Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: Te7JYJpx9zCqdfvZWv9qJfGNM3ECCAcyi02/hDBAW1M=
Subject key identifier: EF:05:31:5C:A1:FE:B4:46:19:96:42:5B:C6:DE:E2:CB:F8:9D:EB:29
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019CAD59A6DD2B0489DCB780363CDF5243C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 053F
Signing time: Mon 02 Mar 2026 07:00:59 +0000
Manifest this update: Mon 02 Mar 2026 07:00:59 +0000
Manifest next update: Tue 03 Mar 2026 07:00:59 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: I2XqpZcEA4FwcOFNso/maN3SGKn6UwlQ/vdaGgbJfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a6:dd:2b:04:89:dc:b7:80:36:3c:df:52:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Mar 2 07:00:59 2026 GMT
Not After : Mar 3 07:00:59 2026 GMT
Subject: CN=ef05315ca1feb4461996425bc6dee2cbf89deb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:52:77:a9:48:a6:d1:3a:d5:00:48:e3:23:
7d:2b:f2:73:43:0f:1c:7e:cc:be:fb:38:90:a6:19:
45:85:d9:ef:2a:12:e8:9d:72:5c:e9:2b:da:47:5b:
2e:ee:ec:0d:2a:d8:e5:ba:af:07:e1:1f:83:31:03:
af:83:d4:9c:ac:f7:f6:21:90:67:b5:ff:0a:bf:17:
b0:e4:7a:4f:4f:3b:e0:7b:d3:8f:b6:6b:58:b0:92:
b7:ca:c2:4f:dd:5a:ba:bc:e2:05:ba:c3:65:e7:3d:
82:fa:84:d4:bb:5c:56:fa:b2:e3:c1:19:f0:17:84:
5a:37:21:b6:84:f3:4b:4a:56:85:58:df:01:14:f0:
0f:ae:45:20:17:24:44:66:34:40:f4:f9:62:7e:fa:
96:9e:21:8e:01:76:c7:1c:35:cb:08:e4:ce:8a:8f:
85:33:09:0f:62:ae:aa:4a:f6:f6:a7:78:14:2f:44:
7f:0a:3d:be:52:a5:ba:51:61:a4:d7:8f:9a:44:ba:
b5:a2:40:84:c1:59:41:16:e2:91:a8:77:ec:2f:fc:
50:be:34:84:61:05:31:3c:9c:16:b7:ee:23:24:11:
ca:b5:f6:1e:6a:57:27:41:82:fb:49:b4:f3:e4:4b:
80:87:86:fd:2b:f1:aa:b4:af:6c:6a:40:8f:c1:48:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:05:31:5C:A1:FE:B4:46:19:96:42:5B:C6:DE:E2:CB:F8:9D:EB:29
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:93:1a:d4:3e:86:48:39:5d:fa:f6:63:21:73:98:40:f7:
ab:e3:60:88:37:95:3f:3d:f3:27:19:e1:46:27:17:04:7c:a9:
95:fb:10:c2:7f:c6:bb:12:32:8d:69:8c:ab:77:9d:63:1d:93:
3b:9c:59:13:ac:68:c5:14:1a:3e:e4:8e:83:40:09:8c:3a:36:
50:3e:e6:51:62:15:8d:07:5b:2b:0c:87:9f:ac:e7:30:94:a8:
a5:e8:9d:94:a1:91:9c:15:fe:99:18:5f:75:a8:70:fa:11:d3:
ee:f3:3b:be:b1:bc:83:5e:00:78:e5:08:d1:4d:44:59:19:e1:
9b:cf:d2:e3:98:14:08:61:3e:3e:f1:28:ef:af:01:da:5a:20:
e3:cd:49:e1:ea:5e:4e:d8:33:81:62:dd:e5:2c:03:2d:31:13:
1c:54:14:e9:67:7c:2e:d9:60:fd:12:07:4c:09:26:39:55:a2:
13:ac:52:12:6e:95:6a:22:b1:a1:a4:dd:b5:73:f4:87:ea:6b:
c6:07:b6:d5:6c:df:96:1b:4e:80:a4:8d:d2:c0:3c:a9:c2:07:
c9:40:2f:3e:e2:2b:08:c4:4d:d0:7a:8a:09:bc:ce:94:1d:26:
38:7d:e4:d2:7c:a5:46:2d:56:5a:aa:1b:85:63:52:31:f1:6b:
84:6b:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:45 2026 by rpki-client