Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: i8G3EU633SgBLRAgOCP5t5aNydvsZxDrzrwz801Tj2A=
Subject key identifier: C5:E6:69:69:12:72:6E:09:57:79:F6:23:E5:D7:64:F8:85:27:6F:A1
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01A0DA293720C6F394588FE996A835AD9F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0EB4
Signing time: Fri 25 Sep 2026 20:02:08 +0000
Manifest this update: Fri 25 Sep 2026 20:02:08 +0000
Manifest next update: Sat 26 Sep 2026 20:02:08 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: HGRRSI2rZqkWgls0B3QT1LsutVq3xw4CfVN9HS6xYVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:37:20:c6:f3:94:58:8f:e9:96:a8:35:ad:9f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Sep 25 20:02:08 2026 GMT
Not After : Sep 26 20:02:08 2026 GMT
Subject: CN=c5e6696912726e095779f623e5d764f885276fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:54:ff:2e:0a:e6:6e:a7:c1:f0:52:5f:15:
00:e5:c7:3c:47:aa:bd:a6:46:ec:de:69:72:87:9c:
d1:ab:9a:6a:3a:4a:df:9f:0d:fe:01:a1:c5:97:e5:
7c:4a:3d:98:5c:4b:2f:51:3d:5e:80:7d:09:bb:59:
84:64:e7:87:eb:f9:9d:9e:83:aa:56:10:79:28:ff:
4e:ff:f6:70:b3:d1:68:b7:d4:46:88:ed:53:7b:52:
08:07:a1:8c:c5:66:ed:a6:56:d0:b8:4f:1e:00:93:
18:a8:21:ef:18:81:4d:e1:cc:e3:dc:8f:0d:a9:19:
b4:54:55:cf:14:2f:fa:c5:c3:d9:d6:cc:4a:86:5e:
4c:ba:e5:24:a9:92:85:76:c6:23:dd:fc:cc:c7:21:
db:50:c0:89:00:10:2d:54:47:83:cd:81:eb:d4:46:
75:c5:f2:2c:89:41:06:d8:6d:01:13:46:b2:05:0f:
a2:05:8d:94:7b:a8:16:1e:54:94:68:2a:b0:f9:d9:
e4:5a:d0:a8:b6:d5:f9:99:5b:77:48:7b:60:2a:90:
83:8e:20:69:a5:24:db:71:37:ee:53:8d:60:d1:a2:
a0:19:58:13:31:c2:f3:da:97:17:f5:0d:34:b2:27:
a6:8d:0c:46:a6:cd:96:34:0e:36:ea:7e:0b:f8:cf:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E6:69:69:12:72:6E:09:57:79:F6:23:E5:D7:64:F8:85:27:6F:A1
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:61:0a:cc:e6:7e:ff:69:76:af:65:b8:87:c9:db:b9:a4:85:
6b:61:7d:f3:2e:3a:14:8e:de:46:a1:7f:87:63:f0:e6:3d:ca:
d4:0a:f7:0b:13:27:d0:36:87:5f:03:98:7f:10:4c:9f:92:d6:
f6:39:73:0a:e6:96:9f:45:a5:43:94:96:19:33:10:98:96:fb:
2c:d0:b4:0d:1c:66:25:1d:e0:09:4b:bb:5f:c6:0c:00:e4:c3:
51:67:c7:c8:30:3d:13:42:a4:b8:ed:e5:c8:8b:af:bc:ff:6d:
b4:e2:80:72:c0:bd:d0:6e:20:81:ee:05:c9:2a:98:44:23:17:
c9:45:6c:0b:a0:c4:9d:8a:df:d5:43:b0:8a:b9:57:7c:5c:be:
a1:1b:db:ee:73:72:69:9a:23:e5:e3:4d:0d:75:62:c8:92:ee:
74:34:47:8a:d6:b1:26:53:ca:5f:9b:73:7b:bf:eb:3c:49:c7:
d7:13:52:ef:e4:14:40:42:c8:3f:1a:a9:f0:9c:cd:32:ff:63:
9a:15:3f:81:9d:a9:4d:c6:3e:bf:e3:75:47:64:cd:3c:0c:be:
23:5b:a2:43:4c:3c:36:6a:f7:e5:15:54:f3:17:71:27:4f:b5:
98:67:38:28:0b:37:14:b9:4d:c8:47:62:cb:cf:05:c9:a0:fa:
00:db:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:52:04 2026 by rpki-client