Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: r10q0LTr0Ci+p++WBdkYwUz2jwYSQID6o+6lx3Bs+eA=
Subject key identifier: 00:34:66:87:97:27:B1:46:1C:34:8B:C2:67:0A:CF:A5:08:0C:41:FB
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019D99D0A5666DA9DAAE2D0F062B728E018F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0D05
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: VRM+22yqhc9X8DQeW7Ye3Nfxby0JLeHLS5A5WdIckC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a5:66:6d:a9:da:ae:2d:0f:06:2b:72:8e:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=003466879727b1461c348bc2670acfa5080c41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:b6:2a:bd:5d:57:de:78:83:a8:e9:a1:ba:
3f:f9:01:da:85:20:32:e6:92:86:05:a1:8e:05:ec:
84:72:53:14:d7:fc:2c:e0:c6:ca:53:f8:5e:0e:45:
0f:85:7c:59:12:dc:49:6d:a0:54:ad:c3:f7:d2:82:
9f:41:50:f4:c8:3d:79:bb:3f:0a:76:62:22:f9:4c:
01:ec:f0:8f:bf:ef:26:3d:65:8b:1a:b0:da:c4:f1:
ea:7d:a2:9f:58:79:79:b2:ea:1f:6c:90:43:cc:5b:
28:cf:49:aa:e4:c8:ca:a0:12:d2:4c:3b:42:ea:1f:
fa:78:47:2d:4b:b9:f6:16:35:e8:18:c4:b3:ce:56:
2c:14:e5:ea:48:4b:aa:80:db:dd:26:18:39:31:d6:
3c:13:ac:fa:d6:44:a5:cb:2a:b5:30:ae:45:be:d3:
4d:e4:4b:d5:76:17:3b:5e:9e:a1:44:e6:c0:b1:17:
8f:ab:26:0d:af:0a:06:9c:3a:2e:58:ff:18:c2:57:
7d:8e:5f:e9:52:39:a7:40:f3:21:5c:2c:b8:29:b1:
43:4a:79:cd:f3:4f:04:f3:88:cb:8a:99:da:2b:5e:
49:7e:0c:82:45:4b:85:46:57:a5:3e:70:37:b9:a2:
ad:86:ac:94:d3:ef:e7:00:e9:74:03:b4:be:f4:73:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:66:87:97:27:B1:46:1C:34:8B:C2:67:0A:CF:A5:08:0C:41:FB
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:64:c7:b7:74:60:97:8a:a4:d4:16:ed:90:1c:7d:56:be:
36:f0:bf:36:6d:35:d0:69:23:33:49:0d:9e:76:49:58:cc:7b:
54:22:ac:d1:56:5b:9d:1e:b4:d0:78:ab:b1:44:da:6e:b4:34:
9b:d6:04:8a:70:17:e8:4f:da:01:62:51:10:e2:d9:ce:60:a7:
c0:c3:72:01:51:7d:24:74:e4:35:c6:e0:56:23:e8:91:cf:e2:
f2:52:11:a8:75:41:9d:bf:10:71:ca:d1:61:4c:f4:4b:6f:c0:
6b:ca:df:76:72:2e:a4:0a:04:1a:db:29:70:6a:f4:73:0b:4e:
12:43:86:b5:fd:0d:34:e4:0b:d6:23:e2:7b:41:c5:5f:76:f2:
66:cd:c3:06:7e:45:42:f0:e6:53:4b:f1:75:72:64:70:78:ae:
75:70:3d:c1:d1:8f:61:37:f5:99:2b:6c:e2:10:2d:a3:94:36:
44:33:69:af:14:88:ae:cb:58:d4:7e:a7:f7:2b:3c:e8:14:b6:
1d:8e:77:4d:54:88:4f:85:8d:d1:e3:08:01:61:88:f8:cd:7b:
38:b8:3c:b7:c1:36:4b:13:43:01:e3:1e:78:4b:6c:79:e9:a7:
2e:f9:1d:89:57:34:da:a8:4e:50:7f:3c:d8:db:37:bf:71:79:
06:83:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:43 2026 by rpki-client