Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: gey5oCaiiac+/A4+iE8j/RI9i6joefCYrkg0FXv8jf4=
Subject key identifier: 9E:56:C7:BF:56:13:DF:C8:1C:FE:F8:05:36:9E:D4:01:C1:9E:58:08
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019D382E6492D0B638468587A4E1C7FC018B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: HUnqgpKAX6yIgr9hbkKIWPuEFAmwtDdvnDIiB2zY7C8=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:64:92:d0:b6:38:46:85:87:a4:e1:c7:fc:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=9e56c7bf5613dfc81cfef805369ed401c19e5808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:5e:33:62:53:2b:1d:52:0f:8e:2d:fe:2e:
ea:da:3d:b5:51:0f:7d:ac:0e:7d:48:78:7b:ce:5d:
1a:10:dd:22:8d:e5:49:eb:b6:ff:44:4f:de:31:44:
00:a7:89:db:c1:6a:16:c9:d1:89:4e:39:7d:18:d6:
05:c0:64:d3:f7:da:06:85:e2:a1:0f:ea:fd:26:80:
d0:ca:04:be:ff:05:76:07:df:ce:87:67:0f:09:6a:
1f:db:76:ff:b5:56:18:b9:86:08:93:48:4c:f0:eb:
15:9a:f5:72:5f:52:97:0d:3f:7d:c9:75:ec:16:bb:
4a:b7:bd:b4:e2:94:38:0c:34:98:85:b9:89:c3:ee:
70:d9:f0:58:cf:37:37:33:84:90:09:13:24:c3:67:
d6:83:89:19:8f:ca:d8:3a:8c:54:2a:c6:96:9a:44:
8a:79:1f:88:db:db:90:b5:e3:8c:28:0b:32:1b:9d:
a3:d8:81:da:f6:a9:b5:aa:1a:88:f4:51:90:f9:02:
59:0b:e9:52:62:fa:28:2e:f1:d2:3e:de:88:c2:8e:
cc:07:84:6f:25:fc:85:12:6a:da:ca:17:8c:e1:34:
d7:51:63:d6:bb:f4:68:e5:9b:ad:a7:bb:16:77:fc:
e4:fe:1c:34:4c:26:e5:55:c5:0b:fe:19:0a:54:b2:
fe:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:C7:BF:56:13:DF:C8:1C:FE:F8:05:36:9E:D4:01:C1:9E:58:08
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:87:59:7e:e2:b5:91:da:6f:ca:bf:79:0c:13:ef:1f:2a:
a3:65:26:2e:76:4e:ee:01:2e:ee:6a:e1:4e:2f:5b:f8:42:e9:
40:e4:1b:f2:de:97:a8:af:df:85:fd:17:9c:25:a4:b9:4e:6c:
6b:31:4d:63:ca:cb:b2:86:6e:bd:e8:78:cb:fb:a7:69:f0:b2:
ea:55:f9:10:cb:72:db:f9:51:91:c7:71:b8:c8:06:8c:0b:e7:
9d:ef:90:40:d4:70:32:4f:e2:5a:16:0a:49:33:5b:50:c5:e5:
82:0d:c2:8b:38:c6:a4:eb:b3:17:83:7a:cf:ba:60:55:99:45:
b7:23:68:56:25:6c:ad:af:7b:52:20:f7:14:f1:b5:84:8d:db:
e5:f3:13:ab:d6:8a:27:a4:81:0d:77:36:d6:8b:8d:59:22:c4:
d9:ef:ff:35:99:40:39:a7:58:9a:fc:4a:fb:d9:cb:b2:8a:d1:
3a:f2:f3:4d:cd:dc:dd:bc:19:a0:b9:01:ac:46:c6:21:b7:81:
42:4e:3a:a1:8d:69:6c:bd:52:d6:b2:3b:e9:e3:cc:67:e5:95:
28:c7:44:74:50:a0:b0:bf:fc:c7:4f:f1:bd:6b:35:eb:5f:7d:
7e:44:9f:97:f3:d2:9f:fb:1e:56:91:ce:ba:63:ec:54:3b:2a:
27:3e:6a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmSS0LY4RoWHpOHH/AGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjYwMzI5MDYwMDU3WhcNMjYwMzMwMDYwMDU3WjAzMTEwLwYDVQQD
Eyg5ZTU2YzdiZjU2MTNkZmM4MWNmZWY4MDUzNjllZDQwMWMxOWU1ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4VeM2JTKx1SD44t/i7q2j21UQ99
rA59SHh7zl0aEN0ijeVJ67b/RE/eMUQAp4nbwWoWydGJTjl9GNYFwGTT99oGheKh
D+r9JoDQygS+/wV2B9/Oh2cPCWof23b/tVYYuYYIk0hM8OsVmvVyX1KXDT99yXXs
FrtKt7204pQ4DDSYhbmJw+5w2fBYzzc3M4SQCRMkw2fWg4kZj8rYOoxUKsaWmkSK
eR+I29uQteOMKAsyG52j2IHa9qm1qhqI9FGQ+QJZC+lSYvooLvHSPt6Iwo7MB4Rv
JfyFEmrayheM4TTXUWPWu/Ro5Zutp7sWd/zk/hw0TCblVcUL/hkKVLL+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5Wx79WE9/IHP74BTae1AHBnlgIMB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSeHWX7i
tZHab8q/eQwT7x8qo2UmLnZO7gEu7mrhTi9b+ELpQOQb8t6XqK/fhf0XnCWkuU5s
azFNY8rLsoZuveh4y/unafCy6lX5EMty2/lRkcdxuMgGjAvnne+QQNRwMk/iWhYK
STNbUMXlgg3CizjGpOuzF4N6z7pgVZlFtyNoViVsra97UiD3FPG1hI3b5fMTq9aK
J6SBDXc21ouNWSLE2e//NZlAOadYmvxK+9nLsorROvLzTc3c3bwZoLkBrEbGIbeB
Qk46oY1pbL1S1rI76ePMZ+WVKMdEdFCgsL/8x0/xvWs16199fkSfl/PSn/seVpHO
umPsVDsqJz5qog==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client