Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: +txYu6guZ14bll2xXFn3MiSD2qXFuYiVYG6OaNYfpeA=
Subject key identifier: 1C:C1:64:4D:C6:3E:86:7E:2B:B5:98:03:8E:6F:8D:9D:AA:C8:94:E5
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019D0B55939703CA42B75E87C8F014272895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 15A2
Signing time: Fri 20 Mar 2026 13:00:50 +0000
Manifest this update: Fri 20 Mar 2026 13:00:50 +0000
Manifest next update: Sat 21 Mar 2026 13:00:50 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: 12/yA2hs4S5vitjwwWtBLByEeV8PZfuSMB/IgqynxVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:55:93:97:03:ca:42:b7:5e:87:c8:f0:14:27:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Mar 20 13:00:50 2026 GMT
Not After : Mar 21 13:00:50 2026 GMT
Subject: CN=1cc1644dc63e867e2bb598038e6f8d9daac894e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:3e:c3:60:e1:0c:be:8b:0f:1e:41:39:63:
4a:c9:83:10:88:7b:19:bd:19:92:95:6c:ce:da:62:
f4:1f:cc:ac:df:71:0b:db:e0:75:06:7b:9b:14:a3:
23:d7:9e:f7:83:32:2f:37:8d:50:d7:e0:4f:e5:fe:
74:64:c0:40:02:d7:74:bd:6e:8f:b0:5b:b6:1d:a5:
81:01:25:75:3e:0d:f1:06:64:2b:e2:c5:fc:c7:fe:
8b:1f:7f:62:71:df:8a:9e:78:2b:ce:f0:be:62:a7:
37:f3:a3:64:91:ed:8d:8e:ff:21:dd:2f:af:6a:96:
0a:df:d8:a2:fc:1b:10:5b:18:3f:ea:84:1d:14:51:
84:27:9e:3d:a0:c6:c8:f0:38:7a:ff:3f:94:54:50:
a6:9e:fc:c8:60:d2:8e:b5:ca:ea:62:67:e9:c1:2a:
1f:12:99:11:e6:bf:ae:52:ed:3f:64:b2:f1:06:52:
c5:8b:4b:3a:27:4b:58:ac:ca:2d:0b:08:a7:42:2c:
c5:a1:68:37:b1:c6:a1:34:d2:a4:a9:4b:fb:c6:b6:
e6:ae:e0:71:08:b9:cf:91:32:a2:b3:34:53:ee:e3:
f6:75:7a:5c:0e:87:8e:02:6a:d2:fb:5c:56:7a:79:
64:0f:3b:48:d4:e8:13:2a:dd:d5:fa:54:cc:72:33:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C1:64:4D:C6:3E:86:7E:2B:B5:98:03:8E:6F:8D:9D:AA:C8:94:E5
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0c:db:72:93:7e:06:00:f1:91:f0:f2:86:e0:db:8d:c5:0e:
db:a5:d6:55:ed:72:3c:9c:f4:6d:af:27:f2:cc:26:35:44:94:
69:7f:2f:bc:51:ff:70:95:5a:92:ec:c7:13:21:23:49:c9:1b:
78:f0:4d:e1:53:08:89:7b:47:42:ec:2a:96:ba:11:1f:54:67:
b7:57:99:61:df:cd:52:3b:cf:83:18:ba:b7:8c:d4:a3:c5:d2:
a1:64:e8:00:5f:7e:4d:6a:5b:f0:82:c8:36:b7:b9:28:8a:c9:
e0:42:54:74:4b:45:9b:34:66:fe:e3:ab:a5:41:91:ef:0c:ac:
6f:cb:27:66:d5:05:e3:16:a4:eb:c5:f4:b6:3f:96:59:a3:e5:
29:d9:33:82:a1:b7:d9:3c:b9:83:4f:44:f2:fd:3f:88:1a:f5:
12:cd:4f:08:ab:61:90:7d:20:c0:0b:df:55:a5:e7:3e:75:14:
df:86:df:48:b3:43:d6:ce:7b:3e:e2:20:d0:8a:37:48:57:7a:
37:27:4c:84:a0:7c:6a:21:27:5b:2b:6a:67:cf:e8:14:86:57:
53:52:46:11:30:0c:96:b5:0a:ae:04:42:60:14:31:e2:52:70:
39:77:d5:3b:e9:07:4b:5b:86:73:ac:01:cb:66:f3:b7:51:97:
4f:f8:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:39:06 2026 by rpki-client