Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: BZ3lBozW4NuhBcN4g7IH5kauXqYG3nN/8MgwGjkVAlc=
Subject key identifier: AA:73:9C:25:26:58:60:D5:84:EF:D8:33:65:26:56:59:E2:EE:0D:36
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019CACB48FF89336D296B82E8BDE69CA8FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 08B1
Signing time: Mon 02 Mar 2026 04:00:40 +0000
Manifest this update: Mon 02 Mar 2026 04:00:40 +0000
Manifest next update: Tue 03 Mar 2026 04:00:40 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: iNque1Fle4sAzB7IdE4/MwUZby4RmL4+4XrN/PU3YF0=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:8f:f8:93:36:d2:96:b8:2e:8b:de:69:ca:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Mar 2 04:00:40 2026 GMT
Not After : Mar 3 04:00:40 2026 GMT
Subject: CN=aa739c25265860d584efd83365265659e2ee0d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:c2:29:4e:88:cd:ea:6e:df:03:87:07:a2:
b5:aa:cc:fa:ec:3d:8d:53:87:e3:a2:bf:39:df:e3:
01:67:68:e4:14:0e:b0:7a:db:87:49:27:12:ed:20:
7d:73:18:a7:ea:6d:05:3e:34:62:d9:32:ad:71:44:
89:23:00:4a:a5:69:5c:3a:e0:88:4d:b5:dc:f4:c8:
79:67:72:dc:c0:73:bd:b9:60:ba:67:0e:27:9d:a9:
2e:37:83:f1:1d:bf:85:6b:d4:60:13:7c:5f:a8:a6:
b5:6f:bb:b3:15:26:35:a9:99:17:11:10:3c:d1:5c:
7d:0b:67:68:2f:24:10:1a:9b:bc:4d:8c:98:4e:6d:
53:05:de:4a:50:07:cf:5f:c3:1c:1d:96:1c:23:b5:
de:fa:2e:2a:96:36:07:46:0d:cc:a7:72:c5:45:f1:
ac:0d:85:10:41:81:14:ef:5d:da:34:8c:25:b4:e2:
42:e0:b7:e6:98:79:bb:ff:d9:a0:59:cc:65:78:94:
75:e4:13:ca:19:1b:07:5a:83:e1:19:cc:b9:58:4e:
df:e4:ed:74:b8:e3:da:6e:bb:eb:eb:7e:50:2b:3b:
50:9e:79:3b:7f:3c:c9:0b:fa:a3:f9:5b:d5:44:ac:
b1:5a:81:0a:ef:ae:88:46:18:54:b3:b3:2c:34:27:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:9C:25:26:58:60:D5:84:EF:D8:33:65:26:56:59:E2:EE:0D:36
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:13:96:3b:45:af:30:57:79:01:a7:3f:e9:12:07:2e:43:
9f:3a:37:97:ca:b0:c7:b8:b6:cf:8e:7a:39:39:b9:96:8b:c5:
84:ce:50:04:4e:7c:ba:01:0b:95:03:3a:b4:3e:82:18:be:b1:
31:0e:5c:3f:29:57:71:53:ac:49:c0:05:c4:1f:5c:3e:bb:7d:
4b:ea:77:61:a8:2d:8e:bb:6d:81:c6:83:a1:74:20:12:e4:66:
30:db:27:45:ae:01:a9:91:41:e2:68:b4:a6:1e:1f:8a:47:6e:
ab:7f:bf:5f:2a:84:3b:07:5f:81:2d:9c:c6:d9:db:df:5c:4d:
33:36:52:ce:35:21:64:ee:4c:05:a7:5f:68:bf:b9:8f:54:36:
b9:36:92:05:77:87:c2:fb:32:f9:78:7b:36:7a:7b:05:64:b7:
de:87:b3:14:3f:02:9c:dd:bc:ef:3f:ea:62:6e:4b:b9:2c:d1:
2a:c1:12:97:6d:a5:ea:67:35:9e:95:5a:69:8b:ea:5c:09:12:
f9:37:63:81:84:56:32:12:84:70:d0:5a:fa:9e:50:51:e4:45:
ca:dd:16:a7:17:f2:7e:5d:0e:67:e9:56:aa:ba:03:64:e0:c3:
08:d7:b9:89:07:e7:0a:66:fc:b7:57:af:b2:48:43:d2:6c:e6:
00:0b:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:47 2026 by rpki-client