
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: 7QFl3gn/vIA4uHtJ2ZRCBWybrFijnobKXwbjoQ4Xlto=
Subject key identifier: C4:80:4F:28:4F:50:CD:82:90:A9:BE:E4:7F:4F:9A:50:9E:AF:01:28
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019D08C2A2F6255DE182E26B4B40324810C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1877
Signing time: Fri 20 Mar 2026 01:01:06 +0000
Manifest this update: Fri 20 Mar 2026 01:01:06 +0000
Manifest next update: Sat 21 Mar 2026 01:01:06 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: tG+zMkt1Z3fpXAmGQMn6ldJXmKUT2qp9OlwWcj8469Q=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:a2:f6:25:5d:e1:82:e2:6b:4b:40:32:48:10:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Mar 20 01:01:06 2026 GMT
Not After : Mar 21 01:01:06 2026 GMT
Subject: CN=c4804f284f50cd8290a9bee47f4f9a509eaf0128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:94:2e:5d:c7:00:0a:44:ef:5d:18:0d:8d:
ef:2f:79:de:98:98:eb:25:0f:77:2c:63:fe:c3:98:
52:60:5f:80:bd:a5:da:37:80:3a:04:52:99:28:39:
c4:85:00:a3:9e:1b:e9:34:33:53:0a:4f:13:ae:3a:
93:7d:ec:13:4d:4b:97:83:c0:85:cc:82:77:09:6e:
5f:57:6a:8c:69:08:9f:9c:5b:cf:05:f8:fe:fc:74:
e2:ee:12:6a:87:05:b6:7f:fa:7b:66:03:1f:d5:85:
b6:05:29:0c:9f:4e:64:2a:f1:da:81:ff:7d:c5:0c:
03:4a:84:72:b3:cf:44:9e:74:b6:3b:90:15:a3:b3:
09:36:b8:5d:17:b8:46:ba:18:3f:38:65:9f:02:7a:
ed:47:8b:40:9a:7f:be:c0:30:11:37:2c:56:74:b8:
23:84:f0:43:7f:93:7e:30:f4:00:9d:c6:31:b9:4f:
b0:f4:ed:2a:75:0b:09:b5:98:6f:8a:6d:37:0d:db:
f3:48:b3:21:f1:ef:13:58:25:94:2e:fc:32:8c:18:
6a:0a:47:3a:54:fb:23:46:77:d3:b4:a7:d6:4a:0b:
8b:53:ed:7a:c4:75:c1:2a:05:e0:76:67:94:7e:0d:
0f:02:67:16:ed:af:67:02:79:fc:fc:07:49:fe:85:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:4F:28:4F:50:CD:82:90:A9:BE:E4:7F:4F:9A:50:9E:AF:01:28
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:a7:60:2a:a4:42:02:7c:63:ee:a6:d5:34:23:2a:19:ae:
fd:e9:57:36:c6:96:1a:d1:5a:46:2f:4d:13:af:a6:ea:c8:07:
9f:e0:74:a0:a3:d2:3a:bf:b7:e3:3f:34:3c:a1:32:92:bb:ce:
d1:f8:fa:ef:ba:c4:61:64:0b:72:25:1c:20:fd:9c:b7:7c:1e:
ab:32:78:86:8c:9a:45:b8:cd:c5:e4:3a:d1:fd:c8:14:24:a4:
b2:14:87:f5:c0:f3:9b:89:c3:6b:33:28:ac:cd:7e:3b:b0:4a:
f7:e1:5b:a6:f1:d6:e2:20:01:a1:5d:16:ce:4b:fd:84:a9:7d:
28:83:09:91:85:49:d2:32:16:45:42:91:bc:99:03:2a:7e:e2:
2e:4c:0c:36:65:c7:bd:8b:1c:21:4b:51:c2:c1:50:fa:40:72:
64:ae:33:6b:2b:c5:a8:a5:8f:e9:e3:71:3f:b9:72:7c:5a:db:
e9:be:49:8a:ab:4a:1a:08:bc:e4:d5:8b:27:10:db:63:32:df:
64:7d:44:d1:ff:15:e9:23:7b:f4:e7:24:59:c1:25:8c:2f:c3:
74:37:ba:60:2b:00:b4:8c:93:72:59:e9:90:4d:db:91:83:a7:
f5:68:f4:b4:44:fd:fc:d9:cb:b0:ba:e8:13:9e:ba:ac:f4:8e:
f5:51:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 06:45:42 2026 by rpki-client