Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: 3VVcXgqcfgXCyaVOsJnK8wOahBzWCXgdhO+jNZJ9KRw=
Subject key identifier: B1:CE:2E:81:24:B8:CC:1F:D6:22:35:4D:31:A2:24:79:66:FA:98:B4
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019D265EEBDDAD1293EF1A87DFCE40D2DE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:48 +0000
Manifest this update: Wed 25 Mar 2026 19:00:48 +0000
Manifest next update: Thu 26 Mar 2026 19:00:48 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: Sk867Oqb/XR134VJXmOBoWUi0oeGbR//rrXcttFPIHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:eb:dd:ad:12:93:ef:1a:87:df:ce:40:d2:de:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Mar 25 19:00:48 2026 GMT
Not After : Mar 26 19:00:48 2026 GMT
Subject: CN=b1ce2e8124b8cc1fd622354d31a2247966fa98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:4d:a3:c7:f5:5a:7e:ef:e7:55:7d:86:a8:
6b:98:34:d5:f3:5c:7c:03:00:40:6a:31:12:d0:b9:
23:3d:37:0f:d5:4a:a2:70:11:85:6c:99:7d:c0:50:
e8:d4:ee:22:4e:e2:06:2d:9e:2a:2f:96:6b:51:77:
f0:95:e5:d4:3e:50:14:3b:c5:a1:6a:ec:a7:5d:5f:
ca:6f:2e:62:5c:b4:39:b0:9d:f4:a1:cf:4d:fc:3c:
42:52:f7:3b:dd:1f:19:a0:27:ed:d2:59:cf:1b:8e:
a4:65:cc:65:8b:2c:29:99:db:c4:09:58:7b:b4:b7:
21:16:28:ca:91:3a:65:cd:21:ce:dc:4b:11:55:98:
d1:91:8c:52:26:e7:78:39:50:55:cd:77:07:ed:d6:
69:dc:28:e2:eb:9f:c0:c1:a0:c2:f7:1e:7f:bb:b5:
ca:7a:ed:9a:0b:a5:77:fb:dc:18:c8:dc:32:9a:3d:
d9:3a:7d:26:96:d9:e9:d5:14:2b:28:a0:74:fb:f3:
cb:20:93:54:8d:d3:52:80:38:ea:f3:39:3a:03:a8:
0b:27:bc:25:74:c8:a1:ee:c7:32:73:22:52:b6:37:
4d:d3:30:18:90:ba:55:00:d8:04:38:5e:58:30:92:
8f:42:ed:b3:96:e5:4c:03:63:2a:18:26:60:35:77:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:2E:81:24:B8:CC:1F:D6:22:35:4D:31:A2:24:79:66:FA:98:B4
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:37:2d:99:58:48:b2:80:0c:9f:be:17:6c:ce:c6:f7:cc:2d:
9e:cb:93:be:1e:f2:7e:b0:85:88:d8:18:4a:d1:74:79:01:93:
b3:db:24:c6:e7:15:46:bb:e4:bb:73:ed:2b:59:90:43:69:18:
c3:eb:be:6d:be:11:db:8e:34:f7:c5:1b:15:81:71:eb:bd:fc:
01:24:bf:6c:37:c1:be:b3:2f:39:9e:2e:8c:76:94:6e:8d:30:
7c:1d:15:26:55:a0:fa:44:50:b4:54:4d:ac:0e:7b:af:77:2c:
81:9c:f7:92:b8:45:78:5c:91:ad:0d:c7:89:eb:99:a1:52:c6:
3e:e1:76:7c:ad:86:21:f3:c4:2a:42:66:43:f2:c6:a9:cc:da:
25:83:71:0a:b1:5a:b6:f9:c2:aa:83:f2:ed:fa:a2:7f:c7:78:
b1:34:3d:5d:f2:c3:a3:99:2e:5d:ce:a6:ab:a9:b0:d6:92:c7:
d6:42:51:8b:e5:c7:e2:c5:79:b1:da:69:fe:50:33:de:1f:68:
f3:7c:54:82:da:ff:f4:f0:d4:c1:6d:8a:02:89:01:2c:62:fc:
05:3e:63:de:75:76:1f:5f:e8:73:21:3e:47:07:8c:e4:0a:e5:
ea:6d:04:8f:9d:d0:7f:03:70:a6:09:82:3c:ad:b0:f3:85:e3:
e7:c6:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:20 2026 by rpki-client