Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: t/1z0zCv9+V1v30GNTLsDWptn/LRYCnr09vWq/5GbqA=
Subject key identifier: 28:CF:F8:72:9F:CF:6E:4A:7B:98:4B:EF:06:A4:05:6B:9C:AE:70:EE
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019D284E2F59079FFC077B1F38F23E32C4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: OHqrT2Q6wF+QoCDxQqlywEyFzdKdPPnTAvS8Yd2rBpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2f:59:07:9f:fc:07:7b:1f:38:f2:3e:32:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=28cff8729fcf6e4a7b984bef06a4056b9cae70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:57:44:43:7f:c0:16:de:71:a7:d5:32:8a:
91:8f:cd:0d:93:ec:dd:7c:f5:fb:b4:ee:5e:12:d0:
45:b6:32:21:23:fc:23:60:dd:75:3b:72:e9:2d:fa:
7f:bb:7e:09:59:a7:08:48:3b:73:3a:7c:01:3a:23:
24:31:24:91:b8:7f:77:35:b1:74:21:de:39:72:38:
b6:47:bd:91:1f:ce:87:de:7a:32:ef:1b:39:79:61:
e0:40:f4:fd:0f:62:06:cf:df:c4:c2:19:c6:cc:53:
ae:9b:c2:79:df:9c:d2:38:3d:c7:3f:a9:2d:e9:36:
16:66:cd:07:45:09:95:39:74:b9:39:60:b6:a3:ba:
84:28:23:d6:33:6a:d1:af:ea:9d:b1:ff:35:4e:a1:
d2:b5:d4:58:67:c2:b2:51:d7:fb:da:81:fe:5b:ed:
9e:73:6d:08:2d:62:29:07:5a:84:be:ca:ce:7d:09:
a4:1b:da:13:5c:8e:64:4c:6d:42:d2:a7:86:81:fd:
48:75:94:01:62:80:73:44:47:1b:d0:30:07:32:da:
9f:7a:5c:c5:cc:3b:40:24:b6:01:18:38:32:91:9a:
1d:75:67:4e:25:16:bc:14:6f:b4:ed:f7:36:13:6d:
00:96:6c:f4:2e:67:d2:f8:2d:70:d2:4d:2a:d5:f1:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CF:F8:72:9F:CF:6E:4A:7B:98:4B:EF:06:A4:05:6B:9C:AE:70:EE
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:15:6f:8f:6e:70:98:a1:72:d2:dc:7c:7a:53:0d:3a:a1:47:
24:5b:29:bb:3d:f0:f4:c8:66:e6:33:86:6b:f3:4d:ed:c4:0e:
fe:16:e0:17:b4:51:18:5a:00:6e:3a:b0:ad:16:b8:01:e4:21:
92:6a:19:52:fe:33:a3:e1:8e:a6:75:00:41:a8:7c:9e:03:0c:
d4:c3:f7:82:95:83:8b:ed:15:61:e5:46:9e:11:6d:32:5f:a5:
ad:84:62:1f:d1:d1:4c:93:57:47:10:d2:99:a7:77:83:41:d2:
57:77:80:97:fd:6d:76:60:2a:8c:5a:59:e4:2e:cf:19:22:7d:
f9:59:aa:53:75:dc:77:db:04:00:09:9f:2f:2a:9a:91:36:31:
85:ca:89:65:c3:d7:b7:27:a6:77:f5:bb:73:dd:a5:74:de:66:
b4:92:cb:65:ac:34:12:a9:3e:65:58:e8:9a:7c:a5:ab:9a:c3:
ca:78:20:96:b6:72:2f:23:78:ec:3d:d8:61:4f:21:f5:e0:4d:
44:8c:81:f7:83:f6:94:87:a9:dc:92:1d:c2:18:2e:82:af:fe:
c3:60:a3:d1:b6:33:c0:23:4c:5b:77:17:14:4a:3c:ca:22:ab:
5b:23:b4:a7:93:ee:ab:d5:cd:af:a5:3b:6a:be:2d:c2:7e:49:
5c:57:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:17 2026 by rpki-client