Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: sQAwvflB5OLPScmrAtPRNmWY5z5Pb5CYYJyLT3ScksY=
Subject key identifier: 05:2E:EA:2A:9E:AF:76:3F:89:A9:15:C5:B4:67:8E:3C:89:75:11:A3
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 019E1D901421ACC0D7F6BCF5351578E60A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: DaHZNQRTL7cM7CIAl8O9wu9CK1Vq7s1keleHcdAt7yU=)
2: eG7fxABMtqyI5yUjBnhzemDqnwY.roa (hash: HFmCfi29zh6VfW2O1TlhihYlPxvODE9zNcg66Ls00yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:14:21:ac:c0:d7:f6:bc:f5:35:15:78:e6:0a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=052eea2a9eaf763f89a915c5b4678e3c897511a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:d6:3c:ef:ca:4d:06:c7:df:74:bb:90:5d:
ce:cf:87:92:5b:32:3b:4e:7d:0c:56:37:33:ce:f4:
53:11:85:8f:66:a8:0c:19:97:0d:a3:74:73:a7:e3:
53:34:a6:85:8d:f8:7c:e4:23:82:49:fe:ce:f5:d7:
7f:93:b9:3e:9e:7d:31:f7:65:c8:18:f8:af:32:21:
63:3f:1f:62:fb:b1:6f:29:d1:85:91:bd:18:8d:ea:
86:bf:9b:ad:2e:d3:57:5d:df:b5:98:c6:9b:81:a7:
f5:53:67:f0:b9:eb:0f:9c:fe:22:70:cd:22:a9:bd:
5f:02:11:0f:83:41:4d:bb:7e:aa:2a:a7:97:5e:fd:
0b:a1:bc:9f:93:c3:2c:0f:19:20:0e:c1:bc:c8:65:
1b:08:d3:e7:98:1c:33:79:2d:d9:e0:75:a6:f1:fb:
a7:fd:87:a3:a8:b6:ac:50:08:4f:dc:3b:cb:5d:88:
56:14:87:ae:e1:d5:70:7b:f2:db:0a:81:15:6a:df:
42:9b:3a:8e:1a:80:f5:d2:ee:32:c5:87:5a:02:d5:
24:af:21:c5:dc:35:57:14:b4:bd:20:84:d2:8f:20:
aa:8f:af:92:d6:be:32:21:31:cc:e7:c6:a1:cc:f4:
d3:fd:0c:fe:5f:1e:7b:ec:3d:fe:8f:7d:3a:18:3c:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:EA:2A:9E:AF:76:3F:89:A9:15:C5:B4:67:8E:3C:89:75:11:A3
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d4:d7:96:64:7f:3d:d8:b1:af:c0:1e:f2:fd:e5:45:78:66:
09:1c:2e:62:b6:ef:be:5a:0e:ac:6d:d8:fb:84:7b:9d:84:a9:
be:6a:1f:e8:08:d7:70:d0:bb:95:dc:8d:99:46:41:5c:99:14:
d2:7d:ce:3d:8c:9a:77:a6:60:f0:f7:89:16:7b:63:44:fc:25:
30:ad:aa:a3:b2:7a:4e:7e:96:64:d2:f7:3a:94:c9:07:df:84:
8c:f4:db:d7:e5:d4:ac:8b:36:c2:9f:54:2d:f9:00:21:5a:b8:
14:f9:23:61:76:53:04:73:31:51:8a:1e:b2:39:70:fa:94:77:
01:71:79:05:e1:46:b9:52:70:d1:e6:2c:87:de:5f:5f:89:0a:
10:91:c6:2b:81:72:c5:99:14:07:11:17:9a:52:af:e9:87:77:
6a:66:4e:61:ce:f6:2f:d4:0d:6e:6b:35:22:e2:e2:a0:20:d1:
f9:60:88:5e:8c:09:65:48:bc:8a:88:5c:fd:02:17:31:24:03:
61:04:ad:5e:eb:b6:a0:43:44:40:3c:2d:dd:6f:02:e0:59:43:
3f:c8:22:e3:91:da:25:1d:21:29:7c:37:45:38:73:b4:13:2d:
19:07:ed:46:f4:11:57:9a:08:14:f1:03:ec:5a:2b:05:18:86:
f4:67:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:46 2026 by rpki-client