Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: qVBZSDD554kNW02QTWzqwl68F5INOMVu4v5+zeohDJg=
Subject key identifier: 31:73:F0:55:EB:00:24:BF:8C:09:92:6C:99:3D:00:2A:77:9D:57:62
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019D265F987FA2864FC926FBB83F3B68D887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 15B0
Signing time: Wed 25 Mar 2026 19:01:32 +0000
Manifest this update: Wed 25 Mar 2026 19:01:32 +0000
Manifest next update: Thu 26 Mar 2026 19:01:32 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: W6Gaw/51OZVfw3Fl6iaCidLyJtvXWC/zs7am0PeZjxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:98:7f:a2:86:4f:c9:26:fb:b8:3f:3b:68:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Mar 25 19:01:32 2026 GMT
Not After : Mar 26 19:01:32 2026 GMT
Subject: CN=3173f055eb0024bf8c09926c993d002a779d5762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:59:2d:8f:3b:99:29:8a:bc:f0:e3:0d:cd:
1d:ee:03:fa:bc:d8:da:23:bb:aa:46:7d:00:1e:5f:
df:cb:a4:f7:d7:82:10:97:64:17:be:0d:df:50:81:
04:db:18:5e:55:71:41:9f:75:41:77:50:8e:53:a8:
a3:14:3f:07:3c:bc:7c:18:85:5a:47:c4:ab:31:95:
08:39:d7:8d:47:01:18:4a:94:5a:37:04:93:bf:e6:
f3:45:d7:c7:e3:e1:31:4e:47:5d:ea:38:97:15:f9:
61:64:a5:fb:62:36:cc:38:a0:89:88:3b:b5:09:55:
b4:10:ab:da:14:83:c6:03:e4:66:de:c6:fb:e5:3c:
fe:55:f2:39:32:01:92:98:f5:02:23:2e:e0:07:70:
2b:16:68:24:aa:6f:2a:6f:5d:b6:db:d8:19:5b:4a:
2a:d5:05:8e:fb:56:f1:3e:be:b3:7e:d6:81:64:09:
d4:47:be:f1:19:d3:aa:7e:06:48:e0:ce:bd:87:43:
a3:34:ee:f6:21:c0:12:da:3e:00:16:6d:cc:58:57:
79:aa:70:02:dd:f3:a9:11:68:1b:e6:f4:95:89:50:
ec:b8:9d:6b:a7:c6:bd:2b:8d:48:39:f7:f4:12:47:
79:6f:b3:0c:4f:63:d3:6d:77:30:64:93:8c:ec:32:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:F0:55:EB:00:24:BF:8C:09:92:6C:99:3D:00:2A:77:9D:57:62
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:e8:56:74:2a:ae:7e:50:1a:68:25:86:54:b0:20:bc:4f:
73:02:53:94:f4:ca:8c:f0:ad:c3:66:5c:20:17:35:11:a4:74:
3f:e9:fd:f2:70:e5:dc:81:85:b2:63:9f:5d:94:80:e1:4e:db:
4d:55:87:31:72:03:0b:b2:5c:82:dd:5b:fb:75:d7:6f:56:d2:
a6:71:74:8d:fd:5d:6e:79:19:26:e8:f1:78:9e:a0:6f:0f:0f:
a1:28:92:55:3c:3f:98:27:e5:c4:2d:2c:a2:d5:05:c5:e1:ff:
67:17:63:7e:fb:df:68:f2:ac:e8:32:82:f2:d0:ee:fb:09:ae:
bb:52:d3:20:48:81:cd:8a:6a:f0:cb:22:ad:90:19:e5:e6:89:
81:2e:c0:97:ec:e1:08:d6:f0:97:ae:6c:bf:09:ff:25:17:ed:
4b:31:96:70:d7:c4:7d:5a:3e:e3:20:9d:79:db:56:b9:7f:99:
3b:82:c3:b9:15:1d:d6:90:b5:2b:d7:51:08:d1:58:ce:19:60:
ec:06:5d:7b:2b:38:6f:48:4c:2c:d0:d5:e3:12:32:42:78:ce:
c6:c4:0e:dc:ea:d1:cc:9e:d7:cc:7c:c4:63:2a:2a:eb:18:50:
eb:7c:11:5c:19:27:d5:1e:bd:aa:e7:9c:c4:60:e0:f2:83:3c:
8c:01:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:50 2026 by rpki-client