Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: j16nKAWvAM8Sp6BoTFygvUL6S5LRG/nuoulvKO2+oN8=
Subject key identifier: 57:A1:C4:7F:D8:5C:13:8E:07:FF:23:60:45:63:A9:44:3F:C7:18:57
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019D273B3B085FD0DE420A109D6E8480FAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 056D
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: St50UgfQNpIP/s9rxJpGj1aHfHnKDHSSrpUYGt8zrkU=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3b:08:5f:d0:de:42:0a:10:9d:6e:84:80:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=57a1c47fd85c138e07ff23604563a9443fc71857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:6d:ac:e2:29:61:56:6e:ad:7a:f5:f0:2b:
ae:a5:7b:a6:b4:db:53:2c:55:88:3d:de:e0:03:37:
a5:84:37:25:fc:51:ce:87:b3:2d:65:5d:40:bb:65:
00:c4:fa:59:a9:c8:49:2d:ec:e0:1a:f8:8f:b2:3d:
5c:db:34:37:3a:94:d7:9e:6b:9b:80:a7:2c:03:bc:
cb:e7:76:06:a7:12:62:2d:ed:af:97:0d:f8:49:5b:
d6:e3:57:55:65:b8:37:21:a2:fb:34:67:0b:07:03:
ea:89:aa:b2:9b:41:6d:ed:f7:5a:0d:69:8f:4e:3c:
21:61:25:1b:0b:eb:94:77:a3:50:99:5f:46:83:8e:
84:f8:c1:53:45:3e:d0:f8:32:82:87:96:5f:d1:dc:
ff:b5:37:12:0e:cf:7d:84:4d:5a:62:9f:b3:3c:ba:
1d:87:fb:67:0b:49:78:59:a9:1d:88:29:1e:19:78:
02:4a:76:94:80:0d:82:d5:2b:4d:eb:1f:99:d6:58:
b1:2a:84:d5:45:54:1a:28:cc:91:f1:53:63:6e:72:
3f:57:21:32:c2:c5:84:49:85:f8:ca:ea:a0:d2:03:
17:2e:aa:eb:91:1a:d7:47:ad:9f:b4:1a:36:b0:e1:
e6:e4:f3:8c:f2:3e:6d:05:3a:7d:36:48:f0:4f:c1:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:C4:7F:D8:5C:13:8E:07:FF:23:60:45:63:A9:44:3F:C7:18:57
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:81:97:0f:bc:23:72:0f:1d:a1:1d:92:30:12:bd:30:c1:
9c:77:99:9a:07:66:f3:fd:71:d0:cd:da:f6:05:2b:67:ee:04:
78:4e:bd:ab:2c:3c:d4:93:23:bc:10:f3:10:cf:5a:12:5d:ae:
d5:68:73:b4:23:c2:d4:4e:19:db:45:23:e0:73:bc:79:82:a9:
98:e2:f9:e6:57:2d:4e:12:11:a5:0c:63:a0:26:c2:ce:d5:ab:
47:75:4d:a3:69:b7:13:b3:a1:27:24:43:38:87:c4:94:7d:3f:
bd:87:d6:d9:90:19:cb:c8:30:83:17:c8:87:cd:2d:6a:51:31:
cb:8d:39:f0:07:cf:f0:99:2f:c1:05:97:d2:8d:d6:1e:ae:90:
61:ae:a5:a2:37:9b:de:1f:aa:22:4e:b6:2b:b3:be:88:ce:5e:
ba:20:03:e5:68:02:9c:9e:38:9b:1b:8f:1d:e9:5a:61:60:8e:
5a:aa:5a:7f:31:d1:0c:07:22:2d:8e:2a:63:76:df:6e:29:3b:
48:57:ef:ec:13:59:44:dd:b1:3e:37:b9:4c:78:63:aa:0d:f9:
45:9d:45:6b:af:f7:3c:90:cd:af:0f:de:6a:08:51:8b:d7:df:
10:c2:1e:7a:1b:e3:6d:57:0b:15:31:0e:d9:d9:93:60:b8:f8:
1d:1a:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:37 2026 by rpki-client