Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: 6ZNv0I2BEIT+H3/YxObHLRz7+A7E92+6uYa9i3NVF3Q=
Subject key identifier: 57:42:41:D0:6C:5B:8D:D8:24:BA:6C:41:E0:DE:5D:53:52:A0:A6:C3
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 01A0CE2345397EBF25C9EE2F07E77D7B908E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0A16
Signing time: Wed 23 Sep 2026 12:00:12 +0000
Manifest this update: Wed 23 Sep 2026 12:00:12 +0000
Manifest next update: Thu 24 Sep 2026 12:00:12 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: ExRndC8jFjJENdCcN2BXMknIaRpIdanQG+8x/ReupEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:45:39:7e:bf:25:c9:ee:2f:07:e7:7d:7b:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Sep 23 12:00:12 2026 GMT
Not After : Sep 24 12:00:12 2026 GMT
Subject: CN=574241d06c5b8dd824ba6c41e0de5d5352a0a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:25:a3:64:8f:25:0a:22:f7:c7:21:ab:3c:
ae:92:48:fb:b2:a9:1c:7a:0b:a3:cf:51:78:7b:b5:
f1:13:ea:54:95:a3:6b:53:b2:ea:f1:02:4d:4e:9d:
f4:f5:a0:31:58:8e:0c:e0:77:42:b8:5a:8f:5d:a7:
f0:ef:78:fc:fd:cb:98:31:ee:eb:44:3c:0b:82:1f:
66:a4:a7:3a:9e:b1:5c:86:ed:18:15:68:d6:29:f8:
0d:a2:ec:2a:3a:5b:18:8b:aa:a7:ba:83:c4:b2:83:
9f:95:a1:81:b2:ea:17:16:d3:00:63:ff:0a:e7:53:
9d:2d:69:8c:6f:ba:74:c2:4a:24:46:12:9c:56:da:
92:63:36:9b:50:5f:6b:d8:18:5d:b4:0b:03:fd:1a:
59:bf:54:1a:9a:84:2b:12:c9:54:9f:cc:94:a3:c5:
39:00:19:da:eb:d7:bc:da:c4:08:b2:f7:36:5e:5a:
f6:2b:db:1d:dd:a6:5c:fe:93:7e:85:ed:25:a8:0d:
3f:69:81:de:9b:c2:eb:25:4a:93:05:3f:6f:cd:16:
f3:c7:fe:b7:d0:09:b6:a6:3a:9f:a0:ad:86:16:83:
df:b9:c2:cb:f9:7e:63:87:a7:f2:9b:09:6e:b6:9f:
34:ec:4e:94:ad:b3:90:b0:83:fe:6e:0b:35:b4:8c:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:41:D0:6C:5B:8D:D8:24:BA:6C:41:E0:DE:5D:53:52:A0:A6:C3
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:d0:2d:15:6b:09:19:67:73:06:97:3f:10:62:5e:d6:73:
43:85:d9:dc:a7:b7:13:29:e0:e1:0a:b3:9c:1e:9a:e2:d2:d7:
66:37:78:50:aa:de:1c:85:42:28:d5:1c:0b:6a:83:20:a4:ff:
e4:8e:c9:13:6d:5f:d5:56:0a:6c:d9:31:47:15:0a:aa:56:5b:
7e:38:df:0a:46:49:bc:64:46:9b:0f:be:f3:3c:ba:30:1e:62:
3e:37:ba:44:b2:a6:ea:8b:fe:84:b1:93:97:8b:1a:54:c3:57:
8e:12:a3:f2:1d:5c:f3:9d:b9:6f:c8:c5:e7:45:0b:84:1e:7a:
b7:db:30:77:24:99:0a:46:51:27:e9:f3:ec:33:71:4d:d7:93:
3c:10:9f:fb:93:b6:36:40:25:58:a2:b3:b3:11:5f:bf:75:fb:
60:15:1b:5a:03:71:da:31:79:42:27:03:0a:05:37:2d:20:23:
4a:67:c0:a2:ba:88:5e:16:f8:41:d9:b9:1a:79:ff:fa:bd:3b:
92:36:55:28:ff:6b:dd:7f:ad:80:b9:c1:06:df:f7:d0:35:4c:
6a:25:17:f2:90:7a:a9:89:6d:11:19:79:37:44:48:d9:b5:ad:
8e:66:29:c4:22:2e:68:5b:6b:5a:eb:ce:88:b0:b4:27:b4:73:
35:3b:cd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:19:20 2026 by rpki-client