Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: Eu55ags9RFRNb0KEmyyewIFXBipUhUe7M7/Non4xM2k=
Subject key identifier: 37:E3:1A:B1:1C:8E:8E:02:C7:A8:7D:7F:BB:38:C0:99:C4:B1:89:5E
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019D37C079FAA264EADC50EB22947EDF8D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:54 +0000
Manifest this update: Sun 29 Mar 2026 04:00:54 +0000
Manifest next update: Mon 30 Mar 2026 04:00:54 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: 649ku7Ec+WhvdlMS8439dz5Q6YNcdqZBr53hlGC9s+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:79:fa:a2:64:ea:dc:50:eb:22:94:7e:df:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Mar 29 04:00:54 2026 GMT
Not After : Mar 30 04:00:54 2026 GMT
Subject: CN=37e31ab11c8e8e02c7a87d7fbb38c099c4b1895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:8f:8e:58:9d:51:0a:ba:67:7e:00:e8:2e:
c5:36:f6:58:36:a3:3a:66:a1:04:98:8e:06:f3:07:
80:17:51:96:87:bb:f6:d4:f0:1f:ca:2b:2d:1f:e8:
73:32:8a:82:d2:1c:f1:78:ea:22:85:da:90:35:cf:
97:c4:0c:0e:d3:16:62:43:f0:08:9d:78:2f:d3:53:
b5:67:7c:f8:5b:0a:7e:e6:d6:e2:0a:a0:38:fa:34:
c5:a9:fd:8f:39:9d:ea:29:7b:f1:4c:77:8b:5d:66:
18:ff:94:5b:37:e9:e3:e7:14:6c:41:b1:87:e7:02:
41:27:31:98:39:2b:d1:3a:ec:50:fa:16:10:47:14:
18:a4:48:d2:13:9a:e1:43:36:b7:bb:7c:a3:23:1e:
36:93:fb:c7:dc:e5:10:2e:f8:3f:dd:e2:97:d3:fd:
ed:4a:00:7a:d8:79:c7:23:2c:f8:f8:c3:41:71:ce:
3a:6b:13:bf:8a:d4:77:56:20:a2:a6:c8:77:ba:8b:
10:42:f9:12:66:00:75:1b:78:2d:21:56:ed:e8:b2:
16:0d:0b:60:75:e4:d6:c6:de:da:52:97:04:d7:42:
61:a0:f4:3a:39:d7:7b:a6:a1:e4:61:8e:71:9f:7b:
d1:fe:1b:ab:a1:19:a9:3d:88:30:3f:b6:95:73:43:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E3:1A:B1:1C:8E:8E:02:C7:A8:7D:7F:BB:38:C0:99:C4:B1:89:5E
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:77:e2:c5:fc:39:a3:4c:8d:5f:f1:e7:a0:bc:a0:57:b4:96:
b2:fb:c0:13:78:48:8e:0d:49:db:0b:eb:57:49:7b:b7:b6:b9:
ec:e2:25:78:7b:cb:a9:4f:11:50:de:ef:d2:89:93:fd:48:1e:
8d:96:10:03:ee:57:f5:f7:50:68:e2:d6:01:4e:11:20:b8:2a:
2a:2c:be:ce:34:87:d0:bc:a9:87:61:a3:3c:79:c0:4e:ca:66:
7c:ae:f6:07:b6:21:b3:09:0b:0f:96:c9:5e:5c:e3:c3:31:46:
b0:ba:35:06:24:c5:1f:17:dc:b6:b5:0a:b4:e5:43:34:f6:3c:
26:d2:89:b5:22:1c:bb:71:b7:9a:5d:6e:dc:5d:2f:a0:09:ca:
f9:bd:af:52:50:6f:3e:b4:7c:0a:16:b1:d8:6e:24:d2:1a:5c:
f5:53:15:ea:f7:f1:04:47:87:76:22:a0:22:b6:9e:28:4f:38:
14:d5:af:0b:16:af:2a:47:f3:d5:51:07:2a:57:ee:f0:43:e5:
6f:ae:be:c9:3a:54:a9:5b:06:20:c7:59:d9:62:41:6e:40:7a:
e4:64:d4:24:6a:69:ab:2b:b1:fc:bb:06:f9:bf:25:27:1b:c5:
f4:1b:ae:13:72:ad:fc:b5:c2:61:24:0e:e9:ef:ae:ac:1b:71:
25:81:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:13 2026 by rpki-client