Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File: A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier: ANmTA0toO/znj+0WMpDehP4bNHjpTxntLSGBw2LnO7k=
Subject key identifier: 5A:3D:1C:60:0C:E2:CD:02:38:58:4B:CE:28:32:8F:42:8A:C3:C8:07
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial: 019D2772B08DFFF0424FAEEE074CBA1AF2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number: 012D
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
2: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: 8+VXRPm9DuKvtUbU+N1WSPWG4cmMY1v5+fti/lcbsb4=)
3: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b0:8d:ff:f0:42:4f:ae:ee:07:4c:ba:1a:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=5a3d1c600ce2cd0238584bce28328f428ac3c807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:24:1f:fc:d3:f0:6d:bb:30:8b:f3:55:d0:
20:2f:7c:04:e3:37:49:11:dc:57:e2:f3:d5:2c:e8:
33:89:af:7c:e7:6d:47:ff:49:08:cf:0f:7e:ea:54:
ed:9e:35:ac:c9:8a:b0:fc:3b:ea:31:b5:60:bd:77:
98:ed:98:51:12:63:67:b3:6b:cc:ac:4a:93:dc:45:
47:97:cb:25:ea:47:67:ad:b7:82:d7:f0:8a:2d:8b:
f4:18:34:22:2b:05:36:15:76:eb:fc:e7:0b:89:42:
d4:c3:5a:51:05:74:35:38:0c:cc:82:e2:e3:b4:98:
53:83:cd:14:12:ce:93:87:28:47:a9:2e:b3:3a:9b:
e1:82:cc:ab:99:8f:a8:c5:05:74:9c:43:3b:ac:99:
73:77:62:c6:c8:8b:49:b1:81:ee:5b:a9:f0:32:95:
1f:d4:98:c6:23:eb:c3:a0:0e:87:45:9c:c5:c7:5c:
f1:29:69:95:b6:ec:9d:c9:a5:df:9b:22:d7:f3:3a:
a4:2c:06:69:87:bd:fe:ba:50:ef:ad:4e:24:8b:c2:
a4:e2:bf:60:6e:20:a7:5e:4c:8d:59:de:73:b2:a9:
b1:b8:15:c5:bc:91:40:77:04:19:8b:22:5b:50:19:
39:46:15:36:61:95:31:d9:41:72:a5:a6:1e:a6:ff:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3D:1C:60:0C:E2:CD:02:38:58:4B:CE:28:32:8F:42:8A:C3:C8:07
X509v3 Authority Key Identifier:
keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:16:43:0c:02:82:52:65:28:21:2d:01:86:8a:f0:dc:47:
5f:93:41:18:62:7b:45:f9:1f:3a:58:e4:ef:d2:4e:fd:b2:8d:
8e:58:6f:09:b8:89:c8:fa:4f:3c:c3:d6:87:79:3b:2f:04:3e:
46:d6:6d:50:72:f1:92:8e:7b:10:4a:8f:62:76:eb:84:3d:77:
b5:31:27:1a:02:f7:92:19:59:d5:d3:22:7d:3d:03:35:8f:50:
c9:71:15:c8:06:35:59:1d:61:d2:5c:4d:cd:ae:30:6c:ae:a4:
7e:91:43:76:d5:ee:36:06:72:3a:60:dc:90:61:f8:b3:75:9a:
db:d5:ed:82:95:c6:9c:01:7d:cc:7d:9c:00:3b:a2:1f:01:b8:
d4:22:34:f6:16:ac:ce:69:a9:91:4e:52:e1:81:98:f7:ca:82:
ed:63:77:18:1a:7f:75:2c:53:32:0e:b2:4c:06:7a:4a:64:63:
31:04:2d:3b:7e:6e:c6:3e:37:b4:ee:f8:e5:ba:4c:b1:8c:6a:
ab:b0:00:1b:30:1c:8a:8a:b7:73:87:8c:6d:34:00:9a:e4:d6:
13:e6:ee:13:3b:f5:67:9d:83:4c:72:e6:f6:9a:b7:c0:26:aa:
ce:63:04:eb:81:95:c0:26:dd:7a:0e:5f:28:bf:bb:72:a6:12:
75:bc:23:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrCN//BCT67uB0y6GvL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3
N2NiY2UwHhcNMjYwMzI2MDAwMjAwWhcNMjYwMzI3MDAwMjAwWjAzMTEwLwYDVQQD
Eyg1YTNkMWM2MDBjZTJjZDAyMzg1ODRiY2UyODMyOGY0MjhhYzNjODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFIkH/zT8G27MIvzVdAgL3wE4zdJ
EdxX4vPVLOgzia98521H/0kIzw9+6lTtnjWsyYqw/DvqMbVgvXeY7ZhREmNns2vM
rEqT3EVHl8sl6kdnrbeC1/CKLYv0GDQiKwU2FXbr/OcLiULUw1pRBXQ1OAzMguLj
tJhTg80UEs6ThyhHqS6zOpvhgsyrmY+oxQV0nEM7rJlzd2LGyItJsYHuW6nwMpUf
1JjGI+vDoA6HRZzFx1zxKWmVtuydyaXfmyLX8zqkLAZph73+ulDvrU4ki8Kk4r9g
biCnXkyNWd5zsqmxuBXFvJFAdwQZiyJbUBk5RhU2YZUx2UFypaYepv8VBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo9HGAM4s0COFhLzigyj0KKw8gHMB8GA1UdIwQY
MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt
ZjAxNGY4MTc3OTZhLzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh
LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH8WQwwC
glJlKCEtAYaK8NxHX5NBGGJ7RfkfOljk79JO/bKNjlhvCbiJyPpPPMPWh3k7LwQ+
RtZtUHLxko57EEqPYnbrhD13tTEnGgL3khlZ1dMifT0DNY9QyXEVyAY1WR1h0lxN
za4wbK6kfpFDdtXuNgZyOmDckGH4s3Wa29XtgpXGnAF9zH2cADuiHwG41CI09has
zmmpkU5S4YGY98qC7WN3GBp/dSxTMg6yTAZ6SmRjMQQtO35uxj43tO745bpMsYxq
q7AAGzAcioq3c4eMbTQAmuTWE+buEzv1Z52DTHLm9pq3wCaqzmME64GVwCbdeg5f
KL+7cqYSdbwj0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:09 2026 by rpki-client