Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: S9bobtUnxY/ot92/2lCspBEFiHjVrDRESw8yLpz9WmA=
Subject key identifier: 42:21:2D:51:FE:8D:C4:AE:2B:69:15:16:D1:E6:B7:B4:87:E5:97:5A
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019CE5FEF90FCE8A92720F0D4733E641D174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0AAD
Signing time: Fri 13 Mar 2026 07:00:18 +0000
Manifest this update: Fri 13 Mar 2026 07:00:18 +0000
Manifest next update: Sat 14 Mar 2026 07:00:18 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: fZ7T28Z8+jjR6T6Flk6mCRMtC+uvXGPkPq+fRdYoLfA=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:f9:0f:ce:8a:92:72:0f:0d:47:33:e6:41:d1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Mar 13 07:00:18 2026 GMT
Not After : Mar 14 07:00:18 2026 GMT
Subject: CN=42212d51fe8dc4ae2b691516d1e6b7b487e5975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:ff:10:05:c1:ed:ea:b6:cb:ef:f9:d4:31:
f9:51:95:a2:42:46:c5:ea:ae:08:49:c9:93:cb:d3:
4c:7d:51:11:f4:b0:98:1a:a3:d4:d0:b7:6d:61:e8:
04:6b:54:60:92:8d:09:84:c0:bb:ca:be:03:3b:ff:
eb:b7:38:97:26:e8:ec:f4:40:cc:17:06:c8:4f:c4:
e1:ac:92:5d:12:73:2a:03:7a:48:a2:39:e4:11:9c:
c5:b4:db:8b:eb:57:62:fa:26:7a:43:6b:94:07:90:
0c:20:0a:49:94:16:f6:91:91:fd:35:32:19:cd:8a:
2b:ba:fc:3e:50:44:dd:e3:d4:22:82:bf:d0:4f:c9:
4e:53:cf:e2:fa:48:7c:73:7c:97:bf:34:ce:01:82:
0d:f4:be:f0:ff:ca:0d:fa:56:bf:0a:6c:ae:81:be:
d2:48:df:c0:b6:55:a1:8d:63:b8:87:23:5e:1e:28:
ab:66:3b:bd:40:f8:67:78:3e:f8:5e:01:da:9d:2e:
0d:0d:33:21:bf:36:d0:ef:09:f8:cf:23:b3:d9:db:
fb:35:58:40:2e:2f:39:6a:09:b6:c7:a1:a0:5a:75:
19:c1:74:94:91:fc:ce:2a:6d:f0:33:dc:a8:ba:34:
31:7c:31:b0:3a:43:25:94:3a:4d:d4:81:bd:0c:5b:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:21:2D:51:FE:8D:C4:AE:2B:69:15:16:D1:E6:B7:B4:87:E5:97:5A
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bb:76:8f:d6:ad:91:d3:53:81:bc:2d:8f:cf:23:b5:f1:5f:
9b:0b:a0:11:f1:6c:8b:78:6b:1b:85:88:8b:c3:02:b5:99:db:
c5:bc:2b:43:b9:a9:b7:72:98:72:e0:10:84:f8:5e:6f:14:53:
67:7a:cf:07:b0:7b:0e:19:52:1b:e3:3c:db:42:0d:76:87:b0:
ee:69:23:94:d9:80:ed:31:1e:3f:68:4e:d4:49:8b:22:2a:9d:
67:ba:16:d2:d9:35:f3:e8:4e:9f:48:66:31:cb:2d:aa:0b:fb:
23:be:9d:b4:50:18:a6:33:1f:53:71:ac:22:f4:74:f3:7e:e6:
a5:7d:3b:62:85:87:5e:f2:a3:e4:71:c4:5e:3a:6c:cb:12:f2:
56:0e:a0:aa:bd:7c:73:19:b4:36:6a:60:a7:fc:0c:24:c7:4d:
d6:9d:72:81:ff:11:82:56:32:93:25:89:8b:d4:ce:fb:38:ce:
7f:34:45:48:d7:8f:e7:ba:48:48:24:f6:f0:37:78:4e:0b:52:
36:25:62:ff:35:1d:25:83:c0:9d:22:c8:77:b4:47:25:84:a5:
a0:cf:66:0d:c1:e5:0c:a2:d9:6e:4b:9c:0b:32:60:c0:69:c7:
51:e4:df:7d:a9:79:e8:c0:df:20:9c:3c:47:f3:01:d5:72:7b:
cb:a9:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:44 2026 by rpki-client