Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File: a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier: jWu04fNNxy3H5kOh1IuSLEDD+Tz/A3rTkpSCQfid/Uk=
Subject key identifier: 31:A5:27:89:CB:A5:1D:4E:CD:D7:DF:53:58:F6:AF:C0:6B:C1:07:8A
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial: 019D28F2801BFE843944BA2B42F58C0F112E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number: 1328
Signing time: Thu 26 Mar 2026 07:01:14 +0000
Manifest this update: Thu 26 Mar 2026 07:01:14 +0000
Manifest next update: Fri 27 Mar 2026 07:01:14 +0000
Files and hashes: 1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: gE1qX3Ai78BVmKzHzta5WFtky3CkKVfalkvBeqNjaEc=)
2: kP2KSuj-FkQKmwr3mlICYjWYuAk.roa (hash: mJFVgN/gg79ER/d0W7J+rux4VqVkbxiEL9s7hNeViGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:80:1b:fe:84:39:44:ba:2b:42:f5:8c:0f:11:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
Validity
Not Before: Mar 26 07:01:14 2026 GMT
Not After : Mar 27 07:01:14 2026 GMT
Subject: CN=31a52789cba51d4ecdd7df5358f6afc06bc1078a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:fd:e8:77:f5:bb:57:7d:65:3d:c8:c7:5f:
d4:42:51:c1:e6:03:4c:01:a5:b2:4e:19:2d:62:a1:
3f:98:05:b6:b0:ef:df:48:7b:2e:46:a7:13:41:ce:
ab:bc:d9:ff:92:7d:51:cb:9f:4d:50:d2:60:af:aa:
84:a5:75:e5:83:db:70:04:4f:74:50:50:51:53:6d:
79:72:68:12:60:a8:82:cf:c2:83:ba:2d:6e:3d:ca:
b4:3e:0d:d6:e6:36:a0:b4:20:db:58:6e:06:c4:4f:
00:c6:fd:17:a4:8b:13:10:27:ca:a1:68:51:3b:97:
f8:92:cf:a3:79:e1:78:d2:34:21:c6:0e:66:24:29:
46:95:69:f6:c6:b9:5c:8a:79:45:e8:a7:94:23:14:
89:e0:a3:6a:34:84:52:32:11:e0:72:8a:e5:a3:9d:
93:50:36:46:79:92:7f:91:90:0f:69:17:24:45:8e:
2d:c3:96:9a:a1:3a:7f:e2:69:3d:42:bc:46:68:d2:
13:db:d5:48:94:a6:fa:de:78:67:b9:de:a2:74:b2:
4f:0c:da:bc:2f:02:0c:e6:03:98:e6:7e:0f:f6:6d:
dd:d1:0a:8d:e9:6d:28:63:3a:5a:87:c8:0e:dd:2e:
90:10:c5:f3:90:b7:8e:bf:c6:00:c7:83:e8:fa:0d:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:27:89:CB:A5:1D:4E:CD:D7:DF:53:58:F6:AF:C0:6B:C1:07:8A
X509v3 Authority Key Identifier:
keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:ea:4e:54:33:0f:c8:4a:2a:4e:9b:41:1e:83:46:70:0b:
05:fd:7b:1d:8c:09:ff:29:ed:2a:a8:57:c0:29:7c:7e:cc:10:
a5:18:7f:d8:99:84:36:07:ab:5a:5e:cb:91:83:11:47:ee:ee:
53:e7:f8:69:f2:c0:78:a0:ec:b9:37:bd:93:7f:53:f2:4e:be:
5c:03:02:74:47:17:57:f7:59:8d:16:60:b3:15:d8:d1:ed:5c:
6f:82:10:a4:9e:ea:27:f4:be:18:d6:c5:d5:02:df:ce:e6:b7:
6b:fc:cb:56:f9:fd:c9:c4:f9:c6:98:b2:b9:45:0a:a5:02:ce:
04:e2:77:11:f6:5d:d7:61:05:c6:25:1f:75:14:64:af:97:54:
93:15:1f:87:05:df:71:54:a3:a6:61:8b:43:7f:21:94:7f:13:
e1:31:8f:b4:fe:eb:ef:a3:e3:8e:82:6f:d7:90:5e:0e:41:47:
82:b3:d7:22:c8:fb:8d:56:87:2b:7a:80:9c:e1:c1:21:00:db:
50:cf:14:0d:b2:b7:2a:f7:0d:7d:db:87:cc:17:dc:57:93:a2:
12:9f:2e:59:2f:90:0e:96:1b:3f:7f:10:7f:77:40:2e:90:ff:
cb:ce:18:f3:c0:5f:88:20:83:fa:92:b0:44:fe:1b:76:d0:54:
a5:84:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:51 2026 by rpki-client