Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: EDgCljFGRifpJQn4/bxN7L2rp9m7sFqrGpiKJR8tkAI=
Subject key identifier: 16:3E:FA:0F:46:7C:04:D6:35:2F:5B:DD:55:31:46:38:C8:66:A9:0B
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019E1EA30FABD6055DD43A1E16122D8EDB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 08B2
Signing time: Wed 13 May 2026 00:01:03 +0000
Manifest this update: Wed 13 May 2026 00:01:03 +0000
Manifest next update: Thu 14 May 2026 00:01:03 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: cUg/4EwIRLFKuF/Vrv7h+WMAoX9RBfcAH+zbO7ignL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:0f:ab:d6:05:5d:d4:3a:1e:16:12:2d:8e:db:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: May 13 00:01:03 2026 GMT
Not After : May 14 00:01:03 2026 GMT
Subject: CN=163efa0f467c04d6352f5bdd55314638c866a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:67:62:e1:15:4d:6d:2b:6f:ee:bd:46:af:
cc:74:14:2b:b9:93:b2:d5:e4:0f:1f:19:69:9b:7f:
6d:b9:9b:0f:de:38:c4:99:71:b0:57:e5:f6:fa:d4:
f9:c2:be:4b:a9:24:3e:90:af:9e:97:8c:3b:36:37:
75:17:11:99:43:19:19:f3:8e:47:99:db:50:1a:11:
fb:61:95:f6:4c:5a:90:23:03:ef:79:36:37:b8:b3:
09:31:2f:35:25:0b:d3:5b:ea:be:e8:3b:2b:7a:b5:
1d:a0:30:f6:5c:a3:b1:b5:10:47:2a:cb:35:bc:c5:
9e:09:da:8e:09:33:0c:9d:b9:bf:2c:01:15:26:86:
dd:cf:dd:30:6b:87:34:1a:9e:e2:3d:00:66:7d:dd:
d4:b5:6e:2c:00:ad:86:86:a7:6e:f4:53:01:9a:e7:
c6:55:65:9a:e8:3e:47:a1:ef:80:0c:ea:6b:78:26:
15:96:b8:62:96:26:30:e3:51:9e:04:cb:a1:87:e6:
35:c8:7f:63:2f:5e:84:c2:79:67:08:e8:b7:df:a4:
f7:1d:a7:98:5f:a8:91:26:d5:73:da:dd:7d:99:04:
d9:67:ec:3b:a4:bc:92:db:d3:dc:be:cf:52:eb:c3:
85:17:eb:8b:8c:00:a4:fa:da:1d:8d:71:f5:5c:17:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:FA:0F:46:7C:04:D6:35:2F:5B:DD:55:31:46:38:C8:66:A9:0B
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:f1:2b:21:1e:37:f9:23:bc:00:5f:d9:f2:c2:ff:ad:a5:
96:2c:c6:36:f7:b7:ce:07:81:76:46:55:8d:02:1b:63:19:69:
0c:3a:69:cf:57:ce:f5:cd:6b:cc:82:26:44:66:e7:6a:b0:17:
84:cd:33:81:b5:26:a4:be:07:21:91:9f:8e:cc:0f:15:a5:0e:
e3:00:77:5e:a5:c1:e5:82:83:7e:f0:e2:51:4d:db:de:6c:82:
2b:31:5a:fe:40:d8:82:f9:e5:65:5b:93:ef:fc:43:3c:4d:6a:
51:88:d1:84:6c:af:b8:81:da:21:d0:9f:98:eb:ea:dd:a1:ea:
ff:e5:00:43:95:8c:58:76:91:a7:85:26:b9:e3:87:76:1c:1e:
30:75:69:da:12:0b:79:38:fb:1e:65:08:ea:67:ba:d3:0d:78:
b8:d8:17:f2:3f:c4:95:13:45:d2:d7:d2:3e:15:0b:74:25:0b:
1a:ba:7f:8a:0a:0d:69:cc:9c:42:4e:bc:a8:20:39:4f:36:34:
a3:f1:f1:88:52:95:9f:93:4b:23:84:c0:e5:64:33:f1:43:81:
0f:98:d8:9d:b7:90:e5:3d:d8:db:86:e4:96:10:ee:77:d1:79:
64:e5:2a:52:71:51:86:83:f6:43:00:32:9a:af:d9:8a:60:97:
b0:01:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:06 2026 by rpki-client