Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: 1IA5bw6N/jBFEur/QU4YZeZK14w9i1mtq765HTmd1oM=
Subject key identifier: 75:B9:DC:BD:03:05:32:C3:4B:07:84:61:53:37:9F:A4:4A:F0:1E:EA
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019D992B938AAF2304A5D1640FFEB33CE32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 057D
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: jWes3qs3xi1BkgxwA8EYPk+mnf8SZ33KYHGY5eS0720=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:93:8a:af:23:04:a5:d1:64:0f:fe:b3:3c:e3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=75b9dcbd030532c34b07846153379fa44af01eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ee:92:9c:f4:81:03:aa:88:cf:5b:aa:ad:9d:
11:a4:61:8b:c2:59:e8:a0:bd:00:72:43:36:4e:25:
9f:ee:d3:35:58:3a:a3:2b:15:de:7d:6e:29:87:7b:
83:b5:07:23:fc:ae:c2:0a:31:04:ee:01:e2:b7:ef:
95:10:fe:e9:28:e0:4e:cb:8b:9b:bd:a8:18:1b:ba:
3c:7f:69:79:0e:e1:2d:a4:4d:66:94:cc:16:27:ea:
fe:e5:c0:d2:00:01:92:80:72:50:75:01:b5:56:e5:
62:3d:4a:4b:a1:16:ea:24:63:53:68:4e:84:2c:5a:
c8:8c:19:d0:37:6a:0c:46:12:bd:16:a8:35:5c:8c:
46:c2:96:3c:49:66:2c:d5:ba:4c:19:a2:58:06:d9:
7b:cd:42:45:f7:3d:07:90:b9:59:20:de:b2:58:f3:
ab:b1:de:69:f6:83:24:c8:b3:ff:b4:f8:5f:9a:14:
6a:a8:f9:8f:15:ba:03:d8:e7:ab:90:a9:ca:66:db:
ed:10:63:ee:dc:32:a0:c3:28:a2:c0:fa:1a:74:6d:
2d:6e:34:7f:63:85:ca:c9:7e:c4:e9:6c:b8:43:02:
5b:d6:74:79:14:fa:d8:3d:62:c6:73:8d:f7:88:55:
e9:37:3c:4b:83:2d:0b:df:b7:46:2a:18:db:05:28:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:DC:BD:03:05:32:C3:4B:07:84:61:53:37:9F:A4:4A:F0:1E:EA
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b1:da:b6:5f:21:94:78:81:4a:e9:44:21:c1:53:04:03:6f:
8a:10:79:fc:ce:d2:93:cc:21:ef:fa:f2:2d:4f:4a:3c:27:ba:
a2:47:ba:8e:4f:f0:41:2c:a8:82:56:4b:a5:9f:48:6d:06:88:
c4:5a:e2:ae:91:4e:7b:3c:9d:c2:e4:8b:47:75:ca:30:e5:db:
df:21:11:e4:1b:9e:4a:56:3d:50:20:f4:b4:05:c9:5b:4d:1a:
35:1b:62:ca:9d:13:cc:ef:03:90:ff:fc:3d:76:ca:67:e7:d0:
2d:5b:af:98:fa:ed:9e:3e:eb:c5:3c:82:45:71:2b:1e:04:3d:
24:16:41:2c:be:bc:d9:3a:63:e3:c6:8c:9c:c2:69:23:1f:85:
1c:20:96:82:2e:f2:bc:cd:13:16:1b:3d:d6:1a:95:5c:a7:e2:
08:95:f5:a7:2d:ec:65:0f:a9:02:26:a1:77:ba:c8:b1:00:74:
b2:43:b7:ef:c4:2b:b5:f3:a1:91:a2:f4:a4:1d:58:5e:6a:e5:
36:29:9e:59:a5:6d:1d:6a:af:c0:66:52:ab:3e:80:f4:37:ad:
83:b1:b2:20:e8:59:1d:ff:41:70:f5:41:8d:38:14:d1:89:c4:
bc:a7:a8:fe:58:45:e5:23:0e:4a:f9:d4:db:39:c8:c4:24:b1:
bd:66:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:05 2026 by rpki-client