Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: hQUsrNBlxISyTJnpi6GgIq8zSODWqfsIF8s8QChjGY0=
Subject key identifier: 3A:59:AC:EE:1B:65:FB:07:41:35:4C:99:EF:81:31:94:CD:43:3F:3B
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019D2771D897B86B0352FF12A52ED00F608A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 148B
Signing time: Thu 26 Mar 2026 00:01:05 +0000
Manifest this update: Thu 26 Mar 2026 00:01:05 +0000
Manifest next update: Fri 27 Mar 2026 00:01:05 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: rTK4u2H9lnPTojPa6M/lNNTXOzdm/us71kujYzeyL5c=)
2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d8:97:b8:6b:03:52:ff:12:a5:2e:d0:0f:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Mar 26 00:01:05 2026 GMT
Not After : Mar 27 00:01:05 2026 GMT
Subject: CN=3a59acee1b65fb0741354c99ef813194cd433f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:81:7c:0c:2a:de:b2:05:9e:86:ad:2b:32:
f7:72:91:c9:c9:9e:6f:04:15:9e:ef:e2:d8:d3:e4:
29:c1:b6:57:ab:0e:5d:5d:30:1d:22:02:63:8e:17:
3a:37:de:05:37:50:3e:06:1b:cd:c8:eb:43:13:dc:
1f:d7:63:25:ce:c1:36:68:2a:a5:84:f8:85:47:f1:
cd:2a:3a:4a:38:1d:70:c6:d6:d3:c7:29:11:10:01:
4a:14:1f:6c:29:35:15:70:9e:48:1e:b9:8e:99:76:
5b:5e:f2:77:52:77:29:a5:d2:3f:3c:19:ed:d7:3e:
93:f1:69:60:f2:5d:77:87:03:fe:28:8b:1d:de:64:
93:ee:0b:29:6f:73:e7:96:4c:61:a9:3f:a0:c4:81:
53:9f:f2:2f:fe:74:1c:b6:10:54:ab:b1:7b:3a:ce:
ba:ca:93:3b:4e:18:d1:25:4b:f6:87:8c:8c:5a:84:
e9:6a:d4:61:1b:4d:a6:2f:71:9b:72:9b:de:57:8d:
49:32:4e:13:15:7d:e3:eb:54:dc:b7:c7:b3:fd:52:
0a:95:22:9b:45:b2:d3:b6:6e:36:8f:18:f7:70:85:
a5:8c:59:82:56:c6:90:85:9e:06:5c:7e:68:93:cf:
86:27:64:7f:28:4a:5b:8d:f1:36:34:44:7f:55:49:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:AC:EE:1B:65:FB:07:41:35:4C:99:EF:81:31:94:CD:43:3F:3B
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:a2:94:40:65:50:48:a0:e6:e0:91:d9:58:14:8e:f4:aa:
59:b2:7b:2e:ec:c0:06:a3:b5:a5:25:76:7c:c4:13:e8:15:9d:
bf:0b:bf:94:5c:0e:33:03:af:30:0a:0f:e4:2d:2a:b3:b0:aa:
33:fd:8b:79:6f:6a:b5:fd:07:ce:c1:60:ab:a7:07:36:14:6b:
12:07:bc:df:b6:79:ee:19:aa:fb:e5:aa:20:75:22:f1:47:48:
ff:37:1d:4d:3f:a3:64:52:1a:54:f9:b4:8c:f3:1c:b9:ce:bf:
cc:91:61:c4:01:e2:0f:92:a5:f1:eb:ab:f0:ed:f0:06:85:e3:
26:29:08:b1:ab:db:7a:2a:0e:36:c9:26:0a:2a:36:c0:d1:22:
9c:e7:a0:f0:81:ca:4f:1c:3f:ad:17:0c:23:6f:05:ba:d5:16:
2f:7c:fe:47:4d:43:c7:d0:80:91:c0:e5:37:fe:0c:ca:e1:f6:
3e:f1:66:58:32:ae:3d:19:b7:03:82:b3:c1:04:db:96:c5:15:
27:6b:cb:05:0d:8b:47:5d:00:ab:f0:fb:ff:ee:a7:38:ca:f8:
8b:05:55:b3:bd:c4:1d:84:45:89:8b:06:28:e0:c9:b4:6f:e5:
a5:75:55:bd:ce:78:32:cd:9c:a0:ad:47:ec:8f:67:82:d3:75:
f6:ee:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:10 2026 by rpki-client