Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: 0r7pKwMPCP16Clrim28bKPU5GEznFEkArdQByaKF81w=
Subject key identifier: 8E:D4:E6:FA:29:D7:53:36:AA:ED:51:21:8C:4C:A4:19:FC:A2:08:C6
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019D27A91B0040F5E813E87C1474620E60B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:27 +0000
Manifest this update: Thu 26 Mar 2026 01:01:27 +0000
Manifest next update: Fri 27 Mar 2026 01:01:27 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: OH7QhjGGyoKV2rz7NA4gahUNZB20+OIoBQ/g/Ntp3dg=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1b:00:40:f5:e8:13:e8:7c:14:74:62:0e:60:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Mar 26 01:01:27 2026 GMT
Not After : Mar 27 01:01:27 2026 GMT
Subject: CN=8ed4e6fa29d75336aaed51218c4ca419fca208c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:50:91:e7:13:f9:f7:8f:04:19:85:e2:45:
c6:ab:8f:80:09:97:dd:8d:46:3b:7f:2f:10:51:d2:
61:09:ee:ef:95:b1:0a:eb:38:74:b7:80:65:9b:98:
0d:ae:e3:84:8f:13:ad:b8:b6:d2:7c:ba:b7:4f:bb:
da:78:82:ae:e4:01:65:73:00:d1:43:cc:64:b9:6c:
3e:1f:6e:3e:87:c4:55:d4:5b:68:1a:af:97:4f:fc:
35:4e:a8:6e:42:cd:1a:8e:ea:af:d8:8a:ea:05:10:
a5:f8:c0:31:db:c7:9d:0e:c0:c5:c4:d9:93:6a:22:
e9:74:57:fe:af:4c:c5:d8:da:81:e1:21:c3:a4:7f:
df:80:5a:68:e9:1c:ba:4b:57:3d:84:e9:08:c2:a2:
b6:e7:33:0d:7c:c8:18:1c:65:ee:01:5c:de:30:e0:
22:92:92:9e:27:8b:32:ae:5f:b0:33:94:76:b6:88:
13:b3:9a:ea:9e:fd:a8:8d:77:f7:48:ff:10:bc:8c:
ef:99:4a:ed:28:71:20:91:c8:bc:69:86:a2:ff:8d:
d0:8d:46:ea:ff:f0:b4:b1:e6:3f:2e:34:75:03:55:
0c:d8:dd:54:94:70:ce:ea:f6:f1:f6:e5:64:44:b4:
b2:72:0c:db:60:20:aa:53:c0:14:d0:2c:3f:e5:25:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:E6:FA:29:D7:53:36:AA:ED:51:21:8C:4C:A4:19:FC:A2:08:C6
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a8:bb:97:d0:fd:bd:a4:89:4e:2f:9c:7b:23:ff:3b:ae:09:
4a:4b:8d:47:a7:08:b4:e8:d4:b2:6d:ec:a9:66:92:23:1a:07:
81:32:a4:35:78:e8:bf:a4:a0:65:d3:e0:db:7f:d6:41:8c:ad:
6e:24:63:2a:14:b7:9b:9f:c4:e4:bb:a3:a5:e6:fa:6f:a8:26:
0f:53:17:ad:6c:24:71:23:dc:bd:9a:03:90:2d:6b:03:ca:32:
aa:35:a2:6d:da:51:83:e3:d9:5c:f0:3e:17:66:d9:3d:0c:70:
11:4e:17:46:ee:b3:7e:f9:cc:42:53:1f:9f:b5:ce:6e:07:7c:
cd:0d:36:ea:9b:6d:2c:b2:a5:ca:0f:8a:96:13:51:ff:a8:53:
c9:47:b5:cf:da:c3:7d:b4:0a:d7:e5:a2:e7:36:c3:5c:82:3f:
6c:66:d7:d4:28:ae:bc:47:82:b1:be:a0:13:a3:3b:59:2d:eb:
5d:a9:ab:b2:a7:4a:96:7f:a9:4b:e7:f0:02:ad:f1:e5:05:04:
56:e8:61:0e:59:1f:28:18:44:c8:77:ba:29:e0:b3:c9:a8:ff:
1e:5a:6b:48:73:5f:8c:fc:a0:0b:6b:f6:bc:9e:0c:26:02:03:
fa:a7:4b:23:fa:79:92:94:91:a4:a6:56:52:c0:d0:3e:07:cb:
d8:cf:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:30 2026 by rpki-client