Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: gOsetnN9eKF00LbAuN3hJ12MP98H5bTkJAHqn9shi5Y=
Subject key identifier: 56:16:B2:BC:D7:70:E3:F7:4B:01:96:0F:E1:52:B0:D4:0D:ED:AF:AE
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019D296140F4F0DB9115BE6366920713AA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0833
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: bINUMVYComp3Vkytfw+rk3vpj5InDNg2TziA1W29U5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:40:f4:f0:db:91:15:be:63:66:92:07:13:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=5616b2bcd770e3f74b01960fe152b0d40dedafae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:0b:bc:7f:25:45:72:2b:18:d1:75:50:9a:
de:87:87:25:97:68:ac:bc:b5:4e:09:4b:a4:15:fe:
4a:f2:da:6d:ff:98:c0:f2:b2:4c:1c:79:f4:c2:e1:
c2:14:01:20:e4:34:76:c9:cf:8c:85:37:21:94:e9:
f1:9f:f7:95:d5:74:c9:a0:22:90:f1:29:6b:56:69:
28:ae:61:58:dd:df:99:1c:e8:0b:09:77:a6:5e:fa:
58:48:94:eb:35:17:8a:92:79:7b:8b:67:ed:af:8c:
75:45:69:21:0c:5e:4a:e7:f2:3d:2a:c8:96:d6:b8:
8d:a2:f2:6b:02:2e:57:db:d3:d8:ec:62:94:57:d3:
b2:16:0e:41:21:b3:25:f7:70:4c:f1:12:d9:ca:de:
bf:53:42:e6:0e:cb:06:3e:08:f4:8f:f7:8e:5a:69:
72:1d:e9:90:54:8f:e3:74:ca:bd:84:2f:b2:b4:8e:
a0:e7:43:55:4a:c9:ae:35:50:27:36:7b:3e:a4:f3:
a8:fa:c8:80:0f:da:18:ca:38:33:42:55:2f:c0:53:
3d:34:f0:60:f0:85:0d:c9:ef:66:16:3d:a6:08:bd:
34:d1:a3:2a:45:63:66:c0:53:db:5b:13:99:b1:fc:
93:d6:12:12:06:fe:3b:eb:0f:8e:9c:f1:df:67:97:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:B2:BC:D7:70:E3:F7:4B:01:96:0F:E1:52:B0:D4:0D:ED:AF:AE
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fa:03:89:34:eb:52:9c:98:ef:66:f5:5b:e5:bc:4a:57:a5:
9f:06:d6:ac:45:68:18:24:e8:f0:92:87:8f:2d:a8:72:6f:e8:
b5:3a:de:42:2d:14:6f:42:63:d0:3b:f0:f2:b2:48:6b:e8:bb:
e4:40:e3:e0:57:7e:3f:d7:b5:12:45:cf:e7:96:11:1b:a8:44:
2a:1f:59:f6:34:c1:6d:d1:89:69:5d:a6:54:36:13:34:f9:f9:
45:45:00:3e:cc:0b:2b:1a:b4:ed:3c:4b:9a:5b:63:c3:08:0c:
95:a4:cb:a2:a8:a7:fe:d6:ab:8c:9e:d4:36:ab:c5:52:c4:50:
7a:b8:0d:44:e5:0b:79:8b:bf:2c:1f:78:cc:9c:cd:6e:fa:d5:
2f:c3:49:c4:2a:76:91:e4:7f:a3:55:59:ce:f6:63:65:ca:33:
ca:a5:35:9a:94:43:8d:7d:e1:05:0d:7b:14:a3:82:1b:bf:a0:
aa:8f:c3:da:cf:d1:db:5c:5f:56:60:6b:0d:6e:1f:ff:b4:bd:
ac:88:ea:16:58:4d:0b:04:a6:76:ba:79:79:a0:e8:14:dc:f2:
53:26:59:c7:ee:4a:75:36:f2:4d:0c:3e:7a:87:93:b1:6a:76:
b9:af:78:7e:89:0a:d5:3d:1f:f1:83:30:ae:fa:50:bf:23:5c:
db:a6:a8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:22 2026 by rpki-client