Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: ZkRAl6KkAvO0TG3aAAbUbvBv4h3+CC8k0JtMLoCtKDk=
Subject key identifier: 39:D2:61:8A:C9:E2:78:E5:98:44:87:F5:AA:CC:92:49:B8:6C:6B:88
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019D2997602783E5ADFAFF982AA9E9310074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: gEOg0D5mV2jhzJx6OQXmU/XHa2sNcv2vvXk2yYRvKxk=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:60:27:83:e5:ad:fa:ff:98:2a:a9:e9:31:00:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=39d2618ac9e278e5984487f5aacc9249b86c6b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:40:b9:83:44:6d:36:f6:27:e7:7d:8f:0b:
cb:64:48:f5:a8:4a:f7:77:10:67:c5:56:83:44:03:
4b:fe:71:48:13:04:2b:bb:cb:5b:64:f8:dd:eb:9d:
65:07:d6:48:bd:43:36:4b:34:26:6c:f0:27:77:64:
3e:e1:7c:37:2c:8d:58:bf:c6:b9:32:15:69:5b:2b:
15:3e:a9:d8:e6:8f:f3:43:40:46:9d:a9:14:e3:ba:
32:22:16:16:06:8e:69:7e:96:43:17:ca:a8:8c:1f:
0a:3f:0b:0f:be:c3:9f:45:39:7c:e6:d6:28:8a:98:
52:24:e9:51:39:cb:96:5f:ac:d4:21:2f:cc:52:1c:
28:79:e6:8a:76:93:b8:ed:fe:f2:8c:31:48:f4:65:
ff:84:75:f9:73:ad:8a:82:b6:62:d6:05:7b:e9:a6:
69:3d:03:74:ea:89:bd:64:87:e6:77:00:30:3d:29:
18:0a:21:06:a3:a8:21:0f:ab:50:5e:15:a9:10:86:
2e:27:fd:58:0d:cf:8b:e3:90:81:16:d8:54:48:5b:
0e:5d:27:54:6d:f1:88:e1:36:96:82:a1:b1:88:5f:
e6:98:0c:d5:23:be:f3:58:bf:f6:6f:5b:f4:5b:93:
aa:14:a8:7a:9e:df:78:69:97:5f:13:6b:15:95:ff:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:61:8A:C9:E2:78:E5:98:44:87:F5:AA:CC:92:49:B8:6C:6B:88
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:b5:d7:c0:c7:99:37:eb:d3:3c:da:b3:81:01:a5:ae:67:
7f:3c:47:34:c3:5f:06:66:2a:e1:b8:f4:3e:cf:ac:8a:e4:6d:
85:42:14:b5:b7:d2:43:35:9a:ac:73:2e:3a:8c:f9:f3:47:8c:
df:80:24:c6:f3:9a:ed:58:c5:99:50:cc:cf:4c:4e:78:66:72:
94:80:9f:4c:a8:db:da:9e:59:8f:c3:46:db:ca:ca:73:8c:82:
10:b6:c4:bd:5b:4b:2e:3f:de:fe:a3:f2:49:82:23:8e:7b:99:
9c:80:17:b7:80:7f:ac:79:1f:75:1f:f1:08:08:00:00:ad:29:
7d:50:91:0b:74:2d:19:a8:dc:a8:e3:be:f9:d1:8d:87:be:f2:
ee:58:19:cd:e4:10:3b:93:ae:b0:c6:00:a4:57:a9:a4:20:7a:
89:fc:cd:39:40:97:9d:c8:8a:d2:86:82:fa:a7:1c:0e:f1:b4:
4e:e6:34:55:2c:24:2e:7f:5f:a5:6d:1c:b3:2f:11:9e:b7:31:
17:2f:03:20:5b:d6:36:43:0e:44:32:da:71:c8:15:25:30:48:
96:f5:9c:f7:da:26:12:a3:62:37:00:06:a8:6f:58:8a:f5:e1:
cc:75:c4:28:39:5b:e0:6b:5b:4f:d7:97:52:95:fb:4d:6b:f5:
b5:53:43:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2Ang+Wt+v+YKqnpMQB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl
YmU4NjEwHhcNMjYwMzI2MTAwMTE5WhcNMjYwMzI3MTAwMTE5WjAzMTEwLwYDVQQD
EygzOWQyNjE4YWM5ZTI3OGU1OTg0NDg3ZjVhYWNjOTI0OWI4NmM2Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxZAuYNEbTb2J+d9jwvLZEj1qEr3
dxBnxVaDRANL/nFIEwQru8tbZPjd651lB9ZIvUM2SzQmbPAnd2Q+4Xw3LI1Yv8a5
MhVpWysVPqnY5o/zQ0BGnakU47oyIhYWBo5pfpZDF8qojB8KPwsPvsOfRTl85tYo
iphSJOlROcuWX6zUIS/MUhwoeeaKdpO47f7yjDFI9GX/hHX5c62KgrZi1gV76aZp
PQN06om9ZIfmdwAwPSkYCiEGo6ghD6tQXhWpEIYuJ/1YDc+L45CBFthUSFsOXSdU
bfGI4TaWgqGxiF/mmAzVI77zWL/2b1v0W5OqFKh6nt94aZdfE2sVlf/LiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnSYYrJ4njlmESH9arMkkm4bGuIMB8GA1UdIwQY
MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3i118DH
mTfr0zzas4EBpa5nfzxHNMNfBmYq4bj0Ps+siuRthUIUtbfSQzWarHMuOoz580eM
34AkxvOa7VjFmVDMz0xOeGZylICfTKjb2p5Zj8NG28rKc4yCELbEvVtLLj/e/qPy
SYIjjnuZnIAXt4B/rHkfdR/xCAgAAK0pfVCRC3QtGajcqOO++dGNh77y7lgZzeQQ
O5OusMYApFeppCB6ifzNOUCXnciK0oaC+qccDvG0TuY0VSwkLn9fpW0csy8Rnrcx
Fy8DIFvWNkMORDLaccgVJTBIlvWc99omEqNiNwAGqG9YivXhzHXEKDlb4GtbT9eX
UpX7TWv1tVNDbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:23 2026 by rpki-client