Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: jvkrZCoaioa5CGJtZLjAxnBvM7U4XdnlqYwGJ58m1+g=
Subject key identifier: B6:F5:F7:B4:81:8B:4F:67:F8:D6:A4:ED:42:DD:C3:C3:A5:EC:44:76
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019CAA58884FB698F0E838FEF86665C8C73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0C89
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: ll1RPiZePtVQB3OT9x67Y+N+ZFmoBPyyxyWa8l7Qynk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:88:4f:b6:98:f0:e8:38:fe:f8:66:65:c8:c7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=b6f5f7b4818b4f67f8d6a4ed42ddc3c3a5ec4476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:54:4e:5b:0c:5a:e7:0e:c7:08:1f:f7:68:
a0:45:26:c3:2b:63:1e:bb:af:45:6f:e6:67:b4:3c:
0a:42:96:ee:49:db:32:3a:3b:cc:b6:2c:5e:3a:2d:
42:19:19:00:bd:06:38:52:03:fb:7a:17:2a:4a:83:
2f:3e:7a:5d:ee:8a:3f:b8:25:8f:f9:c3:9a:f5:5a:
30:0d:7d:7c:a2:ea:59:35:54:7f:06:65:67:60:f4:
26:6a:45:b5:04:a1:84:62:50:36:0a:33:24:5a:9a:
9a:4c:13:d5:4c:ce:68:40:96:7e:88:c5:c3:a7:a8:
76:b2:27:90:7b:c5:18:17:90:a1:e5:61:84:ed:54:
30:c2:1a:f9:78:d1:ae:5f:55:6f:a4:46:c7:0c:ed:
14:26:91:90:80:20:26:af:b6:15:92:c7:1c:1e:b2:
8d:da:24:81:47:e9:31:2a:5f:7d:db:33:dd:c8:a6:
9d:27:cb:e2:27:9f:fa:b0:4a:ad:ea:a2:e7:bf:de:
f3:35:51:06:b8:3a:b5:b9:66:e3:e0:11:64:b8:33:
43:aa:b9:02:d1:71:5a:2a:91:54:37:51:2e:d9:27:
f4:85:9d:04:9e:dc:10:14:d0:5e:c2:67:6e:e5:99:
89:75:14:e0:8f:fb:36:cb:f2:79:51:5e:e3:15:f4:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F5:F7:B4:81:8B:4F:67:F8:D6:A4:ED:42:DD:C3:C3:A5:EC:44:76
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:30:64:20:10:d8:7d:83:6d:f2:62:d7:96:49:98:21:72:e2:
37:2c:b1:20:d9:66:3f:fb:0b:f8:3a:4f:4e:28:f7:68:ca:71:
fe:71:fe:db:f0:c4:08:10:52:a5:67:99:e7:47:39:14:95:e1:
ba:e2:21:64:3d:ae:ea:ba:0e:8d:a8:c7:fa:cb:ab:38:1a:7d:
3a:a5:2a:5a:62:7d:9b:6f:5b:d2:de:32:5b:41:16:9a:8e:88:
7d:99:89:31:85:bf:ab:1d:ad:c6:aa:f9:6a:91:f6:d8:eb:d9:
f1:8f:57:88:a5:76:31:79:ca:4c:96:03:0f:f7:0f:98:cb:53:
26:8f:ea:15:6c:f6:45:08:3e:e4:ad:c5:5e:20:79:b6:e9:ec:
53:a8:28:11:81:52:b6:50:18:05:93:c0:d4:4b:86:ab:d8:95:
4f:b2:0a:ac:cc:ee:27:83:b7:86:fb:26:e7:65:4a:04:fc:99:
cd:64:f5:8b:6a:d4:0f:57:4b:9f:96:21:68:c6:64:3a:50:55:
40:a4:ac:5a:8f:8d:5e:a0:eb:2d:5c:c6:99:aa:45:22:a7:54:
54:88:ad:9c:2a:2b:5e:4f:1c:27:d8:10:5e:95:1e:a2:3c:d6:
5f:a6:20:2f:da:97:20:ea:6c:48:e5:ed:90:48:93:36:5a:43:
24:98:31:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWIhPtpjw6Dj++GZlyMc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjYwMzAxMTcwMDU0WhcNMjYwMzAyMTcwMDU0WjAzMTEwLwYDVQQD
EyhiNmY1ZjdiNDgxOGI0ZjY3ZjhkNmE0ZWQ0MmRkYzNjM2E1ZWM0NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdFUTlsMWucOxwgf92igRSbDK2Me
u69Fb+ZntDwKQpbuSdsyOjvMtixeOi1CGRkAvQY4UgP7ehcqSoMvPnpd7oo/uCWP
+cOa9VowDX18oupZNVR/BmVnYPQmakW1BKGEYlA2CjMkWpqaTBPVTM5oQJZ+iMXD
p6h2sieQe8UYF5Ch5WGE7VQwwhr5eNGuX1VvpEbHDO0UJpGQgCAmr7YVksccHrKN
2iSBR+kxKl992zPdyKadJ8viJ5/6sEqt6qLnv97zNVEGuDq1uWbj4BFkuDNDqrkC
0XFaKpFUN1Eu2Sf0hZ0EntwQFNBewmdu5ZmJdRTgj/s2y/J5UV7jFfR3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb197SBi09n+Nak7ULdw8Ol7ER2MB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDBkIBDY
fYNt8mLXlkmYIXLiNyyxINlmP/sL+DpPTij3aMpx/nH+2/DECBBSpWeZ50c5FJXh
uuIhZD2u6roOjajH+surOBp9OqUqWmJ9m29b0t4yW0EWmo6IfZmJMYW/qx2txqr5
apH22OvZ8Y9XiKV2MXnKTJYDD/cPmMtTJo/qFWz2RQg+5K3FXiB5tunsU6goEYFS
tlAYBZPA1EuGq9iVT7IKrMzuJ4O3hvsm52VKBPyZzWT1i2rUD1dLn5YhaMZkOlBV
QKSsWo+NXqDrLVzGmapFIqdUVIitnCorXk8cJ9gQXpUeojzWX6YgL9qXIOpsSOXt
kEiTNlpDJJgxXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:10 2026 by rpki-client