Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: NS6bYcx6+hoO9rXVgHGrBfmY0qS//7YBHP0IS5S0Sks=
Subject key identifier: 72:79:66:DF:61:8C:68:1B:64:B9:74:BE:81:83:15:A9:F3:BE:94:85
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019EC14952C6C5831F06C478173673348B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0D9E
Signing time: Sat 13 Jun 2026 14:01:08 +0000
Manifest this update: Sat 13 Jun 2026 14:01:08 +0000
Manifest next update: Sun 14 Jun 2026 14:01:08 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: Ksbr2neogjfmCExHtxds8z4rfJt7IC4U5wJiW/wGM7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:52:c6:c5:83:1f:06:c4:78:17:36:73:34:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jun 13 14:01:08 2026 GMT
Not After : Jun 14 14:01:08 2026 GMT
Subject: CN=727966df618c681b64b974be818315a9f3be9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:39:6c:24:46:e8:10:0d:98:75:a6:d0:b0:
56:cb:17:64:1c:ab:67:21:62:4d:4d:c3:c0:7f:cb:
d8:c0:ed:a8:81:d3:9d:a0:bc:e7:5d:67:0e:c2:11:
f2:31:ae:65:87:e7:ef:58:c9:37:5e:03:38:4f:53:
f9:70:88:84:56:a0:8c:14:09:17:12:e3:56:cc:93:
9c:b9:e2:04:3b:8a:25:6b:71:f3:c7:4a:b2:19:93:
51:2c:f6:bc:cc:23:6d:1c:f4:b3:3e:1b:37:7b:71:
72:7e:f7:a3:e3:f7:56:a8:f4:92:4b:f1:d6:9b:c5:
80:25:98:19:17:7a:aa:10:ac:a1:92:f9:85:9c:fe:
7a:19:e5:b6:ee:35:2c:c6:9b:ba:ce:bf:2b:14:2a:
9d:53:60:5b:27:57:9c:8a:e5:91:64:d7:1e:e0:f4:
53:83:79:f2:9e:ff:28:3b:d4:71:83:cc:44:72:c0:
5d:5f:99:4f:bf:82:49:9b:e7:3e:d9:7d:d3:5a:db:
e4:8e:32:3d:3c:06:5f:3e:28:ec:8c:11:69:ca:e9:
5f:11:5c:13:4e:a1:54:f1:15:ce:19:b2:86:45:bc:
a6:44:6b:c1:33:15:f1:99:8f:f2:7d:e4:c5:af:09:
b8:a4:80:2a:34:e1:b5:98:96:df:19:0f:18:c2:b1:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:66:DF:61:8C:68:1B:64:B9:74:BE:81:83:15:A9:F3:BE:94:85
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:95:36:80:6e:2d:d5:ef:27:7d:8a:50:bc:eb:3f:ca:17:
d4:76:97:61:14:95:e2:cf:69:ff:88:7e:16:62:c2:c6:8a:eb:
70:5d:e9:1d:47:7c:94:3d:17:62:3a:c5:c9:28:f9:23:ec:2e:
40:04:70:73:43:61:cb:5d:39:24:89:f4:b6:9f:25:10:50:f5:
4c:f7:01:0c:d8:df:97:ed:31:a1:af:91:a4:c0:c2:5b:f6:29:
ca:68:c7:d3:ad:b9:9c:3f:5b:5f:03:ed:91:a6:d9:e8:63:83:
3e:40:f5:ed:de:01:29:2c:e6:1e:2a:fb:2c:f5:80:bc:e9:91:
0a:5b:2f:37:28:79:3f:df:fe:3e:54:33:54:1b:c5:52:2b:cc:
84:3d:0e:25:5b:b7:36:db:fc:77:43:1c:21:87:48:e2:bb:fb:
5e:7c:6f:2e:b3:0e:22:80:ed:53:c2:aa:66:f4:7f:7c:d6:64:
5a:cb:4a:d5:bb:4f:0e:0e:52:3d:58:c2:c4:3d:e4:81:70:57:
a0:08:c4:77:19:7d:0b:62:ba:a7:78:e1:fa:f5:37:9d:f0:48:
34:8e:56:f9:9d:48:88:5d:a2:bd:4c:4e:17:1e:3f:f3:06:e6:
8b:89:ba:b2:b0:f5:5b:dc:17:06:a0:74:c2:a0:b6:8c:71:fb:
59:78:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:27 2026 by rpki-client