Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: JnmvtMwXMBFPmBjlRAD6w5RkM3IQbBQBdTiRYAqflgU=
Subject key identifier: CD:A4:B3:FC:5F:A6:F3:6B:CD:7F:81:0D:8A:7E:49:78:2E:CF:BB:0D
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019D389C4E344822928E2ECC0F845EBE7E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 0576
Signing time: Sun 29 Mar 2026 08:01:00 +0000
Manifest this update: Sun 29 Mar 2026 08:01:00 +0000
Manifest next update: Mon 30 Mar 2026 08:01:00 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: CNGAwluInYp9bj1JxcpKp1+sml+qN8qY6PP4cXxuWu0=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4e:34:48:22:92:8e:2e:cc:0f:84:5e:be:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Mar 29 08:01:00 2026 GMT
Not After : Mar 30 08:01:00 2026 GMT
Subject: CN=cda4b3fc5fa6f36bcd7f810d8a7e49782ecfbb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:71:ca:a0:42:51:e4:e3:f3:df:5b:ee:ae:
32:1b:d1:4b:19:46:1d:94:9e:d6:33:e9:e4:be:d8:
4f:62:0d:20:ec:db:5f:f8:88:a1:c2:c3:59:22:5e:
d8:a8:ef:17:f2:41:33:1a:64:30:2f:32:ef:ce:58:
8f:da:3e:a1:f0:58:fd:4d:b0:93:f3:0c:da:e2:15:
8e:86:ae:f5:78:f3:1a:c8:ff:87:ce:b2:6c:e7:17:
5c:d5:f9:27:69:fa:d6:60:d2:51:0f:38:e1:7a:d7:
e2:a6:cb:93:b4:62:c9:52:c9:c1:98:ae:15:77:39:
0a:f5:7a:a9:31:cf:6f:1b:87:13:b5:fd:bc:c0:b7:
78:03:58:de:86:9e:ca:ab:0a:87:5c:d5:f6:9c:50:
ad:16:0c:73:b9:b0:31:ce:03:7b:3a:7b:47:ed:c9:
dc:bb:5b:dc:6e:b3:ca:88:7b:ea:7c:03:78:79:66:
36:14:1f:29:1b:7f:b7:17:a5:8a:b7:bd:2f:5e:af:
70:63:53:2e:b3:27:64:3e:9d:79:b2:e9:1e:70:5c:
18:38:ba:32:d7:e0:d0:00:16:dd:f0:9b:62:f1:d2:
49:c4:65:62:83:d9:99:2e:32:83:0a:41:ff:00:d4:
7b:ac:f8:8e:c3:e8:18:64:b6:a9:8c:9d:3f:26:2d:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:B3:FC:5F:A6:F3:6B:CD:7F:81:0D:8A:7E:49:78:2E:CF:BB:0D
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:da:31:b2:2a:38:af:20:a9:e4:75:16:f8:7d:ad:62:f7:47:
9e:d3:d0:69:ad:5e:cb:b4:13:7e:cc:aa:eb:93:11:a5:f8:fd:
44:09:1a:1f:35:07:08:e3:ac:d3:74:4e:ac:c0:e1:1c:cd:1f:
cb:c1:12:f9:ef:d2:14:0e:d8:5a:a9:eb:06:15:c0:ef:4c:83:
b4:0b:05:87:a0:e0:82:6e:22:e5:55:42:d6:ac:c6:b7:6e:f5:
6c:df:61:65:c3:85:41:95:bc:83:61:c4:2f:8a:e9:3b:8a:6f:
3c:01:01:73:0e:ae:56:17:02:b0:59:63:01:94:38:3c:3f:fc:
d6:8f:d8:6d:62:0e:b6:e9:75:4a:3e:ea:2b:5f:80:c8:79:86:
8c:4b:eb:f1:15:da:a4:4a:0d:c7:55:60:d3:81:ed:77:1b:19:
26:01:d8:a1:74:a5:5b:43:68:25:9d:72:8f:89:0e:fc:23:35:
a9:b1:ed:cc:f7:c1:21:49:34:93:18:e8:c5:9d:82:66:37:0f:
82:4c:97:47:70:2b:9a:0f:80:ed:8e:d2:f1:be:de:57:52:5d:
22:bd:a1:29:4d:fd:44:9a:85:e4:01:b8:15:63:26:02:d9:95:
01:4d:99:a5:f1:60:f9:3a:82:12:b7:0d:c7:b6:4a:56:6c:16:
68:d3:30:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:26 2026 by rpki-client