Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: opvh02HgeriTDj/jQpmW/3sPpvcGbUF8CrMUFyzdsj0=
Subject key identifier: 53:CE:F1:BE:00:A9:45:A0:DD:80:A3:D0:5F:DB:13:0C:97:85:07:1C
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019D27A86F0B9D9C2CD45D93305C45F641DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 01:00:43 +0000
Manifest this update: Thu 26 Mar 2026 01:00:43 +0000
Manifest next update: Fri 27 Mar 2026 01:00:43 +0000
Files and hashes: 1: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: 0+zFYsjLmBOYq7bzRVV/Q1St5xv161GDfin8k2Y28DA=)
2: m0eeq8va8tOdR0d6vhTGR-m4r9c.roa (hash: IJmLN6gAClo8Re6n699DAImPd6vNHSacFHQGbqXGAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6f:0b:9d:9c:2c:d4:5d:93:30:5c:45:f6:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Mar 26 01:00:43 2026 GMT
Not After : Mar 27 01:00:43 2026 GMT
Subject: CN=53cef1be00a945a0dd80a3d05fdb130c9785071c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:02:32:eb:49:0e:26:b5:05:e0:77:a6:12:
57:89:d1:5c:6e:0d:ed:04:68:da:c8:af:67:a0:93:
2f:75:9f:4d:0c:cf:d2:b1:4b:69:a1:84:1e:83:84:
98:09:7f:5f:e3:08:19:2c:43:cb:04:be:f1:ee:5e:
e3:94:78:85:cc:96:51:2d:a5:1f:ec:0e:3f:51:6e:
ef:4b:89:fb:a2:6e:92:13:06:0e:45:8f:51:e4:60:
83:4d:19:1b:04:06:28:df:37:43:0e:98:8d:9a:a9:
7c:5f:d9:48:17:22:c7:67:c5:15:93:c0:7c:03:88:
f9:31:cf:36:ab:76:10:e4:d7:2b:93:3f:07:eb:a7:
9e:b7:a5:e5:1d:da:ec:a2:b5:43:4e:3b:b3:93:f2:
e0:f1:b7:73:75:f8:0f:7c:62:bc:e7:10:9f:9c:75:
11:cf:75:89:d1:ef:0b:6c:52:99:02:61:1b:b6:84:
16:9d:d6:52:56:69:95:36:2f:5b:70:3e:09:44:a5:
7e:7a:0e:b3:76:3e:db:03:f0:9b:cf:1c:eb:80:04:
1c:14:cd:4c:4d:3a:29:38:3c:b4:c7:b6:e6:b4:e4:
0a:9c:4a:a2:59:0f:ed:c3:9a:46:d9:56:a0:36:d2:
94:27:3c:6c:e2:d7:d0:ff:77:d9:76:f0:40:6d:d7:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:F1:BE:00:A9:45:A0:DD:80:A3:D0:5F:DB:13:0C:97:85:07:1C
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:96:0a:60:5f:83:cf:1a:d7:20:c0:4c:94:9e:04:0b:43:
7e:ee:dd:3b:45:c6:e3:18:cb:0b:1d:a0:82:a9:4d:06:2d:33:
af:e9:7a:91:48:bd:cf:88:66:55:4a:5d:83:ba:04:0f:52:ea:
0b:ca:f2:3d:84:10:b0:0f:10:17:ad:26:c8:51:d0:a2:01:5b:
07:46:09:b3:36:81:4b:8d:ff:50:72:a7:2f:04:31:d8:a7:c1:
73:64:c0:88:a8:69:23:90:e4:51:0e:c6:98:b8:fb:c1:28:f8:
09:86:90:63:ca:63:b1:72:29:0d:1f:cd:a5:bb:3f:98:6a:05:
f6:ae:07:4b:e3:7d:88:73:cb:22:7a:28:05:d2:be:a3:b8:51:
f0:6c:b7:7b:7c:8e:b0:f2:35:b5:f1:e8:e7:97:c0:02:99:b2:
20:1e:e0:83:74:16:fc:a9:80:23:11:64:db:be:4c:0e:f3:9b:
9d:c5:64:0a:1e:18:22:79:8b:7c:3e:a1:0f:5b:df:4a:56:93:
85:13:b6:07:b9:42:8f:35:b4:d0:c6:a1:69:ee:3b:b5:97:37:
18:5e:50:43:c6:6c:0b:6d:88:99:e6:0d:2c:cb:33:d1:d9:3c:
3e:f7:82:74:06:40:7c:58:82:33:94:77:b4:40:b6:d7:be:65:
97:f4:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:25 2026 by rpki-client