Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
File: A-VjR3yiveae95Q5kflTMwV7PjY.mft (raw, json)
Hash identifier: L8He505p2wEwu53U/8p3LXqezeQv7xCRMS3sDTUFlKU=
Subject key identifier: 53:5D:24:38:3B:F4:F2:24:49:3E:A1:D4:A0:E0:BB:37:46:FA:98:89
Authority key identifier: 03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
Certificate issuer: /CN=03e563477ca2bde69ef7943991f95333057b3e36
Certificate serial: 019D2D05E537B1B6E439ABBF516B1E5E9919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
Manifest number: 06BE
Signing time: Fri 27 Mar 2026 02:00:54 +0000
Manifest this update: Fri 27 Mar 2026 02:00:54 +0000
Manifest next update: Sat 28 Mar 2026 02:00:54 +0000
Files and hashes: 1: A-VjR3yiveae95Q5kflTMwV7PjY.crl (hash: 1quF9jvq8XhmjYzInq57pGqnRPK6K0Gbrcs0IsLzOa8=)
2: _2cf_EXh2kLfCOS7aAjrWSITrHc.roa (hash: zrJvNFrtdqhVjP3rBieXtFDSJaOIOQdUfZ5Ouc9oaEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:05:e5:37:b1:b6:e4:39:ab:bf:51:6b:1e:5e:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e563477ca2bde69ef7943991f95333057b3e36
Validity
Not Before: Mar 27 02:00:54 2026 GMT
Not After : Mar 28 02:00:54 2026 GMT
Subject: CN=535d24383bf4f224493ea1d4a0e0bb3746fa9889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:21:8a:e7:c7:cf:49:ad:27:b9:2f:03:9f:
d8:ab:38:2b:b3:83:79:c2:df:ac:10:27:80:5c:f4:
b7:0d:f2:ac:f1:dd:42:f0:3e:1f:83:88:b3:fb:f3:
75:a5:c2:29:9c:68:7b:68:60:42:08:20:71:98:33:
2f:15:ac:3a:8d:01:10:cd:08:92:ae:cc:64:3f:cc:
45:b1:8f:75:8b:57:a6:98:ed:1c:23:ca:58:bd:f3:
07:d7:03:9c:89:61:ee:9d:d8:c9:39:31:d7:40:69:
01:ff:66:61:92:d1:a8:02:c8:64:96:4b:10:7f:ba:
9d:0e:72:c7:80:7d:ea:92:bb:a1:c5:1f:00:c7:85:
19:7b:57:2e:7f:84:e9:aa:53:74:02:5e:0d:5e:e8:
e3:b5:15:a4:78:59:28:ea:67:9b:bd:e2:ec:8b:59:
6e:28:f1:87:d5:8e:06:f8:c5:61:d5:a5:cc:fd:4a:
9d:ca:09:5e:89:6e:71:de:bd:88:8c:da:19:c3:9d:
c5:4f:b2:31:4c:5a:92:de:69:19:26:2c:91:57:c3:
f0:f0:5a:61:b0:c7:55:69:bc:7c:b2:ff:17:9c:88:
b2:c3:f4:b0:4b:0d:77:ee:f3:ff:7e:10:28:7c:c9:
a2:f5:02:bd:5c:e8:44:be:0c:c0:00:c4:eb:cc:87:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:24:38:3B:F4:F2:24:49:3E:A1:D4:A0:E0:BB:37:46:FA:98:89
X509v3 Authority Key Identifier:
keyid:03:E5:63:47:7C:A2:BD:E6:9E:F7:94:39:91:F9:53:33:05:7B:3E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-VjR3yiveae95Q5kflTMwV7PjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7eb074-1331-4dea-9e60-1f1ec400fa50/1/A-VjR3yiveae95Q5kflTMwV7PjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3c:9c:f0:96:45:db:bc:32:33:6a:87:1d:86:14:37:60:d6:
b6:d8:d0:c2:65:bf:c5:51:ef:80:7d:05:d8:85:ce:2d:8d:c3:
ca:96:4c:5d:39:16:04:1d:1f:27:2c:66:8a:ee:eb:6e:c3:1c:
52:78:7c:f4:39:cd:fc:89:b3:9f:25:f2:97:7b:5d:57:51:04:
f3:27:f9:ad:31:0e:e4:f0:b4:96:af:86:8f:dc:42:6f:96:68:
f7:3c:da:04:c6:64:50:d9:55:14:db:7c:b0:b1:91:1f:ff:b6:
a6:70:f3:ff:31:8c:e3:50:33:11:48:9f:4d:59:b8:ea:2f:5d:
3f:95:47:2d:64:cb:4b:96:49:a5:03:e2:83:29:7a:94:5b:14:
d4:06:19:9b:66:54:77:a6:b2:06:4f:1d:fd:cd:3a:ff:f7:99:
10:d3:95:ba:3e:40:39:c5:70:99:6c:13:8f:27:87:9c:fa:9b:
11:43:aa:92:44:97:5d:7c:10:71:03:c0:1a:ef:8f:36:74:4c:
5a:fd:b4:92:eb:fd:3f:34:6c:24:f7:09:ae:ea:a5:9f:0c:6b:
a6:aa:ac:aa:9f:9c:4c:59:32:6a:46:0c:a3:41:ce:9f:88:4a:
bf:66:10:62:9e:fa:d5:4f:1e:03:7a:97:fa:c0:98:5f:46:6e:
18:94:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:17 2026 by rpki-client