Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: +0AbCmoUM4EMAEluvmnvdIfvRD2ypUtGYUoyC3Z/Q1Q=
Subject key identifier: 88:72:4C:F4:55:BD:74:31:CC:91:21:68:34:DA:0F:0E:BB:72:7D:5E
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019D27E00B2AC86C387E7F5A63BEA45DD2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: vmJM0QemfT83d89+yO+berKN0jBlcNnC3RrpqTMCylo=)
2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0b:2a:c8:6c:38:7e:7f:5a:63:be:a4:5d:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=88724cf455bd7431cc91216834da0f0ebb727d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:37:5f:19:52:74:3b:ab:12:ab:f7:32:75:
0f:ca:dc:ab:2c:58:b6:7c:96:55:2b:92:49:a6:b7:
74:f9:18:d8:a5:7c:00:3e:3a:e0:bd:21:80:98:b6:
27:9f:d9:12:00:e0:73:63:13:2b:13:13:7b:84:b2:
18:d9:5b:d8:14:43:38:60:ce:32:56:81:97:ad:76:
9a:c3:7a:6a:7a:5d:29:81:07:39:cf:19:cf:b9:9f:
45:22:e4:28:5c:92:67:59:f8:2f:0c:1c:db:c8:a9:
4b:d1:19:af:04:f5:38:a2:27:2e:6d:3a:35:4c:14:
03:0e:12:a1:d1:08:1d:69:9c:f1:65:5d:4c:45:1d:
e4:d3:c3:53:83:1f:b3:79:8d:9b:c5:09:2b:b0:53:
3d:85:ce:ea:69:0c:a7:64:9b:6d:aa:3b:f2:b9:18:
43:3e:41:53:64:8b:45:76:5a:23:b6:95:33:b8:fa:
91:49:68:35:f1:c0:cc:a2:29:13:fc:8a:d0:31:97:
db:99:f6:06:c7:ed:cd:6e:06:f2:b2:d0:28:b5:a2:
d8:e1:02:3d:71:a6:27:b1:2f:e5:59:7e:d1:df:2e:
e3:0b:c2:fb:4d:05:8c:e6:93:92:20:30:06:73:cb:
07:29:be:a6:23:ac:04:82:e6:07:11:7d:e2:de:66:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:4C:F4:55:BD:74:31:CC:91:21:68:34:DA:0F:0E:BB:72:7D:5E
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:6c:d6:7e:b4:4d:62:0d:e3:8b:df:f0:5d:39:b9:b8:7e:
1c:07:32:85:70:4b:18:32:a0:10:62:b7:fa:c5:c2:5a:91:e8:
45:d5:a1:66:4a:da:d4:4f:4e:7b:0c:9f:75:ff:ad:80:28:10:
83:0f:1e:44:6f:39:32:09:1a:e2:13:0c:01:9b:af:ec:d7:fc:
4b:9e:49:3e:1d:cd:fc:b9:16:ce:f5:fc:14:a2:37:9e:52:92:
a6:b9:22:30:cc:dd:ae:e5:14:0d:4e:b1:d6:ea:4e:e3:d7:24:
1d:c4:5e:aa:77:2d:26:13:92:f8:81:48:fc:9c:bb:c8:c8:59:
41:1f:6d:7c:85:91:7c:92:a3:fb:1f:0c:f8:db:43:51:55:7d:
59:e9:09:ae:7f:8d:14:b9:a2:4a:65:59:55:d1:89:ba:87:9c:
05:c1:5f:67:00:e3:c1:6c:9a:72:f4:bc:17:84:ad:a3:18:9a:
a1:40:d2:4b:64:4e:ee:fb:3c:94:a3:1e:40:f3:d7:b6:bf:7f:
2b:66:bb:51:08:ca:30:62:12:27:60:10:ed:e3:38:29:42:6a:
17:5b:5a:15:f5:50:52:55:39:85:05:86:d7:ea:cc:46:73:f1:
f3:a2:cb:6e:ab:55:4c:b2:80:a3:0b:a4:34:c1:bb:de:cf:d3:
73:75:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:53 2026 by rpki-client