Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: ZOxYo3F0gETfoPSGPWMdoLbiFr4iIrQN9d/cyUvG06U=
Subject key identifier: FA:6E:92:5E:98:65:C2:97:08:59:FA:70:EA:4C:63:12:72:4C:AF:85
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019D262890732A511A538E180D45A8B85473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0F27
Signing time: Wed 25 Mar 2026 18:01:25 +0000
Manifest this update: Wed 25 Mar 2026 18:01:25 +0000
Manifest next update: Thu 26 Mar 2026 18:01:25 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: slyAWwL3NSFl6imLQe+3jC2luguo5zRZ3Kc+i0pNfJY=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:90:73:2a:51:1a:53:8e:18:0d:45:a8:b8:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Mar 25 18:01:25 2026 GMT
Not After : Mar 26 18:01:25 2026 GMT
Subject: CN=fa6e925e9865c2970859fa70ea4c6312724caf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:c4:1e:91:f4:8d:1e:6e:9f:97:98:f4:c2:
2e:cc:47:20:f9:fb:33:d0:c4:9f:3d:7e:82:e4:be:
f8:d3:35:b3:af:f7:e3:00:0f:51:42:b3:44:20:f7:
a6:87:c9:b4:8e:5a:20:64:29:5e:69:a3:c9:94:00:
57:1c:e1:d4:8c:0f:f0:60:72:8c:f4:25:85:72:3f:
2d:5d:64:cb:1d:f6:11:73:22:21:9e:71:6e:99:3e:
24:e2:c5:39:e6:6b:64:a1:00:10:41:80:b1:18:b9:
9c:05:9d:86:a3:b9:e0:8c:d9:d2:87:b1:b3:bd:d0:
b2:5f:49:4f:aa:31:9d:4d:6d:68:f4:a2:87:3a:22:
fc:f2:8d:1c:6c:89:d9:60:39:d2:f5:be:f5:f4:99:
2b:a1:86:16:e8:3c:0b:03:08:e5:92:87:bc:11:b0:
0c:26:8b:80:03:ab:57:0b:ef:a6:89:48:da:76:68:
0e:df:b1:25:27:63:2e:15:a4:fc:d0:b0:60:10:90:
2d:f2:c2:8a:78:71:7e:be:eb:4b:dd:0a:e6:49:b7:
b8:52:40:61:2a:62:29:83:e9:5a:b5:6c:93:bf:0b:
85:37:e4:a4:d4:9e:cf:c3:7a:df:f4:d7:8d:11:30:
cd:18:d8:75:56:6c:2a:96:28:c6:98:95:9b:d6:d4:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:92:5E:98:65:C2:97:08:59:FA:70:EA:4C:63:12:72:4C:AF:85
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8a:44:4e:79:dc:1b:02:4d:f7:7c:8e:c9:75:bc:e2:64:4d:
83:65:5c:a3:81:05:77:40:18:90:3d:05:6a:e5:aa:0e:83:35:
f1:57:0a:38:7c:36:96:b5:6b:96:5d:10:a3:37:6f:39:19:09:
04:6d:78:12:05:2a:73:9d:f1:af:ae:a6:ea:a8:35:64:15:de:
2a:11:28:47:ab:51:a9:84:b8:87:42:c0:1d:70:da:d4:ba:d6:
75:a2:76:e2:e8:5e:db:08:68:86:66:aa:92:12:e4:e4:ff:f1:
11:88:a7:1c:f2:8d:52:d5:50:10:b3:90:f4:ec:d5:15:0c:bc:
1e:bc:71:4b:8b:15:59:0b:8c:16:9c:3f:50:5d:5c:84:0c:3d:
10:cb:6e:77:6f:2d:b2:f6:fd:a0:96:26:94:5e:26:70:a8:ed:
64:60:5f:71:e6:17:fe:ad:a5:6b:b8:6a:e8:84:52:c6:7a:d1:
29:0a:6f:3b:3f:58:72:ce:aa:50:70:ef:d0:57:d2:c9:1d:77:
33:29:d5:73:4b:6d:05:2c:a8:f6:c2:32:87:12:48:88:43:74:
b9:9f:9b:20:f8:a4:95:bc:49:93:c6:9e:f2:8e:2d:b3:9e:62:
71:a0:6a:08:c0:87:42:96:66:31:ea:39:9a:64:de:52:83:d5:
09:7b:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:02 2026 by rpki-client