Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: QpwWA/ZGVfXTdMpQkgRLgZNBpzy63OAn/mWqwa1eksA=
Subject key identifier: 30:25:3D:E6:DF:CD:14:B8:96:80:82:5D:CF:29:44:A3:AE:09:05:0B
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019CAA2160831D68FC211E36FC50E5C0C9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: UhgnMAsGmgGgiZf49GCVNoy0Ffb0nBcKB0S06pzQsAo=)
2: m0eeq8va8tOdR0d6vhTGR-m4r9c.roa (hash: IJmLN6gAClo8Re6n699DAImPd6vNHSacFHQGbqXGAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:60:83:1d:68:fc:21:1e:36:fc:50:e5:c0:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=30253de6dfcd14b89680825dcf2944a3ae09050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:0c:90:dc:f4:00:49:96:1f:72:7c:c9:86:
53:ca:77:78:b9:e1:f4:ea:76:bc:13:93:eb:f1:36:
90:87:64:9e:55:99:bf:12:d7:6e:48:ac:c3:89:28:
6e:21:04:2d:7f:d8:81:c6:4b:0c:ec:f1:d9:23:96:
ab:d4:99:09:5f:20:6f:46:92:eb:2f:09:ff:1a:c0:
3a:5a:5e:fd:43:a6:cd:4c:a8:de:8a:98:cb:9a:3e:
42:5d:7b:81:10:f4:44:33:48:4d:90:44:46:50:b3:
c3:b3:49:6b:b3:8b:6f:27:3c:3b:77:b3:ce:0f:e6:
08:6e:00:9e:28:49:42:f8:62:32:57:cf:78:b3:83:
a6:0e:6d:77:88:85:fc:1b:fa:28:bc:1f:10:50:53:
77:74:72:f4:1c:1e:fa:80:fd:96:11:49:af:14:35:
8e:48:e3:e6:00:19:da:36:5b:25:03:7f:9b:90:18:
b9:0b:bd:0a:bb:ea:94:35:7e:25:17:eb:ee:61:2a:
3e:f6:3e:dd:14:47:2b:48:53:a6:85:39:1d:d9:e6:
0c:06:0b:22:e2:47:c8:21:89:4a:f9:48:9a:d2:e1:
13:c1:65:4f:36:3e:ca:37:f8:23:6b:47:d6:a1:6f:
fb:c4:99:05:f4:da:5e:0a:f5:58:b0:c3:60:03:94:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:25:3D:E6:DF:CD:14:B8:96:80:82:5D:CF:29:44:A3:AE:09:05:0B
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:87:3a:da:6e:c6:2d:4e:75:35:bc:51:36:de:3e:5b:1e:27:
6e:ee:07:85:6c:8c:90:4e:94:6f:dd:06:2d:34:a7:db:13:c0:
0b:86:ba:37:03:f5:ca:a5:a7:5e:03:89:05:7c:41:54:5a:5b:
62:17:10:05:4d:13:2c:ca:31:25:81:49:c7:6d:a3:73:b4:34:
44:a1:67:91:df:27:34:2a:1c:ef:8d:e6:5f:78:33:ec:8d:10:
82:02:7c:b6:e6:f2:c7:c4:56:38:8f:0f:cc:c9:ca:7b:dd:12:
bb:88:39:2a:a1:69:2f:8f:ef:36:e8:dd:f3:cb:67:74:85:b2:
ac:dc:a1:3f:c8:66:98:3d:08:26:fb:34:54:16:6a:b6:8a:76:
d9:8d:44:b1:49:45:a9:e8:14:b7:15:b6:8a:ef:d2:7a:74:91:
e0:72:00:99:d8:65:d5:15:20:4e:f1:9b:02:77:4a:94:89:19:
83:d5:cb:2b:bb:c5:61:5e:40:8a:75:00:b8:fd:bb:83:1f:ee:
78:d5:b9:5d:3e:2d:67:7a:d5:93:83:1e:a1:bf:d3:2c:0c:7d:
06:3e:49:30:43:ef:fe:6e:7f:af:61:f9:67:be:a4:f6:e3:dc:
0a:83:be:af:88:cf:e5:1c:6b:90:d1:53:bc:57:ef:5d:59:4b:
fc:70:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:57 2026 by rpki-client