Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: w3KpCOAb1IFEgE11D/MmiNS7GI0MKdHZyhTX5ZiQn4Y=
Subject key identifier: F8:48:3B:95:D0:7F:1D:AE:9B:27:64:6A:59:4B:9B:BD:E4:2E:0C:1C
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019D37898DCD39DED187E3F96420DBDA2277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 15CA
Signing time: Sun 29 Mar 2026 03:00:54 +0000
Manifest this update: Sun 29 Mar 2026 03:00:54 +0000
Manifest next update: Mon 30 Mar 2026 03:00:54 +0000
Files and hashes: 1: 2RPY_DRtkYzxbp8ObFmZTuCpj7I.roa (hash: SWTV6VV0qDNDxzL8a/2qaSf2Dp7oqXVVz/XaDNhIJ2w=)
2: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: v7+D+6Rc0YsySdbhW0cJrdDDgY9VrDrXPxQ9o6zuuJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:8d:cd:39:de:d1:87:e3:f9:64:20:db:da:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Mar 29 03:00:54 2026 GMT
Not After : Mar 30 03:00:54 2026 GMT
Subject: CN=f8483b95d07f1dae9b27646a594b9bbde42e0c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:07:f6:d3:ea:5e:45:bb:2d:be:62:1e:1e:
4f:d2:d1:13:29:28:6e:84:e7:5b:f3:05:f8:d6:27:
0c:31:7d:a2:b4:83:54:88:05:e1:fb:5a:50:af:90:
ae:f5:46:9f:f5:e3:39:f8:f1:24:45:5d:6a:f8:9e:
af:58:92:24:b8:de:52:23:c6:71:71:ba:ba:90:c9:
b8:7c:31:2c:bf:33:68:46:f1:1a:e4:67:dd:ad:c9:
c0:0d:90:43:9f:be:4f:95:4f:14:6c:50:93:d1:fe:
8f:02:01:b0:a1:27:5f:65:fa:ac:31:57:bb:e2:9e:
9d:61:ac:61:0f:61:8b:e0:a9:f6:e1:27:41:87:ad:
24:74:5e:0d:6c:d7:a8:64:b5:ad:94:cd:98:a0:ca:
95:da:14:6f:5a:79:dd:38:4f:7a:7f:93:7f:81:52:
ec:d0:68:b3:5d:3c:b2:94:fd:f9:3f:39:6f:64:46:
a7:55:3d:43:2b:93:86:e1:fc:ac:e7:23:64:61:15:
93:a8:7a:db:89:d9:d4:2d:7a:3d:79:b6:bb:2f:30:
b8:ce:01:b4:36:58:79:93:33:49:d8:c5:b1:b8:68:
f0:1e:39:4d:7f:bf:38:7d:f9:6f:40:b5:95:ba:32:
86:ba:5c:28:af:a7:3f:d0:99:91:08:34:1c:97:32:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:3B:95:D0:7F:1D:AE:9B:27:64:6A:59:4B:9B:BD:E4:2E:0C:1C
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:7e:85:5c:28:d0:95:7d:0b:9e:7d:6d:40:45:c2:7c:c3:
bd:2a:79:d0:b4:0d:83:32:a8:9c:6a:0e:4f:8e:d8:96:b6:7a:
98:b1:63:0e:76:5b:ef:da:f1:4a:a5:47:dc:f1:4b:7b:7c:d3:
e9:cd:eb:a1:76:42:8c:01:fd:e6:e1:ff:d3:9e:52:2d:6f:50:
20:9a:e8:e7:a6:cb:dc:a6:5c:b7:ee:42:c6:e4:8f:03:d5:90:
8c:4e:d3:74:12:a4:4e:d4:52:19:68:a5:aa:05:16:a7:3b:d9:
68:ca:f6:90:82:cb:69:da:46:55:d7:91:98:e5:a1:d3:4a:7d:
4f:b1:da:8c:28:9c:1f:d9:9d:48:38:95:a3:e2:35:f4:ef:3b:
08:66:30:8e:21:06:d1:6b:98:31:27:f7:c7:63:e7:39:14:a8:
28:09:5e:d8:fe:4d:15:8c:1a:15:2c:32:07:c6:f5:7b:51:3a:
cd:6f:1d:28:99:8f:44:ef:5b:1e:fe:a0:61:6e:b5:de:74:fe:
20:b2:c3:e7:18:45:b0:96:ea:e4:b1:ce:04:c6:39:01:6f:33:
88:5e:d8:ea:41:30:50:03:cd:b6:40:97:f5:b7:28:e2:84:c2:
1d:97:5f:b0:3f:f1:29:8f:8e:60:04:8b:bd:1f:b9:d4:71:57:
3d:17:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:42 2026 by rpki-client