Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: TG2Ur107+DUdm6GcF3AVG4ifERK3MseGADugRF/lC34=
Subject key identifier: D3:BF:43:F7:42:82:48:67:FF:C9:C7:97:F2:3F:4A:4B:48:CD:DE:D5
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019E1CEB609CF7932911EAD43484D33CCD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:00:48 +0000
Manifest this update: Tue 12 May 2026 16:00:48 +0000
Manifest next update: Wed 13 May 2026 16:00:48 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: RyBKFoAhgm34xRYpr8NmvYuBzXmYSBvJTMz+ojQhkuo=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:60:9c:f7:93:29:11:ea:d4:34:84:d3:3c:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: May 12 16:00:48 2026 GMT
Not After : May 13 16:00:48 2026 GMT
Subject: CN=d3bf43f742824867ffc9c797f23f4a4b48cdded5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:12:bd:2f:7f:c3:d0:ae:4e:b6:d0:45:da:
c9:34:d3:34:59:b7:ff:db:c3:ff:4e:d3:51:30:5b:
39:dc:a9:c2:7c:de:53:4a:d1:eb:c0:ed:db:87:c1:
96:33:14:3f:a9:fe:50:17:29:23:8a:bb:31:57:44:
f9:46:06:b9:5a:6a:83:8a:90:80:27:28:5d:ce:4c:
ed:ec:ee:16:2a:f7:f6:0b:a0:e4:84:9a:aa:82:db:
16:60:82:35:5e:a2:8e:91:c6:af:09:88:04:dc:ee:
91:8d:79:8e:51:6a:f7:fe:ae:40:df:07:df:ac:f3:
de:9f:3c:08:31:64:bc:e9:6f:8e:bf:32:60:aa:d0:
28:63:4c:da:5d:8f:50:88:f8:02:4f:8e:5f:82:33:
4d:d2:30:23:7e:1f:3c:d1:dd:13:7f:18:51:70:c1:
34:fa:08:5b:67:c9:b8:b6:1b:40:eb:22:68:87:3d:
b2:d1:43:69:cc:34:01:1d:ec:3d:0b:68:25:e7:b8:
13:79:7f:03:aa:82:a7:5f:ff:d3:3f:71:4a:9b:d2:
c2:0e:f7:4c:71:de:6c:0a:c6:bd:1a:2f:54:2a:76:
ef:d1:58:80:ce:d7:d7:ea:25:74:99:d0:5d:1a:05:
e8:e7:cc:d0:a7:c9:8b:6a:b3:c9:82:c1:ce:f6:71:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:43:F7:42:82:48:67:FF:C9:C7:97:F2:3F:4A:4B:48:CD:DE:D5
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a8:ea:37:c4:04:fb:1c:f6:76:a8:73:18:74:0f:d8:b7:d8:
8c:8a:a0:0f:c4:aa:42:93:d5:6d:ca:69:ca:f6:ef:10:3e:e7:
80:26:0f:d4:9c:1e:5e:4b:f2:12:b4:3d:ed:6b:94:08:26:5d:
ac:c6:4b:ef:14:b3:d4:9c:77:cc:fa:8b:58:e7:d8:89:8c:6c:
5e:3b:2f:8a:8b:de:e6:1f:bd:83:62:ca:07:0e:6c:49:13:52:
92:f7:e9:68:2a:ed:59:f9:b4:80:3a:13:e8:07:ee:97:2f:c1:
79:3d:d7:ca:8d:4b:fe:fa:8c:26:df:25:47:1d:86:ef:7d:d9:
c6:01:9c:69:38:6e:1b:68:b8:34:8c:66:bf:19:14:de:ef:07:
71:83:6e:91:dc:10:a3:6d:af:c9:4f:4c:a7:52:7e:8b:34:66:
9e:b1:ee:ff:6f:96:e9:11:67:94:97:64:e9:5d:33:ea:42:78:
a9:2e:eb:c1:a1:9d:b2:d4:ec:d2:4c:1c:8e:35:7a:d6:8a:9a:
81:fd:7d:f3:02:4b:cf:86:3c:f6:8b:36:a7:c3:cb:d6:6d:2d:
80:2b:68:fa:bf:5f:6a:46:24:e6:90:73:b9:81:e8:b8:bc:19:
cf:a0:91:c4:2a:b1:20:25:26:6a:21:3b:ce:b0:39:99:e5:29:
a6:a4:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:41 2026 by rpki-client