Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: Xju+qiHruvC6Ucj0bMND0Lqu6gtP0kB52jiSFV2PPXM=
Subject key identifier: 4D:82:C5:F2:94:F5:BB:57:F2:AE:EC:59:00:4D:80:85:23:D1:4A:A8
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019D37F704B484FDA66BF73B4B8BD0DC592F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 0513
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: W1tCsotgOSd2W83wbrMQ3l7MDlWwoe9em9oqPeXQvP8=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:04:b4:84:fd:a6:6b:f7:3b:4b:8b:d0:dc:59:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=4d82c5f294f5bb57f2aeec59004d808523d14aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:50:c7:01:24:76:86:cc:10:10:e9:85:3d:
1a:12:65:b1:79:20:32:40:ca:0d:41:6f:9f:f9:28:
29:89:9f:8f:13:2b:d0:99:12:c9:37:7c:f0:38:b0:
3f:c4:39:3e:9a:98:27:66:9f:2b:90:98:b5:f2:b5:
7b:22:75:53:71:07:c8:79:85:18:dd:f6:7d:b9:f2:
3a:fb:39:30:16:f2:b4:8a:75:24:18:24:ed:d5:fe:
32:ec:80:4e:06:77:2b:92:bf:e5:b2:3c:f4:1d:35:
0c:02:5e:99:4f:32:db:44:f4:06:fd:ea:da:27:c0:
84:56:7a:08:cd:9c:40:40:bf:cc:8c:43:f0:87:c1:
25:c1:38:af:3f:d1:e4:f4:b9:4e:dd:5c:36:9c:0e:
1c:93:d2:af:e1:95:46:af:3d:08:6c:da:4c:d6:f5:
bc:e6:40:79:11:47:0a:60:f0:85:7a:01:a7:be:14:
ca:66:01:0e:ee:82:40:17:76:d1:6a:71:d6:f6:75:
c2:ad:c3:f5:7d:3e:35:a0:12:f8:97:c5:6d:65:e8:
40:22:30:ac:2a:f3:c8:a9:cf:72:d2:33:92:b7:62:
77:61:fa:1f:38:bf:f9:da:3c:e2:0e:76:85:c9:e2:
b7:bb:ab:a2:d1:9c:b9:91:4d:7f:ab:d0:3e:d2:b1:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:C5:F2:94:F5:BB:57:F2:AE:EC:59:00:4D:80:85:23:D1:4A:A8
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3e:fd:eb:64:5d:76:1a:c9:76:4a:14:83:c6:c0:e5:d3:da:
3b:e8:6b:8d:15:ab:3f:f8:19:40:8b:de:61:cb:a7:20:4a:fa:
73:e5:4d:87:c3:7d:ad:4c:45:a5:22:5a:8a:5c:7a:e2:ad:f3:
18:a2:ec:97:35:27:e7:b8:32:7d:6d:db:6d:48:6f:5e:d8:d0:
52:70:de:4f:31:d3:ab:b3:2b:e6:2a:5d:3e:05:2d:0b:4c:c9:
96:5c:b6:42:73:a6:82:db:5a:24:16:11:c3:05:05:55:aa:da:
c0:ab:2f:bc:0e:11:94:c6:2f:da:a7:54:13:d0:d5:9a:47:ab:
ba:55:99:90:83:f9:94:a1:54:54:5e:2e:18:cb:dc:ab:ce:63:
e6:bb:21:27:16:ef:1e:f1:1c:f8:c3:13:df:67:12:7d:46:ac:
91:19:3c:22:ee:6f:9f:dc:6f:2c:77:de:31:13:73:1b:8f:b2:
44:f9:18:12:04:ea:66:14:e8:39:0e:18:43:31:8c:ab:f7:15:
67:40:e0:ac:90:67:14:59:4f:c8:4f:75:50:2a:60:d2:6a:50:
71:c9:29:03:7e:8c:2d:44:dc:eb:f4:84:95:59:83:07:7b:92:
e5:18:e6:e6:4c:10:00:94:1e:64:8a:8d:ae:23:43:40:a3:74:
12:7d:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:01 2026 by rpki-client