Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: p6hw1E789dx6SDXbG7MODR/FG9ZVOr28mleZ5JJ160A=
Subject key identifier: 5E:A5:64:18:11:5C:16:8F:0C:59:4D:D9:30:0F:6C:9F:88:61:05:66
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 019DCE994E1C460B148B9352EADFBFA6FE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 13EE
Signing time: Mon 27 Apr 2026 11:00:46 +0000
Manifest this update: Mon 27 Apr 2026 11:00:46 +0000
Manifest next update: Tue 28 Apr 2026 11:00:46 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: dz9lhwlQm4BGexAuOFtQ9wCtazXJKESf0iWi+ieVCsY=)
2: WxImH-LXs0d6zerX8rbJADEs0b4.roa (hash: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw=)
3: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (hash: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo=)
4: jEFjyAFrXDcV4VZRl6Fg4c-tBbI.roa (hash: SCNZ1jcp85B9JQOpcfN9KIw7MGVU7KDV6MeoqHXZssQ=)
5: x9MYFIf2PoZ4-7JYUxzgREaOECQ.roa (hash: pgslKdJlC5emb7XS7811wddrmA1E6OgVQZWwLKWbTac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:4e:1c:46:0b:14:8b:93:52:ea:df:bf:a6:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Apr 27 11:00:46 2026 GMT
Not After : Apr 28 11:00:46 2026 GMT
Subject: CN=5ea56418115c168f0c594dd9300f6c9f88610566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:fc:f4:18:9d:ec:54:16:60:7f:30:3a:62:
7f:d5:05:67:b2:9f:71:62:2c:ec:93:5f:34:ff:09:
c0:74:86:d3:f3:15:3f:22:b1:39:c1:98:06:8a:ec:
d4:7f:16:17:17:30:b8:01:9c:5c:3c:65:54:0d:ac:
bc:43:72:28:4a:5b:18:6f:fc:dc:3c:32:6a:04:db:
ff:68:fc:ea:60:de:3d:82:2e:57:af:3e:8c:b3:47:
d9:03:c1:3e:a9:38:cf:a1:81:f4:4a:41:69:08:0d:
78:f3:f0:9a:20:b2:2e:15:11:f9:aa:1d:95:16:53:
f4:65:53:c9:f7:f2:1c:98:a4:9a:2d:82:32:7c:c0:
6e:99:df:af:83:e8:02:7a:77:92:d6:1f:8c:d2:43:
51:76:b3:6b:77:d7:f7:a9:dc:a8:6c:2b:00:35:24:
ca:46:00:8c:24:da:98:61:2a:f3:15:85:bf:88:71:
82:b8:23:ca:65:51:dd:0d:45:97:89:ff:ad:0f:15:
4f:88:20:f1:b5:ca:09:c8:d1:cc:80:f6:c5:27:ac:
d7:d6:1c:ca:90:e8:f9:54:6d:83:62:9b:91:95:bf:
c1:b4:19:95:ef:82:1d:44:dc:d5:78:f5:22:c5:d3:
0f:49:ad:93:50:1a:d7:f9:08:21:0d:a9:64:b0:a8:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:64:18:11:5C:16:8F:0C:59:4D:D9:30:0F:6C:9F:88:61:05:66
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:77:47:19:82:05:73:84:2c:bf:e6:8b:50:c2:ec:53:20:43:
9d:df:ce:b5:d2:39:54:f0:fc:b5:ca:c6:dc:fa:56:25:f4:65:
12:b1:7c:7b:62:31:24:95:85:03:9d:9b:63:06:12:91:c7:a6:
d9:e4:46:1e:15:09:58:98:8e:59:9c:7e:9b:2c:5b:65:d3:d9:
4e:fb:8d:c0:98:c0:b8:e1:85:57:cb:36:88:6a:0b:86:83:a8:
44:a3:6d:ee:86:54:0b:05:3e:7c:cb:ad:7a:b0:27:fc:b9:0f:
e2:4e:4e:4b:63:85:06:7e:22:17:64:bc:e2:87:7c:4e:f7:e8:
a3:46:e6:37:c8:81:0b:35:3d:b3:cb:63:81:73:1c:00:40:eb:
94:a8:b2:72:ed:75:d1:2d:80:01:d9:00:49:67:88:8c:96:2a:
1f:e9:b9:02:74:c0:94:42:bd:e9:c8:ee:4d:22:75:d9:fd:ed:
8f:6f:21:9b:59:99:fe:1c:92:23:3e:cb:95:12:72:26:64:15:
b1:b6:2f:4e:35:81:b5:4c:c4:e8:8e:2c:40:63:ca:98:91:a5:
08:70:fa:88:34:6d:d8:45:a9:e2:1b:26:a2:96:7d:5d:97:43:
74:93:70:f1:6d:29:44:60:9d:46:74:d8:58:8f:d4:6a:43:6d:
3b:99:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:42:32 2026 by rpki-client