Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: TOJjSUrSQFBErhZw9BMURklGC4SWs0JNmnYn9+dy2p8=
Subject key identifier: A3:F0:8F:6E:96:52:5A:8A:91:06:F6:B6:C7:84:33:DE:D2:C4:FE:AF
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019D2997989C5191538F63EF1F51C6DA177D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 10:01:33 +0000
Manifest this update: Thu 26 Mar 2026 10:01:33 +0000
Manifest next update: Fri 27 Mar 2026 10:01:33 +0000
Files and hashes: 1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: octB+zGmLupblVk12s/Av6GG06XOfGvBNcCEd6h0llA=)
2: FXyAhkD-8Q5q4GQ3avZeolFCnH8.roa (hash: ZUZeRBd+6uQSjPBdIWYrxSWAHVlOiQl5Z7Q0BZoi1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:98:9c:51:91:53:8f:63:ef:1f:51:c6:da:17:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Mar 26 10:01:33 2026 GMT
Not After : Mar 27 10:01:33 2026 GMT
Subject: CN=a3f08f6e96525a8a9106f6b6c78433ded2c4feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:22:94:eb:08:c5:4e:cb:93:8d:04:ed:90:
eb:83:d6:4c:c0:2e:8a:d5:10:7f:36:45:8f:b6:74:
02:b0:c9:42:42:79:c7:ba:d6:96:74:1a:3e:4c:3f:
97:19:33:9b:a0:7d:98:58:63:41:bb:5b:6d:7b:b9:
c1:e7:11:eb:5f:3c:28:14:f1:95:20:ee:a3:83:cd:
b9:d2:34:3b:05:0d:1a:eb:3b:fb:82:2b:c4:fa:cf:
c1:eb:32:e2:89:12:f5:6e:19:67:8d:41:dd:22:e2:
89:36:7c:c9:da:61:c0:97:aa:8a:3e:99:4e:2c:17:
7b:e8:21:f4:99:5d:a1:60:8f:2d:a0:88:1f:d9:0a:
51:96:af:40:0c:f2:e6:95:b0:47:7f:1b:01:a6:f9:
73:60:8b:e9:75:06:60:1e:35:54:90:75:7e:77:7d:
0c:63:2e:ee:9d:7a:d9:f9:05:eb:fa:1f:0d:09:54:
73:3f:2b:21:20:23:b3:c4:7a:98:eb:a1:bd:a0:5f:
3c:c5:ce:d4:38:fd:bf:5c:56:d9:1c:32:3f:08:e8:
08:72:79:2f:70:da:a8:e2:94:18:1d:7a:66:14:e7:
a9:85:34:45:81:20:23:9b:51:26:b6:eb:ad:2e:30:
ed:f2:61:51:94:31:3a:ad:9e:4c:e3:4c:f9:0e:af:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F0:8F:6E:96:52:5A:8A:91:06:F6:B6:C7:84:33:DE:D2:C4:FE:AF
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:96:cf:72:b6:e8:1a:3f:2c:8f:52:17:8a:53:21:2d:b1:3b:
d3:fd:65:2f:db:2e:26:18:74:95:5c:72:fd:ab:84:98:f1:0c:
af:ee:65:2c:2b:ad:ed:13:13:16:a6:c4:d8:c5:64:26:6d:f6:
cd:fa:4b:9b:48:e5:77:cf:88:66:1c:10:77:2e:50:a0:cc:e1:
30:fd:a3:b7:ce:57:fd:28:ed:eb:0e:a1:1a:ea:fd:e2:92:33:
b2:79:05:3c:9c:97:02:60:07:62:16:88:0b:10:e4:3b:13:ef:
b9:ae:ad:f6:ea:6b:8e:02:6b:04:4b:2e:ab:aa:53:da:2e:ab:
ea:5a:fb:91:42:16:cc:87:7d:ba:11:17:0c:5f:dc:0b:2f:57:
92:5c:f6:d4:4e:9e:6d:4b:e8:fc:83:4c:58:42:03:10:75:ae:
e1:d0:8c:86:9e:37:91:c7:d3:60:2e:af:0b:54:54:6f:48:92:
fa:9c:45:21:fa:a3:e6:b8:8b:4e:23:e5:48:1c:11:1a:8e:c2:
6b:48:28:c0:1f:c0:6e:47:89:bf:7c:38:bb:14:3d:59:44:a9:
3d:01:dd:42:ba:ab:bb:87:88:62:9c:98:87:dc:49:20:f4:2d:
0a:ff:35:09:f4:54:39:d7:7a:18:68:0f:9e:1f:31:04:60:1c:
96:ba:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:59:09 2026 by rpki-client