Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: DkuO2OUHQ2ox9NX1fZ7sEo6o3ssCiQMVYjLZaH1wesA=
Subject key identifier: DF:7E:08:6F:C3:38:E0:AF:7D:CF:ED:AD:48:25:81:60:CB:F9:E1:72
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019D371B9EA6E3B2F72293AFA89FCE315345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 01:00:50 +0000
Manifest this update: Sun 29 Mar 2026 01:00:50 +0000
Manifest next update: Mon 30 Mar 2026 01:00:50 +0000
Files and hashes: 1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: foM5OENsTzntKRa66lNl+jEC9lWMQnw8ovgKSuVYSGI=)
2: FXyAhkD-8Q5q4GQ3avZeolFCnH8.roa (hash: ZUZeRBd+6uQSjPBdIWYrxSWAHVlOiQl5Z7Q0BZoi1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9e:a6:e3:b2:f7:22:93:af:a8:9f:ce:31:53:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Mar 29 01:00:50 2026 GMT
Not After : Mar 30 01:00:50 2026 GMT
Subject: CN=df7e086fc338e0af7dcfedad48258160cbf9e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:95:12:e6:36:85:3b:1b:7e:52:58:1f:3d:
88:55:af:da:a5:24:db:f5:47:48:ca:cc:2e:70:34:
3a:fa:50:08:df:61:1f:bb:4a:c2:02:15:c0:bf:7c:
e6:de:e4:10:7d:1d:f8:a7:be:99:83:92:85:a2:f6:
87:1b:d6:ea:26:35:de:cc:f7:c6:23:b4:6c:79:e9:
a4:32:c5:ee:b5:b2:b2:87:6c:c4:5c:1f:0a:48:1a:
93:96:66:1b:b5:32:8c:ce:35:59:bf:ae:af:3b:17:
3b:4f:72:cf:8d:d0:81:4e:1d:2e:3b:61:82:27:fe:
d3:0d:18:04:3a:74:f5:51:12:a9:ce:05:3c:a1:89:
02:c3:a1:51:1f:8b:99:ca:dc:60:5a:e3:1f:c7:fc:
83:be:85:3f:0e:48:25:77:92:66:76:50:ed:aa:6c:
8b:53:64:7f:33:90:b4:18:ff:bd:e5:2e:36:8b:e6:
71:2d:24:c4:85:03:e1:49:c4:20:0b:e6:9b:76:36:
a6:49:cc:df:bc:e8:a7:ee:9a:d6:b7:6d:d8:70:06:
7c:9d:2c:ab:8f:6e:f0:23:00:20:8d:2f:7f:ba:55:
11:2e:b7:23:61:b0:96:14:96:c2:f4:30:19:24:98:
52:cc:dc:b6:7b:6f:f8:9d:1c:44:cb:95:a0:9c:ae:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7E:08:6F:C3:38:E0:AF:7D:CF:ED:AD:48:25:81:60:CB:F9:E1:72
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:97:d1:c3:0e:c2:cb:58:cc:4c:28:10:ea:15:80:7b:5f:3a:
80:22:b9:87:70:e9:fb:e2:48:2c:ab:14:37:80:cb:3f:ba:13:
93:64:6a:b9:f4:bc:05:91:aa:48:37:73:44:88:3f:e0:86:92:
dd:a9:2f:27:5a:f0:8b:2d:98:a2:85:b5:a2:86:2f:11:8a:21:
7b:c5:7a:e7:85:9e:89:87:dc:a7:fb:79:54:57:20:1c:8a:09:
d0:46:0b:10:d7:0e:08:b4:78:05:06:84:42:1c:7f:b2:be:29:
01:cc:45:b0:bf:25:5a:99:59:ef:f4:af:9c:62:6d:6e:f7:8e:
4a:99:76:b6:d5:10:20:c5:1f:cf:c9:d3:57:26:ab:b1:6e:a1:
dc:ea:05:31:37:7e:57:42:c6:65:e8:4b:7a:d7:90:3b:10:85:
be:ad:59:7c:30:a3:b4:a5:5f:05:37:f2:99:34:af:e2:a8:ca:
6b:04:45:07:f7:86:27:20:e3:98:38:36:2b:b7:e3:34:d2:a8:
73:9f:21:1a:21:f5:c5:be:0b:f0:3a:ba:63:3c:1d:2b:60:2b:
af:7e:45:eb:93:17:dd:4f:25:39:86:b8:0d:60:98:37:59:d7:
6a:ea:75:95:69:6c:68:e4:46:4e:fb:1d:35:db:22:09:83:f5:
08:76:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:50 2026 by rpki-client