Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: p5BzSbur/+aAmP6f5m/ZQocZC90OBXvlicOL2KazQi8=
Subject key identifier: 46:87:04:BE:61:D1:DB:E6:AE:FE:1B:B8:63:19:52:53:66:95:50:2C
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019D2BBCDE3D873861B7A7BCB98458338436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0967
Signing time: Thu 26 Mar 2026 20:01:31 +0000
Manifest this update: Thu 26 Mar 2026 20:01:31 +0000
Manifest next update: Fri 27 Mar 2026 20:01:31 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: hGocV5VNL3pTQA1MyCe7Y+O5ANaCYRqq8c5rn9BEOHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:de:3d:87:38:61:b7:a7:bc:b9:84:58:33:84:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Mar 26 20:01:31 2026 GMT
Not After : Mar 27 20:01:31 2026 GMT
Subject: CN=468704be61d1dbe6aefe1bb8631952536695502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:80:fe:ad:77:a0:0d:95:7a:9b:b1:65:8d:
bc:b8:c9:ea:d2:e0:e1:46:f8:16:df:6a:a4:9b:8b:
36:c2:5f:47:cb:78:66:65:f6:83:32:bb:3a:c6:1b:
f9:91:51:50:d6:47:ef:38:c8:02:76:ae:84:17:15:
38:5e:e1:78:61:f7:ed:0d:94:cb:48:90:58:15:6c:
dd:92:1c:ef:fc:66:b3:36:37:73:38:ef:c8:8f:cf:
ff:4d:3e:c4:89:1a:24:cd:40:b6:af:e2:02:ff:61:
2a:40:81:c3:22:45:0f:d5:9c:f1:8b:13:e1:6e:ed:
ac:9c:93:f2:61:cd:da:ce:85:21:1b:e1:c3:d0:5c:
83:d0:7a:b4:80:60:71:35:fa:80:c9:87:eb:3b:32:
f5:db:00:c1:a5:d7:98:e2:2c:bd:ba:61:9c:4c:be:
fe:14:4b:8e:be:e2:08:06:d6:5e:dd:1c:65:12:fc:
14:d5:ab:c0:4d:d0:e6:b5:b7:7b:51:a4:34:b0:55:
3d:c2:cc:28:05:88:27:2d:2b:20:59:ac:d3:34:37:
c5:66:dc:2c:bb:db:42:d4:bf:33:74:8d:cd:85:8b:
b8:4d:a4:2e:7b:35:64:f4:c7:cc:6f:1c:4d:c0:98:
88:c5:33:4a:f8:39:dd:5b:c7:df:01:09:3a:8d:42:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:04:BE:61:D1:DB:E6:AE:FE:1B:B8:63:19:52:53:66:95:50:2C
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:85:3e:1b:20:80:91:b5:63:9d:cc:cb:2a:eb:29:be:31:bb:
a2:e8:7b:bd:9c:d2:6c:47:ee:ee:f0:af:a6:99:b9:62:d2:e4:
49:67:cb:0a:b2:99:7a:d2:d2:ba:a1:ce:b6:bb:6e:ad:8d:a5:
73:be:53:2d:6d:bc:79:07:e4:de:18:68:82:40:35:7c:90:86:
13:e5:9c:0e:3f:53:91:1b:14:b6:8e:43:81:19:9a:dd:b9:a7:
09:b3:7a:06:28:86:13:e7:cf:08:85:31:ab:62:de:9b:fe:4a:
bc:ed:4c:55:42:79:58:0a:29:08:a9:28:ac:83:71:32:66:b6:
7a:df:d2:3e:e9:0d:30:fa:38:be:4e:07:b9:e6:62:b7:cd:e3:
b5:9e:67:f0:03:cc:55:c7:5a:2a:c2:12:5a:82:f7:c3:ec:a9:
24:8e:f2:88:49:04:aa:60:68:79:64:1a:a6:e1:27:b9:52:c9:
7f:cf:36:98:f1:29:ae:f5:ff:fc:3d:68:46:7e:5d:9a:4a:fe:
b9:ce:5c:c7:58:5d:06:a7:43:63:9a:aa:2f:2a:f7:f7:16:6e:
0d:88:d7:c3:7a:d7:22:55:19:35:60:08:ac:34:9b:af:7c:c1:
0c:2f:54:e5:b5:a8:c7:43:76:86:ee:18:ed:29:0e:56:db:fa:
90:74:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:41 2026 by rpki-client