
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: 8Yd4LTFwTFAqfl4pUHHFY47htrgwUD4gBF2+3AQ2RlU=
Subject key identifier: 98:45:ED:55:57:A8:A9:FE:E1:1F:B1:91:DA:C5:8B:C1:01:F7:B3:1E
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019FA304CBFD80ED36953505E031AC705293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0C18
Signing time: Mon 27 Jul 2026 10:00:28 +0000
Manifest this update: Mon 27 Jul 2026 10:00:28 +0000
Manifest next update: Tue 28 Jul 2026 10:00:28 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: +NGMZxdOVPdUluCgFBgscQHRLf4CJ5h1bfkf+PCVeiU=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:cb:fd:80:ed:36:95:35:05:e0:31:ac:70:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jul 27 10:00:28 2026 GMT
Not After : Jul 28 10:00:28 2026 GMT
Subject: CN=9845ed5557a8a9fee11fb191dac58bc101f7b31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:95:0f:dd:32:b4:3e:8f:0a:70:2e:a2:9a:
d2:d7:cc:80:45:dc:bd:1f:f9:8e:03:2f:46:ed:51:
76:3b:72:26:f8:dc:29:c3:80:9a:a5:c0:52:60:7f:
0e:0f:58:ee:66:7e:f3:ec:c0:e0:df:7e:26:25:d2:
0d:dd:61:fa:ef:a9:c8:5b:21:89:d2:26:a9:ca:41:
60:e4:d2:c8:15:7f:0e:af:1b:cd:2e:af:59:a8:df:
7a:dc:25:a3:41:2f:e2:5b:18:8c:38:63:d6:2c:66:
06:9b:64:f9:54:00:1f:34:35:c1:c4:eb:36:b9:4f:
88:61:91:3e:15:1a:45:63:45:2b:45:bf:41:dc:8c:
09:66:df:42:99:74:37:43:da:aa:c3:e9:9b:7b:5b:
25:87:7e:88:89:fc:6a:5a:24:8b:48:33:e8:31:e7:
f9:de:6f:fd:72:e4:64:a6:c2:80:47:0a:02:1f:fd:
c0:33:97:d2:8d:16:2b:39:c2:d3:3b:17:6d:9e:91:
63:39:83:e6:f0:6f:46:1e:ee:df:f1:34:82:3b:32:
5c:05:b7:7e:14:2a:89:3a:95:35:88:c4:7d:6d:33:
f0:52:59:c9:4d:c5:1b:9d:31:d2:d1:4d:c8:f0:da:
00:1b:a1:e4:45:b0:5d:ad:70:37:c8:07:d1:6b:5b:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:ED:55:57:A8:A9:FE:E1:1F:B1:91:DA:C5:8B:C1:01:F7:B3:1E
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:df:8c:d4:72:88:b1:7f:7c:80:cc:65:ba:07:bb:73:f3:86:
15:d6:17:f1:2d:e1:e9:52:99:34:c7:f7:34:c3:3a:ff:72:ab:
a3:4f:1a:9c:88:83:1b:9c:af:69:ed:a5:a9:f4:24:29:4f:ba:
10:45:1b:e7:d5:5d:c3:66:fa:f8:1f:fd:c3:96:71:4c:c5:e7:
a9:ac:9d:2b:e6:fd:87:de:33:90:6e:f4:4f:da:ff:86:3e:94:
68:c7:84:ff:f2:be:e5:b7:7c:79:f3:a8:61:9d:71:ac:d0:14:
ea:7f:4b:04:26:59:f3:d2:d9:44:0e:0b:f4:50:91:5f:cb:58:
93:5d:58:15:50:b4:2e:5a:3b:2f:f4:cf:2c:ef:d6:05:98:ac:
7c:df:54:60:10:e0:df:08:42:59:c6:8c:dd:d9:88:9c:f9:c1:
22:c8:84:fe:7f:61:4d:2b:1d:8c:84:81:a7:b0:44:27:20:09:
03:94:88:42:59:9b:c2:bc:c8:e0:b0:2d:bc:6b:46:2e:fa:d2:
bf:58:b5:b1:47:04:2b:2d:2f:63:ae:6e:85:98:98:21:cf:c2:
d2:ed:c5:f0:5a:23:31:50:06:b2:15:23:71:d6:98:4f:52:2c:
29:4d:2c:f6:a7:74:74:bc:f6:11:0c:a3:01:94:9c:2e:43:a8:
06:9d:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:19:11 2026 by rpki-client