Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: 8QG2Y6D7LlFeYFKqnI3ZtKAsDeVXY+2dXyFOt/fOAh4=
Subject key identifier: A1:2D:F8:12:62:97:F5:CD:31:F4:F2:AD:CA:7D:09:C9:9E:7B:88:DD
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019DA48A87C1E37A148E5C50534B164C998E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 05BF
Signing time: Sun 19 Apr 2026 07:00:35 +0000
Manifest this update: Sun 19 Apr 2026 07:00:35 +0000
Manifest next update: Mon 20 Apr 2026 07:00:35 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: AONaXUYlOYrKRUK2vF/d9VjlbH1C4S4wqho5vOc23HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:87:c1:e3:7a:14:8e:5c:50:53:4b:16:4c:99:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Apr 19 07:00:35 2026 GMT
Not After : Apr 20 07:00:35 2026 GMT
Subject: CN=a12df8126297f5cd31f4f2adca7d09c99e7b88dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:79:9e:75:39:db:36:ca:d7:59:59:14:7d:51:
3d:ed:8f:47:93:20:3b:56:df:83:8e:42:15:5e:68:
a2:b4:f9:ff:80:06:50:f6:50:65:33:f4:7c:96:66:
9c:0d:69:f2:88:c9:d6:68:7b:b5:70:b3:b6:ed:a1:
8d:82:b3:83:13:cb:11:d5:91:9f:b8:a4:d8:8a:d8:
8b:af:ed:64:57:0e:36:3d:95:f9:2c:73:82:ca:ea:
45:b0:5f:a2:2d:36:90:ac:e2:b8:ca:89:07:c2:39:
60:51:ce:bf:c0:e1:67:87:92:f8:58:0a:80:29:de:
9c:2b:33:a9:ee:8e:bd:4d:32:cb:ee:14:e0:53:29:
b0:c7:f6:2e:09:ee:2a:3e:8b:a6:dd:d2:64:6f:80:
0a:33:37:af:37:50:45:64:ce:f7:ac:88:1a:46:e1:
4a:d2:a9:5a:16:cb:f5:68:77:f1:2c:b7:c5:f9:33:
b7:2b:00:5d:6e:74:1a:0d:27:8c:cb:eb:27:e0:91:
11:5b:2e:1e:89:5b:46:91:7e:09:c2:17:19:2c:d5:
f4:fa:b8:de:46:60:47:e7:fe:6b:5f:f7:39:e5:1b:
33:4e:2e:21:70:78:dd:05:88:f0:f0:fc:68:b6:95:
85:b6:58:f9:bb:71:a9:41:17:0a:b4:08:3f:70:a3:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:F8:12:62:97:F5:CD:31:F4:F2:AD:CA:7D:09:C9:9E:7B:88:DD
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:45:07:a6:2a:72:9e:5c:42:0c:37:75:45:82:c7:0d:c0:
53:7b:f4:25:34:d7:5b:69:22:1b:ad:86:09:ba:df:57:bb:91:
b0:32:4a:f5:4a:44:00:0a:b7:7d:e5:06:0d:af:53:2c:d1:ce:
07:a0:f8:df:b8:b4:12:49:5c:3c:7f:10:93:3b:dd:4f:83:2a:
5b:18:99:02:43:39:9a:42:ab:a1:93:92:d0:4e:09:16:89:94:
02:7b:b1:b2:5e:19:f6:ca:cb:a9:da:c1:e6:f2:c3:69:82:27:
48:46:a1:b4:18:2f:10:b9:3f:b9:30:19:61:b5:34:98:88:83:
d7:32:36:8b:f5:d1:6c:a2:88:4c:4a:5a:44:95:43:7e:d6:a1:
80:fd:c8:01:3c:02:03:10:92:77:49:17:11:80:7d:0b:65:ac:
37:e4:cf:5a:7f:c7:ce:87:42:f6:11:99:04:89:78:e1:6f:fe:
01:12:df:a7:38:30:f9:be:77:7f:9c:ef:f2:5d:f7:f8:f9:c9:
9c:d5:4b:67:32:05:44:5c:6e:16:86:48:5a:28:94:16:e4:6c:
37:65:b5:0c:44:60:6a:74:3b:53:f6:1c:e8:8c:34:4e:56:9c:
aa:1d:29:89:6e:60:d6:45:65:5c:53:24:d6:5d:64:b4:41:67:
98:e8:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:16 2026 by rpki-client