Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: XaNGOcGaFw1UhthaXpHMwzZDW3SMo9t062vq4dc2rmA=
Subject key identifier: 2F:63:A8:2C:69:F1:7B:CC:C5:1C:AB:95:66:2B:71:0F:13:5D:0B:88
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019E1F116A73DF2950911752C33DB07E5B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0D4A
Signing time: Wed 13 May 2026 02:01:35 +0000
Manifest this update: Wed 13 May 2026 02:01:35 +0000
Manifest next update: Thu 14 May 2026 02:01:35 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: FSV2sOblkNHT2mKhdMz+nOWSWxn/yj+1c/5I0zFrRq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:6a:73:df:29:50:91:17:52:c3:3d:b0:7e:5b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: May 13 02:01:35 2026 GMT
Not After : May 14 02:01:35 2026 GMT
Subject: CN=2f63a82c69f17bccc51cab95662b710f135d0b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:b4:2a:d7:15:3e:01:77:1f:8d:36:a6:e5:
64:d0:6a:38:1d:3b:2c:18:34:3e:f9:58:58:70:4b:
7b:3e:41:51:cd:73:09:9b:58:28:16:22:bc:68:cc:
c0:5b:d4:7a:34:1d:e7:38:65:12:de:84:41:21:e0:
78:f6:90:4c:e5:c7:40:a7:38:02:82:76:22:44:e8:
10:bc:e7:79:1c:ad:52:37:7c:e5:b0:f1:40:c1:d3:
12:4f:42:91:21:60:34:1e:da:7f:aa:92:b3:01:71:
b5:f0:9b:79:c5:67:a4:49:d6:8d:dd:04:20:8f:9b:
a3:5c:52:5a:5b:5b:53:af:9d:49:35:2f:52:3b:5f:
a7:82:a8:c2:20:43:77:58:17:a7:6f:c9:d6:9e:71:
a2:c4:7a:30:26:0d:63:fe:6e:bf:8f:3f:3a:47:38:
53:02:0a:a3:9b:78:bf:3f:92:17:05:85:4a:a0:11:
62:8b:59:a1:4f:0c:4d:b2:98:ed:4b:f9:5e:01:1c:
25:82:d6:00:8b:b8:20:a7:55:ea:67:7f:2c:95:a2:
e2:80:37:74:d8:29:ea:b5:d0:9e:08:74:07:20:c7:
37:68:b9:1f:f3:d1:84:e0:80:5e:f5:ec:e5:39:96:
43:3e:64:38:ce:6c:56:8b:99:5c:17:87:49:1a:10:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:A8:2C:69:F1:7B:CC:C5:1C:AB:95:66:2B:71:0F:13:5D:0B:88
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:37:c1:0d:ce:b3:66:7a:48:6a:81:c2:c4:2f:94:8c:81:7d:
e9:88:e4:f5:19:98:d4:34:13:12:62:d1:42:e3:b8:02:2e:99:
bd:b1:82:9e:20:8a:93:04:59:26:60:0d:50:d3:f0:62:b8:57:
c1:73:3b:a3:32:37:a7:a9:d9:0c:da:a1:34:46:6a:e7:bd:c3:
84:69:83:df:f5:b2:12:ba:6d:6c:ee:13:b7:4f:bd:e3:fc:c2:
6e:a6:6e:ea:9b:40:94:42:27:fd:40:13:7e:06:48:24:b1:21:
5b:a4:5b:a6:4a:59:57:ca:f1:ab:be:00:fe:c2:16:8f:c5:ef:
72:6a:b6:fc:70:2c:c9:8e:a3:d8:87:20:32:13:30:8c:fe:91:
77:17:f5:39:e9:c6:b4:f2:20:5f:c9:f0:ff:99:d1:88:27:a2:
0f:51:f8:85:77:05:4f:cb:79:84:f6:94:57:15:79:ba:2d:65:
bb:75:a5:59:ab:ad:a1:05:55:93:44:45:5e:6d:5a:80:3b:27:
a6:cc:02:0d:04:33:55:d6:99:f1:8b:4d:98:13:36:f5:c8:a8:
30:f5:13:7d:48:ad:04:c0:40:d2:be:ac:03:48:33:5d:32:ce:
20:47:14:c3:f6:10:e9:9f:8d:fc:e0:df:bd:fa:5f:b5:39:3c:
e7:d9:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:31:46 2026 by rpki-client