Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: Rcm3Zwdj31BYoH6aMaiRUYDNEG2eOiA4TDpGpq3/XzQ=
Subject key identifier: BA:C0:56:AC:8C:C1:DE:47:C4:CE:F5:80:31:3A:6B:0A:BC:C1:68:13
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 019D329A790EB1A35A5E08B75C4F400917F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 09A3
Signing time: Sat 28 Mar 2026 04:01:17 +0000
Manifest this update: Sat 28 Mar 2026 04:01:17 +0000
Manifest next update: Sun 29 Mar 2026 04:01:17 +0000
Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: aGusAsLlhBBmPa8tz4iy+xvgkurXtAdxe6UdJttZOB4=)
3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:79:0e:b1:a3:5a:5e:08:b7:5c:4f:40:09:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Mar 28 04:01:17 2026 GMT
Not After : Mar 29 04:01:17 2026 GMT
Subject: CN=bac056ac8cc1de47c4cef580313a6b0abcc16813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:79:a3:7d:84:8a:f8:39:13:21:12:58:56:
2f:f4:a8:b9:12:14:87:47:81:c3:62:1e:9c:ec:1b:
16:f7:ff:bc:6b:c7:c7:87:26:bf:2e:53:de:99:a3:
bd:57:18:ba:2b:8e:a6:17:fe:47:1d:d0:fd:7d:1a:
7f:0d:c2:90:97:0b:3c:5f:c5:76:fb:cd:ee:f3:c3:
60:b0:72:56:0a:50:a0:e0:8f:0b:b0:6c:22:79:4f:
52:a1:1c:37:be:71:6d:07:c1:15:ff:c3:bf:8d:e8:
70:b6:50:73:0a:c1:48:04:8b:4a:a1:b2:97:63:27:
29:22:7a:3f:88:a0:98:cb:6b:ee:be:8f:a3:dd:cc:
fb:3f:54:c0:dd:c3:69:33:5c:55:71:e3:17:11:d2:
53:f0:52:a8:74:57:85:2e:ff:94:7c:ee:8c:de:8a:
00:fd:39:23:0b:9f:2e:be:27:31:b7:29:45:48:66:
9d:db:54:70:86:c8:f5:5f:fd:ab:78:97:24:0f:eb:
01:8c:45:48:4b:7b:e1:44:1b:10:f5:0d:dc:60:07:
97:84:5c:bf:0c:36:12:e2:9a:d2:89:55:5a:1a:57:
11:8c:c3:90:63:4f:e8:e1:44:0e:44:c3:fd:a3:30:
d0:61:bb:c1:f7:40:82:4e:58:2e:26:30:fb:15:74:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:56:AC:8C:C1:DE:47:C4:CE:F5:80:31:3A:6B:0A:BC:C1:68:13
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:21:63:7c:84:ff:07:35:00:41:2a:60:88:d3:ee:9f:b1:83:
77:2e:f2:90:cc:a5:ba:18:c4:f0:93:88:01:4b:70:76:28:36:
46:7f:e1:be:b7:7d:96:19:66:95:da:18:cc:da:50:36:b1:a9:
51:36:1b:7c:a9:22:c4:ae:65:b0:f1:28:c5:40:8e:d3:90:8c:
d2:95:b7:5a:6a:33:4f:61:ea:83:ec:c1:b3:f4:6b:1b:9c:f9:
d1:db:71:f8:9d:08:52:35:01:4f:b9:ea:56:14:47:ba:a9:fb:
53:74:c3:22:c3:59:8b:da:15:51:37:ae:fd:cf:02:1b:26:19:
68:4d:56:c8:73:d6:98:8a:51:03:02:d5:8b:73:0a:cd:18:57:
2a:6c:87:f4:32:a2:a9:9e:9a:bd:ff:af:e6:3f:21:86:29:19:
87:45:32:d8:a7:bd:51:ab:2b:30:86:04:68:cf:f9:44:b1:ab:
a5:ab:0d:3c:e9:5b:13:2a:38:0e:f4:f3:03:70:31:6b:c9:72:
e5:ad:e6:3b:fc:24:38:06:05:bf:4b:48:ac:15:c1:16:e7:b2:
2f:8d:5e:f6:c7:11:1f:4c:81:57:c7:7e:8b:69:99:f1:04:12:
b0:d7:a5:d1:bb:6d:63:de:90:67:0d:a0:ce:81:57:1a:12:95:
39:2d:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:50 2026 by rpki-client