Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: xheZVfQD7lPL6HgQx3kCmnQ6r14+h354SHLk7HX6XSU=
Subject key identifier: AF:C8:13:9B:6E:3D:C5:42:B3:A6:9B:13:1C:CA:0F:C0:E0:F5:D3:D4
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 019D29292781F45AB9282B043B98D3996924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1494
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: /xaon3wFN96KHdw9UW+C8ZGQfrl4qHSS8WHBi9qyZfI=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:27:81:f4:5a:b9:28:2b:04:3b:98:d3:99:69:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=afc8139b6e3dc542b3a69b131cca0fc0e0f5d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:0f:b3:73:5e:44:b6:40:b1:1f:ba:78:df:
d4:e2:19:58:15:5f:8d:6d:f7:5a:eb:f6:e2:6f:65:
c7:ed:83:48:38:11:62:79:74:3a:48:b1:ae:5e:b8:
64:6a:8e:d7:88:64:ad:e2:22:9d:07:05:7d:16:80:
cc:11:e8:be:61:e0:73:0d:b8:33:7a:55:b5:a0:31:
27:89:9c:9c:26:ad:9b:27:86:8d:5b:95:69:ff:08:
41:ab:d6:9b:90:a2:96:29:08:6b:3a:95:b4:19:44:
7e:84:ee:07:72:e0:97:12:fd:07:a3:09:bc:25:ba:
98:07:57:d3:56:a8:2c:bb:c9:13:ef:03:ff:48:64:
fb:fc:65:b0:ac:f7:38:92:f5:c9:72:67:1a:c6:6e:
65:6e:e3:74:44:65:45:26:2b:81:4d:e0:5e:c0:89:
0d:0c:03:4b:49:41:09:be:fa:f3:75:b1:da:09:2a:
29:3b:b6:99:ca:a3:19:3d:d5:59:af:db:c9:d7:13:
ba:92:2c:64:35:81:04:49:72:d4:90:8a:65:a0:8e:
fc:cb:76:e0:b5:01:d3:a8:13:c6:04:81:a4:c6:03:
f4:2a:cf:f2:6e:e8:ee:cd:a5:0d:a8:8a:af:fc:e3:
c2:ca:98:e9:46:76:8d:3f:e7:1a:73:36:57:04:31:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C8:13:9B:6E:3D:C5:42:B3:A6:9B:13:1C:CA:0F:C0:E0:F5:D3:D4
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:57:b9:e6:d2:f6:4c:20:3d:23:57:00:47:bc:c2:ed:42:
36:50:38:b0:73:6f:1c:15:6a:93:13:a7:6b:53:b9:05:43:52:
5b:b4:16:ed:d9:b0:d8:9d:7b:a0:a5:2b:52:52:c3:2b:3c:c5:
ca:fb:31:f5:de:14:d8:2e:87:6f:f4:c8:56:5c:2e:1d:4c:5e:
c4:95:36:8d:79:ce:22:5f:8b:05:f5:f2:9d:39:ba:2a:a5:72:
60:72:0e:00:6e:5b:a7:26:cf:0f:00:0e:05:57:9e:9a:6d:fd:
25:84:b5:47:35:9f:f3:9c:89:24:51:1b:2b:94:10:19:2d:9c:
1b:f0:0a:9d:9f:67:73:38:6e:bf:b3:32:a9:aa:51:7e:9c:65:
8b:b5:8a:95:8e:bb:f5:e6:49:28:49:d5:fc:fa:ec:cd:65:95:
c4:a3:46:3b:2c:bb:bb:ac:b9:22:fb:71:8f:73:cf:10:4e:8a:
5d:91:1e:42:08:6c:65:19:1d:7b:40:26:d2:7a:16:38:ff:73:
b5:e2:3e:f2:49:84:49:d4:dc:d8:7a:3f:8c:fb:4d:32:a6:eb:
47:ea:71:c7:e8:a3:fb:00:6d:32:37:67:68:22:e7:ba:c8:1e:
31:0a:c5:4b:e0:0d:b2:85:12:2d:a7:38:de:c8:ec:c0:80:b0:
c3:c5:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:11 2026 by rpki-client