Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: jEOx0CuCZvToIlCreSz37mCwR7ZfjEkKxTCXBVqaf2Y=
Subject key identifier: 74:69:FC:1F:4A:6A:AC:10:28:7B:62:98:EA:7A:13:F9:19:A3:E0:A4
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019FAAF55BD492B9511BE7C06858DF296450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0E17
Signing time: Tue 28 Jul 2026 23:00:34 +0000
Manifest this update: Tue 28 Jul 2026 23:00:34 +0000
Manifest next update: Wed 29 Jul 2026 23:00:34 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: aj+vWzWLQWAmSuYffMExs7irBbcMhSsRNddaI8pvHMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:5b:d4:92:b9:51:1b:e7:c0:68:58:df:29:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jul 28 23:00:34 2026 GMT
Not After : Jul 29 23:00:34 2026 GMT
Subject: CN=7469fc1f4a6aac10287b6298ea7a13f919a3e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:6e:7e:fa:d5:e9:48:26:6d:38:c2:e2:a9:
49:fe:2f:38:1a:9f:01:f9:ef:89:c0:f5:7e:05:a7:
b5:02:6d:f0:e5:85:91:31:d5:4a:7b:09:7f:4d:5c:
79:ec:45:67:0f:a3:fd:c4:5d:3d:c9:c1:d4:0f:f0:
c3:ba:bb:c4:83:0a:d4:20:36:86:91:cc:4f:dd:f0:
d2:54:14:78:f4:7b:ab:f7:46:4c:58:f1:e9:f4:2b:
59:fc:58:53:71:06:f4:e9:d0:b3:a9:b1:b1:f8:14:
5a:e3:08:2b:78:c9:70:cf:8e:5f:6c:00:2c:99:14:
f7:91:12:ce:80:58:1f:01:8e:ef:5a:b2:e7:18:14:
3d:4f:47:bd:2c:44:25:24:be:29:23:26:da:7f:33:
4a:d1:50:af:d1:64:7f:0a:ae:1f:f1:c8:ee:0d:7a:
37:c7:96:5a:8b:52:32:59:d6:6c:2f:14:e2:bc:b5:
5c:93:fe:8b:02:ea:61:3c:e8:6d:05:37:a8:7d:0f:
6c:54:57:fd:6d:7d:bf:31:43:c7:f4:87:da:62:ed:
d5:e5:35:b4:c3:61:ea:d7:19:78:10:3e:08:48:be:
d8:b1:14:79:e1:31:d2:17:34:6c:3c:36:82:1d:57:
03:10:e0:2f:6a:d9:83:96:d7:29:43:d8:b2:77:a1:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:FC:1F:4A:6A:AC:10:28:7B:62:98:EA:7A:13:F9:19:A3:E0:A4
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:2d:62:bd:1c:91:99:05:e3:cd:3e:e4:3d:a4:49:87:36:
43:51:64:11:12:3a:3f:a2:e6:34:e0:dc:20:be:92:89:f9:72:
96:3b:c1:0d:b6:89:e2:4a:c7:7e:5f:40:83:43:13:58:f8:ff:
02:44:70:a4:13:13:74:57:6b:33:eb:22:ad:8d:be:79:f2:ff:
80:8b:50:d7:54:a1:b2:da:06:04:4d:2e:09:a4:8b:1b:24:b8:
47:c4:b4:f5:32:b3:e8:e6:c2:3b:27:8a:7c:d7:5d:3a:7e:09:
c4:1b:c3:80:00:39:9e:b7:3b:de:a6:64:79:5e:38:d4:5d:e6:
03:f2:99:b6:29:62:27:3c:0b:eb:3a:d8:7d:cb:51:b4:a5:05:
0b:4f:18:68:07:b4:b5:05:bc:31:58:e0:d8:77:9a:04:d6:28:
a5:3b:7b:bd:3d:10:52:a2:46:ed:7d:bd:48:37:1c:df:15:4c:
11:c5:30:ad:f7:73:34:3d:06:f7:4d:bb:9f:69:5b:a8:b8:70:
9f:01:33:78:54:c3:1a:14:a1:5f:53:b3:32:67:42:c1:0b:da:
19:52:68:c9:98:35:e5:36:df:38:18:1e:5d:5e:be:2a:63:47:
a6:f9:4f:85:af:a6:3f:54:22:3b:15:11:8c:43:13:be:a7:c9:
61:15:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:10 2026 by rpki-client