa (hash: HFmCfi29zh6VfW2O1TlhihYlPxvODE9zNcg66Ls00yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:df:f7:cd:bd:df:a8:51:7c:ba:c2:9a:f8:27:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: May 16 13:00:44 2026 GMT
Not After : May 17 13:00:44 2026 GMT
Subject: CN=157feb52d3d9ba4739e17e18efa9e8ef81619221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:e8:2d:a4:08:dd:e6:34:a5:aa:89:2a:43:
0f:5e:cd:f3:d6:ad:d9:93:6c:20:b2:a4:fc:04:dd:
1a:7d:b1:c0:ad:c1:24:db:9a:39:61:1b:c1:eb:92:
bf:55:c7:74:c5:d2:93:04:7f:26:a7:d3:19:9d:82:
bc:43:f3:d4:2e:78:1e:ba:74:e6:44:32:a2:b7:c1:
e7:ea:bd:19:56:2d:6f:cd:f7:8e:32:06:e3:08:cc:
90:93:1d:75:ef:8b:c5:01:27:af:98:f2:a0:1a:6b:
8e:bd:b5:53:e9:78:93:44:f7:ab:b8:db:3b:01:5d:
55:05:09:b5:99:b7:fb:7a:48:e8:5c:23:f8:f7:80:
e4:4b:e1:f7:9e:44:63:2d:6f:a9:24:58:7d:d1:66:
03:7e:95:de:79:a9:9b:77:51:87:b0:50:5d:d3:52:
5d:cb:d3:23:6d:fa:c0:1a:d5:79:62:5f:55:1e:5a:
69:e0:c7:8b:d0:81:0b:e6:fa:b9:01:b6:b3:07:44:
93:1a:d5:40:f1:a8:88:4b:93:f9:a7:9b:fc:75:1b:
c8:2f:ad:15:25:94:5a:20:86:2c:2e:b5:c3:72:a3:
f6:cb:33:2e:ac:03:fe:38:7f:80:22:14:a5:7b:38:
72:75:f3:3b:45:70:ff:c0:5e:12:54:9e:61:b7:74:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:EB:52:D3:D9:BA:47:39:E1:7E:18:EF:A9:E8:EF:81:61:92:21
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:60:1d:c6:92:f0:f4:c1:73:55:2f:1b:e1:a8:0a:60:ca:27:
16:68:db:83:7c:b6:05:d7:29:65:e8:10:d2:e7:f1:a1:67:e9:
cb:76:55:fc:4f:e8:69:bd:98:80:67:0f:0c:a5:6f:77:c7:af:
23:7a:20:10:ca:03:8e:d8:45:1e:38:e4:da:b9:97:b7:5a:3a:
b1:10:e2:b1:1e:8a:22:45:00:61:b3:e5:76:01:2d:47:f1:fa:
ed:8d:38:8a:1b:b6:6a:85:3d:11:1b:a3:88:a3:b2:a8:7d:59:
87:e8:2a:7d:7a:09:ec:fb:26:21:80:72:52:cb:d7:5d:4a:ef:
8d:5a:39:5d:b3:13:d2:92:24:d9:81:f5:06:df:75:55:9a:27:
68:b9:36:1c:79:af:66:e5:69:aa:ac:8c:b9:de:c2:18:33:9f:
db:5d:b2:ed:6c:19:a1:19:1e:67:4d:a4:d2:fd:04:01:79:31:
9b:3c:b2:00:45:40:b6:bd:bf:f5:7b:b5:03:bd:75:0a:7a:e7:
d7:4d:e4:f7:07:08:05:d4:72:8c:97:c9:96:7b:e8:af:4c:32:
81:a5:dd:cb:5a:8e:5c:67:07:71:6f:8a:f0:c5:cb:7d:71:7b:
19:db:ba:16:0f:da:b7:78:a4:bf:22:3b:0a:ed:bd:e0:8b:a5:
2b:9d:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:28 2026 by rpki-client