Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: RoWTwtjgfjBAqifIPp2A0bYUtnvfUE8X4yEDTiV7o8A=
Subject key identifier: CF:89:B6:A8:6F:6C:7D:F0:BC:B9:35:C2:B1:9C:B7:EF:86:78:F6:FC
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019D2929277ABAA6BDE2AE6E169C53663F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 0543
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: YGv7BEK91tPKx7mCINUY1sTEAF1xzfKb07BSI2b57vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:27:7a:ba:a6:bd:e2:ae:6e:16:9c:53:66:3f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=cf89b6a86f6c7df0bcb935c2b19cb7ef8678f6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:92:69:4a:fd:c1:78:a7:0f:68:58:6b:3c:
bf:49:fb:57:5b:4d:6e:5c:1b:46:8d:f6:8d:7f:73:
d0:33:b7:6a:56:96:03:37:95:0c:1f:12:92:81:86:
41:1e:4c:ba:ed:31:4e:28:bd:e5:09:1b:bf:d8:d0:
0e:16:34:4f:18:c4:7c:59:7d:3f:a7:24:66:51:a0:
c5:d9:91:01:b5:0c:d9:4c:04:1d:eb:0a:07:60:00:
b1:df:14:14:87:15:67:ba:6b:50:22:78:e7:d1:34:
d1:5e:f5:a7:2f:4d:bc:9c:6b:7a:56:31:b4:7c:f2:
ba:9b:78:4e:66:16:c1:2e:46:38:47:37:a4:5b:01:
1c:b0:9a:0d:b0:ec:65:8f:53:b6:04:c6:c6:6b:73:
e7:ee:71:c2:bc:36:fe:38:a0:a2:55:09:e8:bd:b1:
dc:82:83:e6:42:2a:59:b2:a3:53:06:12:db:1d:9d:
f5:89:89:fa:e7:bb:7c:13:10:b2:3a:76:9a:87:12:
d7:32:38:33:7b:f3:ef:99:09:1e:b1:dc:bf:c6:67:
d5:90:c9:36:b2:20:4a:f8:56:72:46:74:91:c5:0d:
62:7d:d9:6b:68:3e:76:06:13:f2:00:0c:96:47:ab:
f0:60:9a:ec:ae:16:0e:9f:13:49:0d:27:d1:c3:bf:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:B6:A8:6F:6C:7D:F0:BC:B9:35:C2:B1:9C:B7:EF:86:78:F6:FC
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:51:52:ec:b2:41:87:f1:3b:1c:c7:fb:21:1e:82:29:9c:f3:
7c:96:71:b5:46:12:39:80:c6:f1:a1:b1:44:52:15:62:d7:9c:
86:8f:01:e3:a5:8f:25:48:a0:1f:f1:3f:d1:21:fb:b1:0c:ce:
72:d0:1a:f2:51:a2:20:88:16:7a:d1:52:db:11:dd:a4:ff:28:
77:c5:eb:da:67:84:41:96:53:80:e7:24:a8:77:ee:f0:c4:af:
15:c4:e4:ca:68:b4:28:43:14:61:69:6e:f4:3c:b2:80:bd:fc:
0d:66:19:4c:a7:7a:7a:e5:64:cb:f8:5a:fc:88:a5:04:21:f7:
21:8a:f8:7d:0f:03:a6:5d:87:9d:0d:0e:c0:e7:08:e4:63:61:
93:88:b1:27:42:79:d2:93:e6:9f:aa:d3:2c:d1:72:e7:bb:97:
7a:a2:85:06:70:09:42:90:3d:ca:27:b6:22:c1:6e:b4:a4:82:
a7:34:e6:2e:73:f4:d7:c8:ce:32:4d:a9:a5:d7:d4:24:ee:7c:
b6:6f:2d:d7:95:0e:b9:a4:62:7a:b4:19:85:80:80:d8:96:51:
7f:6e:21:8b:2f:b6:59:6f:90:b0:cb:5d:ce:ae:8d:c4:47:42:
d6:bc:16:57:a4:8d:29:62:8b:af:a1:c1:75:ff:1c:c1:bf:ca:
2c:88:dc:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKSd6uqa94q5uFpxTZj8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWVlMjdkZGI0OTBiYjk2NjllZWJhMGUxMTY5NDE2NGNh
MmU4ZTgwHhcNMjYwMzI2MDgwMDU2WhcNMjYwMzI3MDgwMDU2WjAzMTEwLwYDVQQD
EyhjZjg5YjZhODZmNmM3ZGYwYmNiOTM1YzJiMTljYjdlZjg2NzhmNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63qSaUr9wXinD2hYazy/SftXW01u
XBtGjfaNf3PQM7dqVpYDN5UMHxKSgYZBHky67TFOKL3lCRu/2NAOFjRPGMR8WX0/
pyRmUaDF2ZEBtQzZTAQd6woHYACx3xQUhxVnumtQInjn0TTRXvWnL028nGt6VjG0
fPK6m3hOZhbBLkY4RzekWwEcsJoNsOxlj1O2BMbGa3Pn7nHCvDb+OKCiVQnovbHc
goPmQipZsqNTBhLbHZ31iYn657t8ExCyOnaahxLXMjgze/PvmQkesdy/xmfVkMk2
siBK+FZyRnSRxQ1ifdlraD52BhPyAAyWR6vwYJrsrhYOnxNJDSfRw79u8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+JtqhvbH3wvLk1wrGct++GePb8MB8GA1UdIwQY
MBaAFAPu4n3bSQu5Zp7roOEWlBZMoujoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUt
OGQ4YzU5MmRhNDIwLzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNGQyMzEtYTlhNS00MDdiLWJhMjUtOGQ4YzU5MmRhNDIw
LzEvQS03aWZkdEpDN2xtbnV1ZzRSYVVGa3lpNk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVFS7LJB
h/E7HMf7IR6CKZzzfJZxtUYSOYDG8aGxRFIVYtecho8B46WPJUigH/E/0SH7sQzO
ctAa8lGiIIgWetFS2xHdpP8od8Xr2meEQZZTgOckqHfu8MSvFcTkymi0KEMUYWlu
9DyygL38DWYZTKd6euVky/ha/IilBCH3IYr4fQ8Dpl2HnQ0OwOcI5GNhk4ixJ0J5
0pPmn6rTLNFy57uXeqKFBnAJQpA9yie2IsFutKSCpzTmLnP018jOMk2ppdfUJO58
tm8t15UOuaRierQZhYCA2JZRf24hiy+2WW+QsMtdzq6NxEdC1rwWV6SNKWKLr6HB
df8cwb/KLIjcHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:54 2026 by rpki-client