Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: GLLvzDGoDoxdJbHQxlTe5J8PMFx3CEi7MGPdRC12tVY=
Subject key identifier: A4:0B:4B:84:B6:CA:B8:3A:EB:5A:36:63:2C:59:5B:6E:B7:1D:2E:6D
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019D28BBE4EB2573CD6A71AF3E41115435BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: EumP86DIBS+7kTjNzNPwhR5Cce5G7ygVraFBP9xuqko=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e4:eb:25:73:cd:6a:71:af:3e:41:11:54:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=a40b4b84b6cab83aeb5a36632c595b6eb71d2e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:17:5e:88:91:c0:f2:42:aa:04:02:e3:66:
c6:83:f5:44:32:5a:7f:20:ab:89:f4:5d:b8:b1:6f:
5e:bf:6d:7c:74:76:be:c1:ad:7c:b4:8e:b1:65:2c:
9c:24:07:dd:e8:dc:32:ff:66:81:ba:4b:49:16:36:
af:67:a3:f5:40:bf:02:ab:38:8a:b7:97:4d:f2:a8:
97:17:fa:3a:ab:8a:58:1a:cf:77:ca:2c:a1:a6:e4:
09:a6:ca:52:76:a3:4a:e0:bc:11:59:30:85:87:ed:
b2:9e:14:ab:7f:5d:28:0e:ec:31:10:63:f2:07:89:
5b:42:49:eb:02:ab:86:6c:8d:68:2c:20:ff:95:13:
5c:27:39:70:8d:16:a0:0a:a4:fc:f6:82:e8:e1:47:
b7:b9:27:7a:72:15:a1:31:ba:07:ff:05:27:5e:e7:
ca:09:3e:c5:6a:95:c8:7a:8e:bf:0b:0b:6d:eb:48:
81:57:58:6f:69:df:36:6c:45:ee:2a:bf:2d:cf:2e:
d0:83:0f:5d:d1:15:c7:6b:3c:7b:0d:42:a6:7f:3f:
d5:70:01:69:bf:12:37:e2:59:a9:c3:bd:f9:e8:b5:
9f:4a:df:c6:90:31:f9:9d:69:18:81:6f:2f:db:a8:
c1:9d:ab:b7:fc:dc:59:aa:8d:85:a4:92:8a:7f:a6:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0B:4B:84:B6:CA:B8:3A:EB:5A:36:63:2C:59:5B:6E:B7:1D:2E:6D
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:01:34:28:4b:15:38:c3:a7:b2:dc:a8:32:52:86:bf:81:ed:
cd:f0:15:3f:36:c5:97:dd:02:40:c8:9f:6e:cc:69:77:e3:3f:
d8:be:b9:8e:76:28:bf:c9:2c:8b:ac:cf:f9:b5:d1:76:b9:54:
8b:b5:ca:37:04:c3:de:9c:1e:96:91:e3:85:b6:c2:60:c6:ee:
bf:fb:83:37:fa:b7:46:39:59:21:4b:aa:01:5e:02:e6:72:d6:
71:d9:b0:83:93:50:61:98:e8:c3:71:96:37:ed:b5:dc:f1:01:
bd:40:26:cc:97:a4:99:55:34:e6:f2:5c:fe:71:5e:60:8f:2c:
fb:a5:a0:4d:9a:6e:b9:f4:7c:f8:91:d8:fc:59:3e:8e:97:0a:
fb:65:48:e5:f5:ab:54:18:12:d3:7c:7d:da:73:8a:9d:28:10:
dd:74:63:3c:3a:57:c4:94:53:7e:d4:7c:f6:f9:54:4a:83:5e:
59:86:6d:3f:63:fd:78:22:39:5a:f6:c3:6d:9f:6d:00:c9:ce:
03:67:63:ed:62:21:29:d4:34:39:76:de:8b:d4:e5:4e:d3:c7:
a4:8d:ac:94:73:ca:53:49:5b:45:df:14:52:41:42:e8:60:50:
1b:a6:13:a0:b6:66:71:82:dd:5b:68:11:76:cc:a5:39:55:ed:
fb:54:f3:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+TrJXPNanGvPkERVDW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGI5OTYzYzk3MmMxZDdhMDNkZjk2ZmFkMjVmNjhlYmQ0
ZmExNDkwHhcNMjYwMzI2MDYwMTM1WhcNMjYwMzI3MDYwMTM1WjAzMTEwLwYDVQQD
EyhhNDBiNGI4NGI2Y2FiODNhZWI1YTM2NjMyYzU5NWI2ZWI3MWQyZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln8XXoiRwPJCqgQC42bGg/VEMlp/
IKuJ9F24sW9ev218dHa+wa18tI6xZSycJAfd6Nwy/2aBuktJFjavZ6P1QL8CqziK
t5dN8qiXF/o6q4pYGs93yiyhpuQJpspSdqNK4LwRWTCFh+2ynhSrf10oDuwxEGPy
B4lbQknrAquGbI1oLCD/lRNcJzlwjRagCqT89oLo4Ue3uSd6chWhMboH/wUnXufK
CT7FapXIeo6/Cwtt60iBV1hvad82bEXuKr8tzy7Qgw9d0RXHazx7DUKmfz/VcAFp
vxI34lmpw7356LWfSt/GkDH5nWkYgW8v26jBnau3/NxZqo2FpJKKf6b24QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQLS4S2yrg661o2YyxZW263HS5tMB8GA1UdIwQY
MBaAFAOLmWPJcsHXoD35b60l9o69T6FJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWIt
NjE2M2I5OTdiNjQyLzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81MDY4MDEtYjk0ZC00YjVkLTk0YWItNjE2M2I5OTdiNjQy
LzEvQTR1Wlk4bHl3ZGVnUGZsdnJTWDJqcjFQb1VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgE0KEsV
OMOnstyoMlKGv4HtzfAVPzbFl90CQMifbsxpd+M/2L65jnYov8ksi6zP+bXRdrlU
i7XKNwTD3pwelpHjhbbCYMbuv/uDN/q3RjlZIUuqAV4C5nLWcdmwg5NQYZjow3GW
N+213PEBvUAmzJekmVU05vJc/nFeYI8s+6WgTZpuufR8+JHY/Fk+jpcK+2VI5fWr
VBgS03x92nOKnSgQ3XRjPDpXxJRTftR89vlUSoNeWYZtP2P9eCI5WvbDbZ9tAMnO
A2dj7WIhKdQ0OXbei9TlTtPHpI2slHPKU0lbRd8UUkFC6GBQG6YToLZmcYLdW2gR
dsylOVXt+1Tz/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:31 2026 by rpki-client