Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier: aeFRXjD6kNjE9q97weZZkrOG68xLnHTliTyRH804dQc=
Subject key identifier: 26:23:CC:88:41:4F:35:F2:31:1D:74:9A:14:FF:1F:5A:2A:B7:0D:22
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 019D2696314E623B135ACE6C8CC967B44421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number: 1397
Signing time: Wed 25 Mar 2026 20:01:10 +0000
Manifest this update: Wed 25 Mar 2026 20:01:10 +0000
Manifest next update: Thu 26 Mar 2026 20:01:10 +0000
Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: DNHvh1mz1UqaHe11DQ9mp9ggwpExOqTCgzVSBFQy0Q8=)
2: WxImH-LXs0d6zerX8rbJADEs0b4.roa (hash: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw=)
3: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (hash: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo=)
4: jEFjyAFrXDcV4VZRl6Fg4c-tBbI.roa (hash: SCNZ1jcp85B9JQOpcfN9KIw7MGVU7KDV6MeoqHXZssQ=)
5: x9MYFIf2PoZ4-7JYUxzgREaOECQ.roa (hash: pgslKdJlC5emb7XS7811wddrmA1E6OgVQZWwLKWbTac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:31:4e:62:3b:13:5a:ce:6c:8c:c9:67:b4:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Mar 25 20:01:10 2026 GMT
Not After : Mar 26 20:01:10 2026 GMT
Subject: CN=2623cc88414f35f2311d749a14ff1f5a2ab70d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:06:2b:d2:65:b3:c0:f4:b4:ba:b0:ee:69:
43:64:57:4a:03:25:6f:25:e1:81:22:35:53:47:7a:
94:c8:18:a4:cb:86:9a:55:7d:7d:38:5f:9e:84:70:
ce:b4:46:83:57:45:c6:94:a0:07:de:5f:43:3f:4b:
3c:4f:9e:47:f4:d9:c6:b7:86:1d:b3:1d:84:07:69:
4c:7f:4d:a1:49:fa:0e:47:ec:a8:94:b2:6a:60:e8:
f0:a7:b4:a2:00:f6:db:95:8d:fa:17:78:d5:02:05:
99:ad:45:0b:c9:c8:5d:48:c5:b2:d2:1d:3a:88:d9:
c8:df:b3:8c:b6:08:b4:fe:77:05:c6:71:0d:d3:c8:
c6:d6:70:59:44:6e:fd:a1:b3:10:01:c2:f6:a5:a8:
29:84:a5:d0:9b:43:cf:ab:8e:d2:f6:56:69:f2:a0:
b0:48:97:c2:1a:1c:52:cf:35:a7:96:c6:b9:21:c2:
e2:f5:70:8d:97:47:35:c4:54:89:8f:bc:67:54:ba:
e7:80:a6:75:42:24:72:85:af:a6:ee:d5:fb:79:78:
bd:33:64:9a:05:e7:6e:ee:fc:bd:fd:d4:14:1b:28:
9a:2c:43:85:0c:fb:c3:72:4a:f0:da:a7:cf:9e:c5:
55:27:d3:d9:d4:7e:89:e2:16:fc:ad:b3:2a:1c:ac:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:23:CC:88:41:4F:35:F2:31:1D:74:9A:14:FF:1F:5A:2A:B7:0D:22
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:d1:83:47:fb:da:86:51:7b:ec:b8:6c:dd:01:bb:7f:2e:
ce:17:df:ef:e5:9b:17:c3:69:ed:6d:4b:13:5b:bc:5f:f7:47:
b2:3c:2e:63:63:be:db:83:b7:58:6f:84:40:a7:4f:9b:20:37:
86:99:63:8d:1c:42:10:41:f9:f7:45:39:85:93:d5:5f:5d:b7:
fc:39:d4:bf:c9:fa:b4:d3:bb:e2:32:c2:53:bf:7f:bf:7a:b6:
e6:da:d2:2f:2a:ac:da:d8:db:e1:34:c4:68:a3:c9:cf:88:15:
d2:f5:46:72:87:0e:d6:82:3e:eb:22:9a:c7:4f:7d:58:a8:54:
f7:d1:05:35:fa:0b:9c:93:66:32:9c:0d:02:6b:02:34:ef:38:
c3:ba:ae:0a:9e:03:31:6b:eb:95:ea:02:c9:72:be:71:c9:7e:
97:71:bd:6d:da:c6:a5:da:c1:30:c7:45:b2:5c:04:b5:f1:65:
3d:f2:5e:c7:25:c2:5b:8a:6f:51:17:32:87:26:fa:1a:64:0f:
b1:2a:b8:54:c5:f8:68:2b:e1:bc:af:c3:57:75:45:cb:c1:57:
e9:d0:a3:bf:a7:e7:1a:fb:84:97:c8:21:a9:f2:b3:dd:30:89:
91:bc:d7:2a:92:23:47:62:d2:e8:92:86:40:c0:7e:ba:0b:70:
7b:de:e4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljFOYjsTWs5sjMlntEQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk
ZmUyYTIwHhcNMjYwMzI1MjAwMTEwWhcNMjYwMzI2MjAwMTEwWjAzMTEwLwYDVQQD
EygyNjIzY2M4ODQxNGYzNWYyMzExZDc0OWExNGZmMWY1YTJhYjcwZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLsGK9Jls8D0tLqw7mlDZFdKAyVv
JeGBIjVTR3qUyBiky4aaVX19OF+ehHDOtEaDV0XGlKAH3l9DP0s8T55H9NnGt4Yd
sx2EB2lMf02hSfoOR+yolLJqYOjwp7SiAPbblY36F3jVAgWZrUULychdSMWy0h06
iNnI37OMtgi0/ncFxnEN08jG1nBZRG79obMQAcL2pagphKXQm0PPq47S9lZp8qCw
SJfCGhxSzzWnlsa5IcLi9XCNl0c1xFSJj7xnVLrngKZ1QiRyha+m7tX7eXi9M2Sa
Bedu7vy9/dQUGyiaLEOFDPvDckrw2qfPnsVVJ9PZ1H6J4hb8rbMqHKxeAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYjzIhBTzXyMR10mhT/H1oqtw0iMB8GA1UdIwQY
MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt
ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx
LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJPRg0f7
2oZRe+y4bN0Bu38uzhff7+WbF8Np7W1LE1u8X/dHsjwuY2O+24O3WG+EQKdPmyA3
hpljjRxCEEH590U5hZPVX123/DnUv8n6tNO74jLCU79/v3q25trSLyqs2tjb4TTE
aKPJz4gV0vVGcocO1oI+6yKax099WKhU99EFNfoLnJNmMpwNAmsCNO84w7quCp4D
MWvrleoCyXK+ccl+l3G9bdrGpdrBMMdFslwEtfFlPfJexyXCW4pvURcyhyb6GmQP
sSq4VMX4aCvhvK/DV3VFy8FX6dCjv6fnGvuEl8ghqfKz3TCJkbzXKpIjR2LS6JKG
QMB+ugtwe97k4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:03 2026 by rpki-client