Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: fdIWhQ+XAKEOPwCXTIhE2DmKy6USx5YrXtjkJAAbTlg=
Subject key identifier: FF:D9:88:4A:27:CA:04:DF:33:3E:F7:1C:0B:BF:55:1B:7B:E1:70:5E
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019F905A02892BEB41FBC8471C422BD0FA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 16F0
Signing time: Thu 23 Jul 2026 19:00:45 +0000
Manifest this update: Thu 23 Jul 2026 19:00:45 +0000
Manifest next update: Fri 24 Jul 2026 19:00:45 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: TFQS9G1mRqC5nBubEtFGd23MzdgXJhmLGmbKj1VzEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:02:89:2b:eb:41:fb:c8:47:1c:42:2b:d0:fa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jul 23 19:00:45 2026 GMT
Not After : Jul 24 19:00:45 2026 GMT
Subject: CN=ffd9884a27ca04df333ef71c0bbf551b7be1705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:27:e4:9f:11:9b:fa:e4:d4:99:de:35:20:
6f:5d:86:67:a5:fb:8e:89:3d:70:bc:0d:51:1b:6e:
ec:99:c0:32:2f:30:3a:5b:37:4d:b4:74:c8:2a:f9:
0f:6a:06:53:f2:68:13:96:8b:4c:8e:bb:52:14:34:
11:df:6e:0a:94:5f:d4:5c:16:b8:93:8d:2d:b1:0b:
e6:e3:b3:54:66:9b:08:28:08:f7:71:90:fd:44:46:
28:c1:ed:39:0f:d6:45:2b:1f:64:b7:26:cd:32:70:
d6:74:ed:f2:5c:fc:22:bb:4a:01:9d:6a:cf:0b:b7:
08:36:16:4a:0c:77:0b:ad:58:52:d0:08:15:ae:ca:
52:63:81:7f:92:0f:4b:15:ef:c2:d9:e0:4b:d3:02:
03:68:3c:a1:6a:1b:c8:6c:67:3f:40:a2:b2:26:07:
28:d9:63:5c:08:cf:e1:de:cb:c5:82:10:b4:9e:cc:
0b:fe:4a:27:2c:7b:dc:bb:f9:d5:bb:a5:1d:9e:a5:
92:e5:b2:3c:7c:61:72:d3:ab:c3:d5:21:4a:eb:df:
e2:96:26:48:76:1e:a7:fe:7e:66:13:23:85:92:b1:
1d:1c:6c:08:f6:6e:e1:b8:a5:af:64:d6:bc:55:f8:
a9:f1:48:9a:28:45:f5:30:1c:d0:d7:39:39:73:7b:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:88:4A:27:CA:04:DF:33:3E:F7:1C:0B:BF:55:1B:7B:E1:70:5E
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:a6:76:8d:57:c1:57:d9:2f:c8:b3:c1:79:43:9e:d1:85:
c3:e5:28:fa:60:e7:e3:57:1c:02:e1:3e:b0:74:27:2b:c3:10:
6a:cd:b7:56:7a:2a:f6:54:6d:a4:e6:f7:a6:f6:ff:2e:7c:c4:
af:2d:b1:07:cd:72:90:86:33:8a:f0:c3:f5:3c:3b:18:91:b5:
77:63:71:fa:b5:f5:a3:e9:96:68:44:4c:0d:21:fc:38:a4:b7:
26:6d:27:87:42:8d:99:57:52:ed:6d:f7:6b:de:33:07:00:bf:
54:a7:c5:38:a4:de:f1:80:d0:31:dc:e1:16:d3:83:34:61:5d:
9b:42:35:c9:1a:85:5b:70:e6:2d:8b:8b:0c:c9:f1:92:60:8c:
cc:c3:df:4a:83:25:f1:1d:c2:34:75:e3:73:f3:62:01:a2:5f:
d8:25:7a:8f:b7:0f:15:09:41:0f:7c:19:77:11:7c:dc:6c:1b:
43:12:fe:01:d1:d1:de:c3:a0:b5:52:00:70:24:e4:e5:31:26:
68:2b:ec:03:c7:31:c9:dd:13:04:dd:85:71:aa:df:cf:87:35:
36:96:9f:a1:22:e2:14:f8:06:7b:aa:95:34:47:fa:2f:c5:b7:
57:32:97:f6:d6:be:9b:4d:4d:c1:c1:a8:e4:57:3f:46:36:6b:
5f:92:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:24 2026 by rpki-client