Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: mGumsfoMAJdvKUmMXnL+JuVYUFddyZqaMBqnhnEIyow=
Subject key identifier: FC:93:E2:E5:0F:AB:63:43:DA:90:1D:0E:BF:0B:34:B9:21:83:3F:EF
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019E1D22344EDA07D0EBE9697D210FC01939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 09E4
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: wMHngl6qQGxQMZJIPRS+vMS0tN2isCl0/P6t5VUDVbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:34:4e:da:07:d0:eb:e9:69:7d:21:0f:c0:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=fc93e2e50fab6343da901d0ebf0b34b921833fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:41:81:93:45:c5:1b:cf:89:38:61:0f:c1:
24:45:0d:06:a8:92:a5:96:7c:19:0b:60:3e:57:26:
94:1e:63:12:7d:ab:ef:36:c2:dd:46:bf:b4:92:e7:
f0:e4:84:36:c7:58:32:ea:e7:23:97:ee:d1:80:56:
a5:f9:e2:1e:5f:ec:4d:8e:86:75:55:c1:50:6c:c1:
88:76:c9:07:59:d9:f4:ad:07:6a:26:4e:88:c3:af:
fb:f3:eb:9e:5a:ea:2f:f6:f7:90:ac:a1:78:f8:d5:
e6:5a:c8:72:c2:47:d1:80:c7:7b:89:a3:52:27:46:
ec:89:66:d0:cf:24:0f:a4:3c:bd:97:b1:72:ca:43:
36:94:23:32:89:a9:e7:88:f4:a6:d0:2b:79:81:16:
03:36:3b:b0:79:9a:ea:1b:c6:8c:3d:1d:fa:1e:43:
d5:68:33:f7:a5:8f:15:e5:89:91:f4:09:c0:3e:53:
1e:13:d4:67:80:4f:9b:c1:1e:01:1f:71:30:e1:bf:
d9:e0:81:6d:b2:0d:fc:20:65:43:64:81:cd:b5:d7:
1a:27:d3:25:3e:8f:0f:dc:a3:44:53:87:bd:57:78:
13:b8:43:9e:eb:73:d8:c9:0e:e5:92:a1:04:1a:3c:
5d:f4:7c:26:59:23:b3:05:07:28:5c:86:1d:c3:a5:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:E2:E5:0F:AB:63:43:DA:90:1D:0E:BF:0B:34:B9:21:83:3F:EF
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5a:6f:6c:f8:cd:4e:ab:0b:28:bc:d6:6d:03:d5:0f:ec:45:
34:f3:4c:95:ff:a1:8c:fd:d0:01:02:9a:c8:cd:81:52:5a:d1:
14:45:48:52:13:08:ab:ea:2b:8f:09:2a:74:d5:2a:cf:68:0a:
d1:2c:01:a6:80:52:f9:19:3e:bd:3b:26:b6:66:08:6b:1d:d9:
74:42:76:e5:6f:a1:65:2a:ba:d1:ec:20:29:76:88:75:e2:8b:
c2:69:97:3f:84:02:1c:5a:7b:24:14:ad:03:16:75:18:e5:64:
63:58:3b:7f:44:3d:16:3e:4f:35:80:cb:5b:99:ee:c9:2d:d6:
2c:32:14:d1:c1:0c:86:fc:28:a6:4d:be:f5:79:b9:9e:31:2b:
55:7d:83:f9:4a:ea:4c:9d:d6:cf:17:f1:39:7a:43:b9:c0:21:
a4:06:a8:8b:ff:81:81:14:c2:7c:10:64:95:7b:e5:b4:fb:3b:
62:02:cd:94:3b:a7:1b:cd:73:e3:b0:56:da:c3:27:8c:a8:63:
dc:fc:9e:ca:4e:58:87:d3:e7:d7:97:89:1a:05:61:56:85:b8:
b3:c1:c1:c5:6f:38:9c:45:a4:db:81:7e:db:0b:ad:07:d2:a0:
cd:82:10:00:f7:83:34:fb:38:4c:98:54:f6:26:c8:76:dd:37:
ef:6d:05:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:09 2026 by rpki-client