Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: hyCqg/s3+TnOpO2ByKvLF8SSFIcsbykl1woE+3Z2a58=
Subject key identifier: 29:95:90:67:FC:68:4F:BA:CC:DA:1B:F7:97:F1:5D:E7:EF:67:F8:03
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019D26CD13C2FB8A63D435FA76A4619645DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:07 +0000
Manifest this update: Wed 25 Mar 2026 21:01:07 +0000
Manifest next update: Thu 26 Mar 2026 21:01:07 +0000
Files and hashes: 1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: 9S+QCEd1ED9EcyydApjJx2f0mHw3OOCec3GEAAa7aSk=)
4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:13:c2:fb:8a:63:d4:35:fa:76:a4:61:96:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Mar 25 21:01:07 2026 GMT
Not After : Mar 26 21:01:07 2026 GMT
Subject: CN=29959067fc684fbaccda1bf797f15de7ef67f803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:2b:8c:30:cd:01:8a:ff:33:56:52:6d:d8:
51:ca:24:50:72:23:d1:1a:71:f3:60:a4:07:4a:03:
ef:23:ca:ff:13:f6:46:b0:06:9b:93:dc:af:7b:c9:
06:95:c6:7c:fc:0b:64:c8:43:52:b1:1e:80:66:ad:
c5:a8:38:4b:d0:c3:c3:a7:a2:ab:e2:81:3c:76:a8:
3c:c2:26:b5:e1:32:77:b2:f9:47:da:94:71:e2:54:
72:24:38:3f:4f:8e:55:32:3d:4a:3c:f5:94:89:76:
95:c4:f4:8e:7e:84:72:12:d1:ce:c1:b0:58:41:46:
9e:1e:b7:c7:aa:e6:e7:24:15:82:e1:e7:54:50:97:
2c:c7:62:5e:2c:52:a4:4d:7f:4f:df:9b:70:8d:98:
b4:51:9a:07:f0:dc:03:5d:0a:38:92:0d:56:ee:e9:
d5:3e:9b:02:bf:d4:d5:b0:2e:56:45:88:20:b8:d6:
c1:85:90:2b:e7:a5:bb:bf:bc:f6:0c:b9:b6:ff:7f:
22:87:63:0b:17:e3:de:14:ef:31:67:c1:92:5c:fe:
bc:e4:11:ae:7b:d8:4d:3e:ef:f1:40:bb:af:80:45:
bf:9d:f1:ee:71:37:a7:d1:ff:95:4b:53:5c:e3:67:
70:29:56:a3:49:4b:f7:5c:7a:ea:2f:e5:af:ee:ec:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:90:67:FC:68:4F:BA:CC:DA:1B:F7:97:F1:5D:E7:EF:67:F8:03
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7d:0c:85:ee:31:7a:6a:e6:fa:60:86:38:9e:cb:89:a8:75:
25:75:1e:dd:73:aa:7d:55:b2:76:4b:04:02:2e:bb:d6:bf:fa:
e5:49:73:1a:bc:95:6f:89:22:d0:80:9a:8b:4d:a0:58:1e:fd:
9e:d9:54:e5:5c:01:6a:05:a5:ad:46:38:20:72:72:11:f5:9f:
ec:67:62:81:6f:3b:26:2f:c8:0b:c6:a9:2c:ac:0c:ad:3a:0e:
56:8e:a0:f0:c9:9d:2c:4c:07:11:c5:36:4b:a1:18:ab:c3:f6:
6b:c2:69:55:17:ab:a7:a6:45:b3:29:33:51:e9:17:68:ee:1a:
1a:fd:9d:46:09:93:ca:4e:d7:b8:6c:0d:fb:b8:ed:f3:c6:95:
ca:7f:23:d5:f5:e1:db:d6:e8:1a:6b:bf:b4:5d:f2:53:0d:db:
29:a8:61:12:c0:b0:c1:c1:e8:bc:b5:b1:bd:c8:45:72:69:40:
24:95:a9:3c:7c:17:f5:9a:99:89:86:e1:17:ef:d1:ee:06:c6:
39:82:31:d9:6b:1b:1d:01:e0:3b:65:12:fc:70:27:c8:d5:f9:
4b:1f:1c:6a:15:32:54:99:02:37:7e:f0:1e:64:62:b5:ba:3d:
f2:8e:37:6f:72:88:6d:54:b4:c3:f0:ef:6a:56:b4:a5:9a:05:
86:28:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:04 2026 by rpki-client