Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: wKzilzhbPfQmPUF/BXngJM5kfuVUNeM14S1y2y5mj08=
Subject key identifier: 74:30:85:B1:9A:53:E9:8E:4C:E5:56:C5:FE:8B:0D:44:29:FE:34:8E
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019CACB4C2297F5BFC4D7789ED72B1D83DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0D35
Signing time: Mon 02 Mar 2026 04:00:53 +0000
Manifest this update: Mon 02 Mar 2026 04:00:53 +0000
Manifest next update: Tue 03 Mar 2026 04:00:53 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: IeYCm6uwkJdsXb7IKcNhbkMObODjRhSacMCPzFWcvcs=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c2:29:7f:5b:fc:4d:77:89:ed:72:b1:d8:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Mar 2 04:00:53 2026 GMT
Not After : Mar 3 04:00:53 2026 GMT
Subject: CN=743085b19a53e98e4ce556c5fe8b0d4429fe348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:0a:7b:54:80:1f:b4:82:da:9a:34:a9:37:
bd:75:4d:1d:6c:bd:3d:fe:53:4e:b5:a4:31:36:d5:
d3:e6:e9:1a:9a:67:fb:0a:9a:2c:c5:8d:95:0a:fb:
75:a7:01:5c:07:4e:50:50:e0:6c:90:f4:7e:d7:30:
fb:e5:28:23:e2:26:7e:07:37:2d:99:92:73:89:21:
b8:6c:41:8c:a0:fe:8c:ba:5c:4f:89:3e:2c:0c:c7:
c9:eb:d2:f6:ed:7a:4b:87:b7:c4:2a:1c:28:d7:d5:
0a:ac:5e:2e:e9:17:7c:d0:1b:48:c9:78:7d:5d:50:
9e:9b:c6:0b:af:02:67:c0:d6:79:66:60:a0:c2:4e:
14:88:8e:db:88:56:b9:de:1b:0c:5d:00:ad:f5:c2:
a4:9f:bb:f6:67:98:71:1e:c8:5e:a9:d6:a9:3d:8d:
28:91:de:d0:87:17:2e:57:b3:ea:cc:09:55:44:76:
f8:b8:3d:44:69:62:b3:a6:a1:06:05:ff:3e:23:62:
1d:0e:9b:30:1a:31:bb:ad:c5:26:39:31:e7:83:fc:
6f:e4:57:82:55:06:f3:04:9d:29:0f:66:3c:22:b9:
ef:0a:37:6d:95:00:54:26:f8:7d:4f:22:28:92:44:
54:94:f0:09:cc:bb:a9:9f:c1:17:65:e1:fa:0e:0f:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:85:B1:9A:53:E9:8E:4C:E5:56:C5:FE:8B:0D:44:29:FE:34:8E
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f9:09:cb:67:2e:cc:44:68:39:0b:c0:e1:0c:91:09:fa:fe:
30:09:8b:2e:f2:97:4a:ea:77:af:3e:2e:a8:da:ab:89:fc:d4:
3b:ae:89:4c:00:11:3d:b9:b9:fb:77:47:28:a0:63:fb:8a:d3:
f9:58:83:b7:93:c8:c8:e4:4a:e6:50:fc:ea:4d:93:63:21:ce:
ed:1b:34:fd:48:37:f6:0c:e5:cd:3a:97:29:bd:18:32:86:ba:
17:5d:eb:cb:cc:ae:64:9b:cc:24:e8:a4:aa:41:0c:33:40:16:
18:a1:88:46:af:9f:ac:e2:87:b3:ee:62:b5:a2:b0:4a:67:4f:
23:fa:89:40:2b:67:67:04:c2:95:42:92:1e:c2:34:4c:30:0a:
34:0c:b8:fd:e4:0c:2e:71:e2:fa:4e:4f:8b:21:9a:78:43:73:
99:f9:f6:f1:0d:7f:51:ff:d0:f7:c1:0c:76:ee:9a:82:78:d1:
4f:1f:6d:a1:96:7e:36:a2:2a:48:42:43:a4:7a:6b:0c:e0:16:
eb:e3:c8:f3:3f:f5:ac:02:14:fd:4a:b4:3a:ff:26:77:ec:15:
e4:d5:ac:8e:fe:73:fc:aa:30:5a:83:10:05:20:b3:fb:ca:0c:
8c:d7:1e:68:a8:83:a2:ca:0a:bc:ca:ff:c6:0b:d8:3d:7f:6b:
92:67:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:28 2026 by rpki-client