Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: MfV/SVmMJzjY7PPobbgAY1QG9ipIgX56i8mVsHDsc9Q=
Subject key identifier: BF:AE:AB:A1:9E:5A:EA:D5:D0:81:80:77:C2:BB:D9:C2:C7:9D:25:BC
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 019D26CD7C4E578F887083D7943F2BB3856D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 06FA
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: bqc6orIMebXQfWsHYmTuwbGrdW+n9Lcw2ExQJSwrNAY=)
2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7c:4e:57:8f:88:70:83:d7:94:3f:2b:b3:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=bfaeaba19e5aead5d0818077c2bbd9c2c79d25bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:22:15:2d:c0:6a:b6:ca:28:5a:6b:c7:93:
8a:07:19:eb:e2:39:85:7b:94:cf:2b:f0:40:41:f1:
d7:d0:b7:6e:53:f5:86:dc:02:e7:f5:9d:55:42:bd:
60:25:e0:bc:3c:5a:2a:4c:15:90:60:e7:14:ea:06:
2b:46:e3:01:92:88:8a:a5:72:83:d3:9b:64:c7:9d:
96:fc:d0:48:21:37:50:48:04:df:58:d6:6f:e7:04:
e8:ce:68:fe:e9:a6:38:0e:53:c7:2f:df:04:95:d1:
55:87:8e:de:7a:7e:1d:e2:e3:e1:57:61:88:5d:e6:
3e:e0:4c:1d:9d:14:71:4d:05:7c:e6:e1:30:4b:09:
0c:34:dd:f9:66:14:45:b1:11:8f:e5:b8:30:10:be:
cb:af:88:1a:b6:b1:21:71:67:1e:a9:be:a6:cb:91:
57:16:81:67:c3:4c:1f:9a:6c:84:de:c9:5c:f3:3d:
dd:10:93:e9:a4:10:6d:4e:be:a9:66:ee:43:f4:67:
9f:79:9e:30:fa:40:7e:05:79:ac:d1:3f:2e:0e:80:
21:71:63:73:c7:09:14:38:6f:4b:c2:10:01:87:01:
50:20:da:58:b2:d5:b5:2b:6f:38:a9:b1:de:da:06:
9d:c3:b7:15:d3:a1:84:03:8a:69:5c:fe:80:55:fa:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:AB:A1:9E:5A:EA:D5:D0:81:80:77:C2:BB:D9:C2:C7:9D:25:BC
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:98:a0:f0:78:68:32:b9:28:d2:49:50:02:03:f8:9c:c2:07:
98:27:70:5f:49:1c:58:ed:4c:83:6d:65:b2:2d:ed:46:a8:1e:
28:2c:97:7b:00:e7:1c:4f:ad:e3:d2:42:35:e9:5e:44:a3:09:
2d:d9:f0:16:1c:e0:11:ea:ca:fb:79:e3:62:5d:4a:57:34:15:
66:b4:36:c4:cc:d0:6a:6e:d2:e2:0b:fc:21:47:e1:a1:d1:59:
b9:d3:bc:89:61:7b:43:d6:97:15:9b:35:1a:84:a5:aa:16:7a:
7c:ca:9f:73:3b:c6:f9:78:06:79:d9:98:c1:4f:e1:a6:79:1d:
fb:0f:5f:5a:fa:07:72:d4:e2:b0:c2:49:61:69:75:e7:42:15:
32:f4:e8:14:66:7d:96:df:9b:cf:f5:94:4b:59:f2:f9:3b:e4:
96:f4:e3:a4:8d:d4:73:81:5b:62:94:1e:ef:33:a9:a8:35:7d:
6d:60:05:bf:56:4b:ab:2b:7b:e5:f1:20:64:18:95:16:fd:5a:
2e:c7:59:12:a7:e9:b0:a8:e7:ba:6d:5f:a1:81:aa:e2:58:ab:
7a:2a:07:1a:ef:04:68:eb:e6:8f:96:c8:c0:49:c6:c4:68:0f:
20:a1:28:05:ed:f5:39:fd:58:3c:2c:dd:b3:51:da:5b:8d:c5:
6c:37:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:18 2026 by rpki-client