Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: /dD8F4cUvnQFKFkQQFhkhmMdf9Qoad5NCUWB/EVz43U=
Subject key identifier: 48:82:3C:73:FB:DC:35:1D:9B:08:46:9F:89:41:FC:DF:D8:D3:68:7F
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019D2BBC9BFF9E9BC4289B225534177DF098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0CCC
Signing time: Thu 26 Mar 2026 20:01:14 +0000
Manifest this update: Thu 26 Mar 2026 20:01:14 +0000
Manifest next update: Fri 27 Mar 2026 20:01:14 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: Hneo44e0GCWi8KlKz/mDKj67wdJQwaquUXP+Au7FfIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:9b:ff:9e:9b:c4:28:9b:22:55:34:17:7d:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Mar 26 20:01:14 2026 GMT
Not After : Mar 27 20:01:14 2026 GMT
Subject: CN=48823c73fbdc351d9b08469f8941fcdfd8d3687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:4c:e5:5f:71:2e:1a:d6:ac:7e:06:d5:42:
7b:c1:63:05:91:d6:90:78:ac:c2:4f:3b:f3:d7:e9:
db:88:f4:dd:60:33:8a:4b:e2:9e:00:c8:22:cd:f0:
9e:a4:c1:bb:d4:54:b2:f8:65:f0:45:29:5e:53:c0:
40:56:80:8c:2a:d0:bc:f2:5c:af:bc:f6:c2:8b:3d:
8f:a1:08:84:44:2b:ab:26:40:e5:1e:cc:7a:a0:bb:
8e:dc:d3:8d:b6:ee:9f:3e:40:8f:28:33:53:14:27:
1e:5a:f2:89:7a:fa:30:db:2a:78:97:ed:71:01:21:
71:60:2f:b0:ea:12:3a:a3:49:75:52:47:07:08:b4:
00:67:9f:5a:97:a0:cb:1b:4c:ff:22:03:84:ce:bf:
1c:fb:7d:0d:a6:bd:c2:01:c1:bd:87:65:86:a6:ef:
58:3d:80:61:ff:67:8b:2f:af:27:ae:a7:73:e8:2c:
12:20:4e:a9:67:1d:a1:0f:4f:1b:a9:bf:bf:33:20:
a1:a1:2b:7f:54:e7:0e:2a:02:00:00:f2:d6:a9:b9:
dc:1d:88:58:75:f6:c9:88:fa:e2:27:6a:47:4a:d2:
8c:20:1e:60:3d:ee:b7:f1:6e:a6:38:74:99:d6:d5:
36:34:28:ba:4b:24:2a:ea:2e:bc:24:a9:d1:72:06:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:3C:73:FB:DC:35:1D:9B:08:46:9F:89:41:FC:DF:D8:D3:68:7F
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:cc:fd:67:65:fa:47:2c:ec:bd:fb:12:e8:5b:37:c1:8f:
0d:a1:79:cf:e8:fe:c4:38:7b:16:37:60:9d:cf:16:67:07:fc:
81:e2:4e:c8:51:4c:d7:4e:d6:7f:45:68:f4:71:a4:3f:f2:93:
07:8b:35:6a:f7:60:fa:d8:1f:f9:68:71:74:96:1e:2d:b1:4d:
97:c8:39:e5:44:21:94:14:26:56:14:87:42:8f:91:bf:05:3e:
15:20:3f:85:dc:4c:fc:67:40:94:9e:1d:af:d7:7a:0d:51:4c:
35:97:41:ce:12:f2:29:a2:76:d6:cd:b0:f7:df:c8:1c:4e:9c:
5c:3d:89:0b:5b:bd:05:4b:69:f3:92:d5:7b:fc:1b:00:d2:c6:
36:a5:bd:1a:d9:11:bd:a0:06:5d:42:5d:21:f7:bc:5b:32:5a:
1d:06:37:a5:03:26:e1:c1:2d:28:c7:f7:bf:e1:42:c8:bc:5c:
2f:32:7c:29:51:ae:03:86:07:b7:18:fa:e0:79:73:fe:30:72:
32:35:da:d2:e0:88:4e:9d:db:26:1f:87:5b:7c:37:2d:aa:0c:
bc:72:29:9b:ac:b8:46:cc:6e:25:46:1b:93:f9:9c:f3:e6:28:
5c:ec:f4:89:6d:d3:b4:bc:87:82:15:49:cd:3e:54:f9:8c:18:
71:33:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:45 2026 by rpki-client