Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: P14VO2AHybmBPLCa6wCr0e47Gzvdl1bUSeeWbTAAb4U=
Subject key identifier: 6D:EB:52:8A:0B:BA:FF:68:CF:CE:D0:FA:29:F8:FC:D0:CF:B5:0A:67
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 019D39412BB482F90F41FDCF57CE2ABE0EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: UP1O1NTWxMHlVSl2CmCPAK5KoD/7MAPOKn/ll9n/ExM=)
2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2b:b4:82:f9:0f:41:fd:cf:57:ce:2a:be:0e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=6deb528a0bbaff68cfced0fa29f8fcd0cfb50a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:0c:4b:4c:e4:55:73:95:c0:45:bb:fb:3e:
0d:13:c8:e5:ca:1c:76:72:00:25:7e:27:58:a9:81:
f6:b1:9d:5b:f6:2a:e9:a1:7e:a1:e0:6b:ab:8f:7a:
57:2b:f6:8a:15:f6:3a:e8:e0:39:4f:21:d1:5a:97:
91:b5:91:cb:c8:f6:33:3e:85:de:5a:46:8b:1f:d4:
1d:a6:53:99:37:22:73:e8:f8:8f:b5:bf:77:01:81:
9f:bd:18:5d:e1:e2:f2:e4:23:4e:a0:45:22:a7:e9:
78:78:43:0e:99:4b:52:60:5a:00:25:6a:b7:08:6d:
f0:ca:02:5f:9c:4f:09:75:3c:dd:13:72:10:0c:1c:
f5:8c:ba:0c:03:f7:e4:c0:aa:b3:f3:ec:f7:a2:22:
75:ea:ab:dd:91:8e:6d:56:2c:13:ed:4b:7b:18:f5:
24:b9:5b:42:61:45:e1:35:84:66:4e:4d:c8:47:62:
ab:d0:51:bd:0a:78:63:57:0d:05:93:8c:ed:47:ca:
ce:04:30:42:c9:88:9f:c2:03:3c:5e:d1:f8:51:a8:
33:97:aa:ca:f1:d1:2e:5a:88:d1:f8:48:e3:3c:44:
4f:a1:fd:0f:87:35:0c:b3:7a:af:03:ca:0e:e1:28:
58:6a:fc:98:4d:ba:3e:8a:5a:6c:99:45:bf:1c:e2:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:52:8A:0B:BA:FF:68:CF:CE:D0:FA:29:F8:FC:D0:CF:B5:0A:67
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:fb:a5:c9:8e:05:63:46:bf:18:64:c2:27:e0:c8:12:28:
ca:17:74:ea:7f:e2:ab:3f:c9:f5:7c:29:c2:70:53:8d:6b:0c:
59:b8:f2:f8:78:24:2a:35:8c:e7:f7:8e:55:4c:d5:d8:c6:46:
ba:c0:82:3f:46:32:21:1b:1f:2e:d0:44:17:5b:a6:fa:cd:b0:
73:99:db:92:17:fc:8e:b5:a8:23:71:9a:51:fa:50:47:eb:8d:
81:03:ba:f9:46:2c:4a:32:38:ae:c0:93:17:95:09:83:7c:a3:
37:2d:0b:fb:16:d4:2d:9b:f0:a0:2b:21:fd:1e:97:7c:8e:31:
85:c9:07:38:7c:c7:a5:e8:bb:b2:5e:1a:c7:19:39:e9:cf:d2:
3a:3a:5c:86:d0:00:ee:6f:45:1d:f4:59:65:c6:d6:b8:cf:b5:
49:d0:f8:d9:18:02:3b:18:6a:56:6c:a9:32:79:9c:d2:22:c6:
99:1d:9e:29:8a:bd:6a:55:73:a6:b9:7a:81:e7:69:3d:7b:ee:
82:f2:58:ec:33:c1:7b:00:3d:62:2e:46:51:f8:63:6c:5f:1e:
35:24:87:ff:a2:04:9e:ed:73:18:68:ca:86:72:2d:03:c4:b7:
34:3e:1f:d2:5d:f8:ea:5e:66:e5:55:e3:8f:ef:a8:fc:c0:a5:
61:48:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:47 2026 by rpki-client