Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft
File: a2NBovdF2amQDhaaHlGypxruOyQ.mft (raw, json)
Hash identifier: 6CuzIeJW2PjeRlSGh3mqXnqMHtTZVEBKKj+0Y+w/ZfU=
Subject key identifier: 8A:43:9F:1A:6F:14:DF:89:19:BF:52:32:30:AF:CE:D0:C6:70:78:63
Authority key identifier: 6B:63:41:A2:F7:45:D9:A9:90:0E:16:9A:1E:51:B2:A7:1A:EE:3B:24
Certificate issuer: /CN=6b6341a2f745d9a9900e169a1e51b2a71aee3b24
Certificate serial: 019D371BAB62EABD23AB6443330E88202D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2NBovdF2amQDhaaHlGypxruOyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft
Manifest number: 014A
Signing time: Sun 29 Mar 2026 01:00:53 +0000
Manifest this update: Sun 29 Mar 2026 01:00:53 +0000
Manifest next update: Mon 30 Mar 2026 01:00:53 +0000
Files and hashes: 1: a2NBovdF2amQDhaaHlGypxruOyQ.crl (hash: uSP0vrjqtbU/x5VYGL3Qi/+SOrt0uSEJqqdu6jyMnUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2NBovdF2amQDhaaHlGypxruOyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ab:62:ea:bd:23:ab:64:43:33:0e:88:20:2d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6341a2f745d9a9900e169a1e51b2a71aee3b24
Validity
Not Before: Mar 29 01:00:53 2026 GMT
Not After : Mar 30 01:00:53 2026 GMT
Subject: CN=8a439f1a6f14df8919bf523230afced0c6707863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:7e:f2:cc:ea:cd:ec:68:50:cf:07:3a:aa:
c9:6e:71:16:31:b8:07:6d:27:31:2f:2b:32:76:fd:
32:01:1a:04:78:30:be:17:f2:19:ac:16:2a:bf:aa:
a5:66:ac:01:4e:1c:95:b8:1e:92:7b:b4:3b:38:bf:
64:a5:17:ef:f3:f3:da:0c:8c:62:4e:56:9e:27:23:
f5:37:9b:25:88:c3:9e:71:bc:91:33:43:a0:aa:06:
5b:1b:40:4f:58:d9:5c:40:7b:ca:c6:57:9d:44:16:
d6:fb:19:bb:cd:c7:df:3d:1d:7e:f5:a3:a6:16:5c:
d6:a4:2f:49:3a:e4:44:2b:14:d9:e4:a6:61:a4:d4:
90:ea:b4:04:b6:50:4d:3a:0d:47:a8:7b:6f:1e:ce:
f4:f5:23:92:25:5d:6e:52:03:31:d3:77:43:01:c1:
33:a0:26:55:55:71:46:c9:c4:12:3c:ba:a8:fd:c9:
dc:94:6a:e0:66:93:8c:81:a1:d8:1c:81:63:fe:5e:
16:c7:f5:24:90:51:89:26:21:51:14:58:e1:55:c3:
8a:3b:73:76:8c:de:81:a5:fc:4f:e6:45:d8:f5:7a:
53:95:5a:3f:f5:2c:84:5a:e4:14:a1:10:db:af:e3:
48:68:c9:6e:d1:9c:b2:44:b5:18:21:88:03:e4:19:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:9F:1A:6F:14:DF:89:19:BF:52:32:30:AF:CE:D0:C6:70:78:63
X509v3 Authority Key Identifier:
keyid:6B:63:41:A2:F7:45:D9:A9:90:0E:16:9A:1E:51:B2:A7:1A:EE:3B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2NBovdF2amQDhaaHlGypxruOyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:27:cd:43:52:4f:a1:41:99:85:76:8f:9d:71:01:b3:18:
7e:9b:d6:46:a3:ff:0f:e0:7b:c4:66:46:44:a8:fd:b7:a4:f3:
35:49:6b:4e:6d:e5:f1:84:a4:38:bb:1c:81:b3:af:96:c0:3c:
84:f4:d7:06:0e:1e:2a:d8:62:b2:3c:40:14:bf:0a:ab:f6:62:
d0:12:1d:d1:8a:f4:0b:c2:df:c1:82:a3:5d:f0:be:1a:e0:3e:
af:2f:00:45:40:31:90:d7:cf:19:9d:17:1f:42:d2:96:41:d7:
bd:9c:d2:96:47:4d:6d:74:1f:10:5d:f3:bf:f2:b5:11:84:a1:
69:5f:78:2f:00:55:4e:76:39:8f:94:48:09:b0:0a:09:ea:7a:
10:71:08:97:fb:1a:ea:29:8b:4e:0a:5e:fb:8e:39:1b:54:2f:
27:8c:4c:b6:b5:df:59:c9:c6:7e:36:62:00:c9:e4:3d:c4:33:
3d:89:cc:7a:85:de:3e:3e:2f:f0:5a:32:62:45:5a:e5:1b:63:
10:1b:5a:4b:63:b0:88:a7:05:b5:aa:a2:2f:e2:b4:4b:9e:f0:
37:c8:e9:5a:56:87:d4:40:50:4f:f2:ea:8b:12:58:52:b7:de:
95:89:b1:7c:5e:ba:fe:f3:45:0d:1d:34:1f:b6:e7:54:ac:af:
ea:0d:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client