Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: gl0TAinFU8FI3nCH7E07H4S6Ui9KL7DtWeDlhduZhCE=
Subject key identifier: F8:E3:13:38:D1:33:E4:5E:12:90:3A:DB:CB:C8:2A:61:F1:7E:55:D9
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019F935B390F6FB4D8E1D2FD468D3A2CDB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0973
Signing time: Fri 24 Jul 2026 09:00:56 +0000
Manifest this update: Fri 24 Jul 2026 09:00:56 +0000
Manifest next update: Sat 25 Jul 2026 09:00:56 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: bkg9FyRjYA2wPZ64yZJtwVtJH7ma/hLEZcg1yJLsqb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:39:0f:6f:b4:d8:e1:d2:fd:46:8d:3a:2c:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Jul 24 09:00:56 2026 GMT
Not After : Jul 25 09:00:56 2026 GMT
Subject: CN=f8e31338d133e45e12903adbcbc82a61f17e55d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:89:5c:5c:18:7a:c4:74:74:5b:e6:83:b9:
d2:c5:ae:68:64:0f:0d:89:e1:7c:de:91:b7:e8:d8:
1b:08:d6:d7:4f:fb:09:5c:86:8f:04:54:c1:51:de:
2d:71:75:0c:58:c4:d7:4d:c8:6e:b5:9c:63:bd:b7:
d8:04:ce:93:8c:48:b8:02:aa:08:35:25:ba:cf:33:
c0:f1:8c:dd:d6:e2:2b:cc:db:e9:0b:b1:cb:f1:13:
bb:55:f5:af:c2:4c:49:55:85:d9:8f:0e:ad:16:69:
16:4f:7b:a6:97:cf:63:0d:95:e0:31:d1:76:e6:dd:
e2:e0:3a:6c:30:74:e1:81:15:30:87:3e:7f:c5:81:
86:00:de:6e:fd:4a:be:54:f6:b3:db:35:83:d9:4b:
94:7e:a0:a5:38:c2:6c:d4:4e:b7:8a:41:06:c7:c1:
32:fe:fb:d3:fe:ae:df:f3:aa:62:84:32:a0:3a:66:
dd:da:21:b0:0c:a7:2d:ed:3f:fc:9c:2d:aa:f9:6d:
8d:6c:06:c5:50:64:26:6f:e4:49:8d:8f:4f:68:a5:
0e:19:bf:a4:95:af:6c:55:17:03:40:02:7d:cb:78:
48:97:30:c9:68:c3:c7:27:5a:31:fe:cf:78:c6:c7:
9e:be:9d:f2:0d:3d:5d:d0:54:d2:84:d0:1b:f7:e2:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E3:13:38:D1:33:E4:5E:12:90:3A:DB:CB:C8:2A:61:F1:7E:55:D9
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e5:f7:e1:21:e0:71:57:6a:2c:56:0d:32:b7:f3:72:57:bd:
b5:27:16:77:bc:68:75:e9:5b:2d:e6:51:da:dc:97:fc:29:ce:
6f:07:bd:71:36:42:a9:bf:ac:13:2d:35:79:f0:bd:62:96:e6:
49:b7:64:31:7b:7f:c3:58:9d:59:eb:a9:0d:c0:33:fb:75:c8:
74:89:53:93:02:bd:0c:2b:e3:ce:6c:6a:c4:8b:01:24:af:ef:
92:74:e5:0f:e8:dc:52:2a:19:57:20:93:2a:44:9d:80:ad:fa:
ae:d4:e5:5f:51:3a:b4:0a:52:a1:1a:f5:09:a8:b5:95:36:26:
6d:26:98:52:b1:ff:1e:46:37:d4:df:c8:87:b8:ee:7e:40:fa:
a5:e1:8b:01:21:d3:48:cb:da:19:51:d7:8c:92:e2:4a:3a:17:
2b:a1:7f:38:54:15:d9:cd:90:43:b7:62:01:0e:78:ad:10:f2:
d7:16:94:5a:c4:17:cd:b8:90:09:7c:89:30:12:5a:4e:2c:b9:
92:65:72:4b:75:9f:60:86:f5:c0:3c:3e:06:1b:49:67:62:04:
21:9e:ff:7c:8e:0d:71:f3:50:09:c9:fd:dd:41:67:b7:09:7e:
b4:b6:73:7d:f9:e6:0a:d9:65:f5:98:f0:15:a1:76:4a:f5:79:
91:55:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:44 2026 by rpki-client