
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: UZxUFcwaphbaNCosMYRCaiKpSq7l7xECX4U9c3D50dw=
Subject key identifier: 7E:BC:24:12:48:46:8F:27:8E:1C:DE:79:1A:69:DF:57:03:3A:F0:A9
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 01A0CA7D944570CCDA5D96FC1EDC09198223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0CB1
Signing time: Tue 22 Sep 2026 19:00:22 +0000
Manifest this update: Tue 22 Sep 2026 19:00:22 +0000
Manifest next update: Wed 23 Sep 2026 19:00:22 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: 6HVrKSt2fXYyeYP4ei8UiNhXHkyK3BvQ+SKLOk2aUlc=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:94:45:70:cc:da:5d:96:fc:1e:dc:09:19:82:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Sep 22 19:00:22 2026 GMT
Not After : Sep 23 19:00:22 2026 GMT
Subject: CN=7ebc241248468f278e1cde791a69df57033af0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:cc:ce:14:52:0d:7c:98:24:1c:b1:78:f1:
de:91:53:84:2e:c7:92:95:6a:62:a1:9e:6f:61:f0:
bf:a9:a0:ee:09:81:13:3e:6f:2c:9f:6c:93:60:f3:
30:09:29:ff:39:29:d4:5f:e9:e0:83:d5:cc:05:ea:
8d:c1:5b:f9:13:95:c8:e9:00:a0:9f:16:6a:84:65:
d2:55:29:3c:08:22:d5:ea:f0:32:02:c0:13:25:a3:
68:b2:d3:6c:6d:54:16:50:51:44:80:f4:31:55:2c:
bd:5e:ad:6b:27:76:8d:7f:3a:2f:f4:29:76:24:3e:
65:ea:f9:c3:74:81:cb:a5:86:3c:74:05:7b:93:a7:
aa:db:e5:1d:5b:79:f0:37:00:db:91:ad:50:45:7e:
14:15:01:58:bb:96:ea:50:e6:af:12:c1:21:cd:06:
d4:bf:cf:1b:9a:97:4c:e1:db:78:bb:4c:31:34:8d:
3e:48:92:59:f6:19:ff:ce:cc:11:19:bb:eb:2d:21:
80:a0:f5:36:58:02:07:a8:3f:6c:64:ff:f4:e4:80:
2f:df:bd:1b:bd:69:d5:11:8b:21:f3:15:13:ae:ee:
53:c2:da:a9:05:ff:63:a5:c6:79:56:fb:a3:3f:43:
3e:73:36:79:23:57:05:73:18:7b:2d:d6:b7:9a:11:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:24:12:48:46:8F:27:8E:1C:DE:79:1A:69:DF:57:03:3A:F0:A9
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4c:82:03:b1:6f:04:d8:69:b7:1f:4c:7f:1b:8e:30:ad:33:
7f:07:74:8c:27:a7:dd:9c:a3:61:40:fd:70:23:6e:15:de:0b:
b2:e2:c6:bb:cc:12:64:f8:6c:a4:de:12:3b:02:62:19:5a:84:
29:8c:a6:a8:49:ef:12:a0:ae:74:44:29:21:95:d9:7e:30:3b:
dd:ca:4f:8d:30:7d:12:c7:f1:c3:fd:4f:c7:40:ac:08:02:0e:
80:db:25:a6:85:c8:4c:2e:3e:7b:c5:cb:d8:08:29:a2:a8:1b:
ee:cd:ac:e9:36:67:dd:c0:7f:79:48:f5:bc:73:a7:17:c3:e3:
2f:23:ea:98:3b:33:6f:c5:b3:36:b3:9b:76:a2:59:53:ba:32:
2f:79:03:6d:b7:3e:6c:bd:09:1f:17:15:5a:ad:0e:f9:ff:a1:
02:2f:30:18:30:e1:46:29:bd:93:c3:05:c3:cf:30:92:55:36:
a8:e0:c8:9a:94:25:fb:f6:27:31:db:d0:10:3a:1e:c1:8e:cf:
12:50:95:ba:c0:80:ca:c5:fd:51:aa:a0:17:53:f8:05:08:4e:
60:d3:5d:ca:b0:2d:3c:83:f1:73:1b:3e:7d:85:cb:17:e6:48:
d4:27:bb:9e:67:74:ed:8f:b2:55:8f:1a:b0:a2:07:7e:27:04:
02:9a:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:31 2026 by rpki-client