Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: H39KJZgDhgqOY4puX15kR0r8VCBo4OFtAWEsVy80j0U=
Subject key identifier: 0C:51:D4:9D:60:25:6A:93:5C:A8:D8:89:D6:1E:CB:D6:E8:EF:A8:F0
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019D284E5C2FFA5880BF30A934275DCCEF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 08F1
Signing time: Thu 26 Mar 2026 04:01:57 +0000
Manifest this update: Thu 26 Mar 2026 04:01:57 +0000
Manifest next update: Fri 27 Mar 2026 04:01:57 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: BsD8Wb15jv3/JlJf/dilFFobcu5mDTs+ZP5C/HAAJl0=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:5c:2f:fa:58:80:bf:30:a9:34:27:5d:cc:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Mar 26 04:01:57 2026 GMT
Not After : Mar 27 04:01:57 2026 GMT
Subject: CN=0c51d49d60256a935ca8d889d61ecbd6e8efa8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:b5:2c:f8:b9:01:c2:2b:2a:bf:f5:3f:8a:
8c:83:8a:ec:da:fc:78:b4:0b:89:62:e4:30:16:d7:
87:46:5f:65:fc:45:b6:44:09:ff:ff:15:ba:b8:ae:
12:cd:d8:7d:93:e5:46:9f:11:f3:3f:33:41:68:d4:
a8:22:c3:47:d6:3f:e5:78:12:cb:58:b2:ae:ac:12:
24:8c:76:7f:a0:68:75:83:1a:66:a6:e7:00:98:b2:
17:03:4a:03:d3:d5:21:ea:a2:ee:6d:5f:63:bb:e4:
15:99:e8:8f:80:ce:25:89:34:e5:f6:b1:7b:44:1a:
ce:e4:f5:a2:37:2d:96:03:57:7e:90:4b:0d:7e:5e:
54:93:91:e8:91:63:08:f3:c2:bf:50:02:69:70:36:
a2:2a:20:49:f2:c1:7e:93:6c:14:5b:cf:db:e5:64:
83:d3:46:38:e1:99:ee:19:fb:d6:47:d9:2b:93:54:
a4:49:24:a2:8a:db:2a:f4:24:75:0e:00:a9:25:9a:
07:fc:b4:a3:ef:88:bf:38:6b:7e:a9:83:d5:ef:54:
47:92:fb:ce:aa:a1:50:00:59:06:79:fc:f6:3c:10:
35:da:bb:de:08:26:02:c8:67:90:1f:67:b9:f1:dd:
27:ae:59:bd:a4:8b:90:30:8d:98:e3:46:0d:3b:ef:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:51:D4:9D:60:25:6A:93:5C:A8:D8:89:D6:1E:CB:D6:E8:EF:A8:F0
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:39:1e:c7:fe:4f:52:85:1e:a9:e9:71:ec:ae:24:9f:7f:
49:13:68:45:d3:80:e8:9b:fe:66:95:7d:ed:74:66:1a:0f:c4:
37:01:f0:c7:bf:ff:cb:32:03:f5:99:e2:e0:bb:d0:ba:1e:97:
7b:83:e5:ab:76:ca:ba:bc:ef:c7:33:92:44:31:0f:4d:7b:26:
7b:85:6b:6f:00:f0:30:34:e1:de:d8:a8:2f:33:76:31:1d:f8:
8a:5e:dc:75:db:27:f3:d6:72:13:f3:08:4e:9e:03:17:f2:38:
a8:2b:46:a1:a1:20:e1:6f:e2:0e:42:8a:38:00:c8:88:4c:3a:
a1:f3:aa:c9:da:32:96:38:2b:b3:52:86:78:e3:85:5c:69:90:
43:12:8d:7a:56:01:a9:b9:a6:8a:b0:51:98:8d:bc:ce:90:c8:
f1:ac:03:d9:27:42:f6:72:9f:59:72:96:3e:10:d8:47:be:fd:
93:34:08:50:81:ce:9b:cf:e9:91:00:03:08:15:f0:1f:53:26:
3b:64:29:51:11:ab:6d:0f:55:da:e1:97:44:29:4c:8a:6d:99:
b5:fe:a8:07:42:a3:53:30:68:20:a7:b8:13:21:0b:da:a8:bb:
8e:eb:ae:d4:e4:d2:bb:1d:0f:af:f0:37:92:3e:94:9e:7c:36:
0c:aa:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:55 2026 by rpki-client