Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: RuK6p6CXB82TEWUWJqeXDM9YWvlYiomCZuLrD5nBjU0=
Subject key identifier: 81:97:8E:B5:A9:57:70:51:51:D1:8C:2E:FD:E3:87:D2:57:E1:F9:0D
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019CAA58917ADDE9A32761FF3C01E9DC5A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:00:57 +0000
Manifest this update: Sun 01 Mar 2026 17:00:57 +0000
Manifest next update: Mon 02 Mar 2026 17:00:57 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: jE4btWz6M5Tj9frVAMyx8uhNfTKRhXn+6xihjuPt8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:91:7a:dd:e9:a3:27:61:ff:3c:01:e9:dc:5a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Mar 1 17:00:57 2026 GMT
Not After : Mar 2 17:00:57 2026 GMT
Subject: CN=81978eb5a957705151d18c2efde387d257e1f90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:8e:8b:af:c2:33:e3:5d:07:60:61:3e:4e:
07:a7:be:76:3e:77:8b:07:ea:3d:fd:1e:86:54:bd:
45:ac:11:47:db:0d:7a:d3:9f:a0:e9:89:da:1d:7a:
f1:04:d7:f3:06:74:4d:29:29:f3:84:2b:9c:91:63:
a1:c5:12:0a:79:30:46:c8:f1:ed:2a:33:bd:c7:8c:
a7:77:a1:81:55:60:c0:1c:00:b8:50:9b:c9:3b:b3:
9f:05:1b:ea:be:84:69:d7:5f:22:77:59:8c:02:5f:
ec:e1:70:e4:cd:ee:a8:23:85:4a:49:2e:50:e7:7c:
65:52:3d:72:33:64:6a:67:06:a8:6f:c8:d5:0a:64:
0c:cb:39:e1:ed:e7:c2:72:6f:54:4b:c2:98:54:52:
4c:a5:34:0c:b3:d5:61:b4:dc:c6:5a:de:dc:83:f5:
2d:00:d1:61:1b:0f:80:81:90:10:31:4e:a5:4c:58:
a8:63:31:37:38:88:69:18:64:a5:9e:13:41:b6:b5:
ce:6c:fe:68:0b:da:0a:66:3e:02:e9:54:fa:b3:5d:
99:cc:76:21:49:32:00:da:14:2b:e5:4c:87:15:51:
b3:77:1e:4d:af:55:95:90:a8:46:7d:b7:79:4f:d8:
30:59:48:1a:9f:8e:60:05:99:e8:7c:0c:3a:36:9f:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:97:8E:B5:A9:57:70:51:51:D1:8C:2E:FD:E3:87:D2:57:E1:F9:0D
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8c:b7:1c:b6:5d:a3:0c:83:0f:43:3e:37:3a:ff:6c:69:01:
e0:06:93:73:77:56:23:68:83:88:04:6b:e3:71:e7:4b:32:0f:
6b:35:4c:38:fc:3e:42:2b:45:42:80:88:f8:2d:08:e2:b9:bd:
94:d6:ec:5c:eb:39:5e:cb:c1:66:2d:56:6f:46:45:1d:52:af:
4c:a1:30:f9:5c:4a:79:a5:39:80:dc:09:d1:4a:ec:31:e1:ed:
9d:f9:45:6c:dc:3b:22:41:0a:da:80:f6:d6:12:59:c4:35:7f:
69:29:eb:c9:b9:9e:a9:ad:7a:4e:b1:6f:bc:a8:eb:6d:1e:28:
f9:f0:57:1c:e5:63:c2:4d:5a:96:b5:24:50:50:1b:84:18:4d:
cf:ae:68:3b:e8:89:ab:73:e4:24:61:17:1d:e6:0f:25:b4:9a:
5b:d8:a7:0c:61:82:b2:f7:9b:65:8d:0c:65:1e:ef:ca:64:62:
50:7f:c3:14:54:6b:24:6b:6f:a1:58:06:7a:46:fe:6e:d9:d6:
41:f9:3d:14:ce:4a:2f:4a:9a:5d:67:f5:7e:eb:10:ac:2d:39:
ca:f5:fd:8d:49:e3:93:8c:32:44:3e:69:f0:75:35:8a:e5:f5:
08:9a:e7:b5:6f:a3:7f:bf:36:5b:6a:09:d0:d7:a6:46:a7:f0:
32:6e:c9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJF63emjJ2H/PAHp3FpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjkxMjViOGExMGQzMjIzNDg2ODFhMmQyYWM3ZDY3ZDJh
ZDI1MzUwHhcNMjYwMzAxMTcwMDU3WhcNMjYwMzAyMTcwMDU3WjAzMTEwLwYDVQQD
Eyg4MTk3OGViNWE5NTc3MDUxNTFkMThjMmVmZGUzODdkMjU3ZTFmOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+KOi6/CM+NdB2BhPk4Hp752PneL
B+o9/R6GVL1FrBFH2w1605+g6YnaHXrxBNfzBnRNKSnzhCuckWOhxRIKeTBGyPHt
KjO9x4ynd6GBVWDAHAC4UJvJO7OfBRvqvoRp118id1mMAl/s4XDkze6oI4VKSS5Q
53xlUj1yM2RqZwaob8jVCmQMyznh7efCcm9US8KYVFJMpTQMs9VhtNzGWt7cg/Ut
ANFhGw+AgZAQMU6lTFioYzE3OIhpGGSlnhNBtrXObP5oC9oKZj4C6VT6s12ZzHYh
STIA2hQr5UyHFVGzdx5Nr1WVkKhGfbd5T9gwWUgan45gBZnofAw6Np/HcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGXjrWpV3BRUdGMLv3jh9JX4fkNMB8GA1UdIwQY
MBaAFGu5EluKENMiNIaBotKsfWfSrSU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUt
ODNiYzQxM2EwNDhkLzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS80YjI4YjgtNzdmNi00NmQzLWI4ZDUtODNiYzQxM2EwNDhk
LzEvYTdrU1c0b1EweUkwaG9HaTBxeDlaOUt0SlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4y3HLZd
owyDD0M+Nzr/bGkB4AaTc3dWI2iDiARr43HnSzIPazVMOPw+QitFQoCI+C0I4rm9
lNbsXOs5XsvBZi1Wb0ZFHVKvTKEw+VxKeaU5gNwJ0UrsMeHtnflFbNw7IkEK2oD2
1hJZxDV/aSnrybmeqa16TrFvvKjrbR4o+fBXHOVjwk1alrUkUFAbhBhNz65oO+iJ
q3PkJGEXHeYPJbSaW9inDGGCsvebZY0MZR7vymRiUH/DFFRrJGtvoVgGekb+btnW
Qfk9FM5KL0qaXWf1fusQrC05yvX9jUnjk4wyRD5p8HU1iuX1CJrntW+jf782W2oJ
0NemRqfwMm7J8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:34 2026 by rpki-client