Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: V6np/5XJ1ps+HCJlrd0igF66cyNd9ao03yadOjuuGaI=
Subject key identifier: 31:44:F8:2D:DB:31:B8:54:F1:E6:2C:68:43:D8:E1:48:5A:24:80:D0
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019D27A9238C9E72A56E6D817A563B1806B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0ACF
Signing time: Thu 26 Mar 2026 01:01:29 +0000
Manifest this update: Thu 26 Mar 2026 01:01:29 +0000
Manifest next update: Fri 27 Mar 2026 01:01:29 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: 5itjxrF+VgW7u6WFl/03dsZGJdyUoe6l3/TCxstD1Bc=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:23:8c:9e:72:a5:6e:6d:81:7a:56:3b:18:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Mar 26 01:01:29 2026 GMT
Not After : Mar 27 01:01:29 2026 GMT
Subject: CN=3144f82ddb31b854f1e62c6843d8e1485a2480d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:b7:fd:c5:d4:f7:96:1f:95:53:34:45:b5:
b7:26:12:ae:42:3e:83:a8:98:f4:eb:73:74:47:dd:
e2:8e:c0:ba:d8:5c:13:53:97:b6:e4:c0:eb:7f:f2:
88:74:24:26:50:7f:73:e7:cd:0a:a3:5d:5e:da:cb:
2a:39:1f:a2:2d:cf:ad:52:bb:d3:70:e0:c6:b0:28:
e1:48:72:9f:b0:33:6f:e7:99:ad:f3:70:61:5f:84:
58:c3:a0:69:70:9f:e4:9f:59:72:4f:1a:8a:9f:11:
ff:a0:dc:c1:a3:03:49:24:1e:c4:07:8d:71:c8:3c:
4e:30:fd:c2:b5:06:15:fb:a4:d0:9b:cb:85:e4:9a:
9a:c3:81:79:08:a4:7a:e9:25:0a:d5:4e:e6:5c:02:
0a:bd:d6:23:18:49:26:34:f2:d0:aa:18:ef:8f:54:
eb:d8:7d:6d:b4:ff:3f:9e:ab:b3:76:6f:23:41:43:
51:c1:80:f4:b5:0b:e5:98:d3:19:27:48:9b:de:9b:
2f:fb:2b:c9:22:21:09:8a:71:bc:13:30:9f:2e:13:
a6:06:af:3c:62:d1:49:b8:87:d6:8c:4b:be:65:ff:
ec:b9:7b:e6:a9:6c:b0:04:a7:95:28:ee:36:15:f6:
b5:9b:02:f6:7c:bc:21:da:f8:b9:dd:8f:09:b7:e2:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:44:F8:2D:DB:31:B8:54:F1:E6:2C:68:43:D8:E1:48:5A:24:80:D0
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:98:69:d7:35:66:b1:23:3b:21:8c:27:ee:01:ee:db:57:
e0:a8:86:2b:a2:a2:8e:b1:3d:d5:6e:b7:94:78:4d:a0:67:9c:
4f:2e:1f:fb:93:b2:4f:1b:99:83:d0:ba:5a:2b:1a:dd:9f:c2:
d6:de:ce:37:34:ea:cb:69:43:9f:34:e4:d8:44:90:17:6b:78:
16:65:94:94:a2:64:fc:ac:80:7c:fc:2f:65:8f:c1:fd:eb:13:
aa:91:bb:56:6a:73:f4:40:57:a5:63:d6:a9:f2:80:dc:1a:9d:
59:ca:e4:3b:33:88:f0:2d:f8:d2:6c:e8:f9:56:e5:04:2f:66:
57:ac:2d:be:1d:64:e8:79:f0:b1:74:c1:b4:77:a4:b6:a1:f6:
3f:68:39:d8:92:6a:93:09:b4:d6:c1:f2:a0:46:44:c3:a5:ba:
45:04:96:12:0f:ed:71:75:ba:2f:10:1a:f1:5d:11:89:d1:78:
6d:95:9e:20:7c:3c:ed:1d:5d:b4:ed:de:ce:cf:e8:a6:38:60:
8d:9e:69:09:90:09:22:ef:a5:f2:a4:af:99:d4:d3:25:af:20:
6b:34:be:17:fd:15:f8:98:1c:8d:86:b7:d2:0c:50:35:4a:2c:
c7:35:44:c8:8e:9f:61:79:00:24:91:f7:2e:e7:06:62:83:34:
21:31:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:25 2026 by rpki-client