
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: TfkRf0fh8uzVrZfBuDAtFTBxXLTtgITJt1XohVRwC90=
Subject key identifier: F3:DA:C8:8B:F9:2E:FF:49:96:78:5A:06:D0:CA:6D:A1:6D:F0:3B:CC
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019EC1B6B051F453004B16E6747F6D293645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0E49
Signing time: Sat 13 Jun 2026 16:00:35 +0000
Manifest this update: Sat 13 Jun 2026 16:00:35 +0000
Manifest next update: Sun 14 Jun 2026 16:00:35 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: FOfyEzBGhP1Ga0ddu4IRtvSjObtOsSnqAlouFNqbI7k=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:b0:51:f4:53:00:4b:16:e6:74:7f:6d:29:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jun 13 16:00:35 2026 GMT
Not After : Jun 14 16:00:35 2026 GMT
Subject: CN=f3dac88bf92eff4996785a06d0ca6da16df03bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:07:98:34:c7:46:69:29:1e:5e:1b:01:47:
c0:e2:95:c3:0c:1e:7f:52:99:ed:2d:b0:8c:2f:1e:
9e:42:ff:b3:2e:6e:81:c4:73:e3:a9:9a:0e:91:63:
a6:c3:f6:07:c5:3e:db:65:3f:e0:2c:97:4d:78:43:
dd:ac:59:09:47:74:20:d9:6d:43:bc:97:6c:67:f8:
75:1f:ac:f5:6e:e4:b1:07:8c:7d:31:cd:11:05:c6:
3b:38:1d:34:1f:87:19:4e:15:5b:d4:6c:6c:48:b0:
82:f7:ed:53:24:ce:37:cc:42:3c:c2:4b:70:4d:0d:
d3:76:45:5a:e4:f5:5f:39:1b:a4:c2:2e:c3:91:87:
a5:06:13:ff:c8:0e:b3:5c:68:9c:f5:84:f5:07:13:
42:ce:0f:15:91:32:98:2e:59:99:8a:d7:64:ae:93:
2a:05:03:c7:b0:15:0f:f7:0e:b0:69:8c:c7:fe:23:
e1:15:0e:b8:b4:7d:85:10:db:97:cd:c6:de:9d:de:
ff:f9:05:e1:17:4a:00:32:8c:b7:dd:49:45:89:9a:
cd:29:c1:6b:1c:6b:de:12:5d:e5:f5:7e:5d:5c:48:
43:c6:5a:8a:74:0d:e3:b2:e1:ce:b1:b8:ad:cb:6d:
59:37:b2:4f:6f:f5:9b:c4:56:86:bf:95:da:6c:4a:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:C8:8B:F9:2E:FF:49:96:78:5A:06:D0:CA:6D:A1:6D:F0:3B:CC
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:37:30:0e:0e:45:34:ce:aa:ba:ee:48:8c:b0:34:a4:32:1e:
86:1f:f0:48:50:c3:7e:a6:2c:04:e9:f4:33:73:eb:85:26:72:
b1:74:52:a5:00:60:da:d1:3a:b6:3a:e9:50:63:2b:3e:24:9c:
27:96:a2:72:47:cd:e5:d0:25:3f:6d:1b:ac:fa:d3:d5:fd:fa:
51:3d:6e:8f:0b:e4:79:34:0c:24:43:56:51:10:cb:a4:01:a8:
ac:4b:10:74:4d:68:7b:a1:4c:04:d4:ce:e7:84:f4:e3:c6:41:
92:d2:ae:00:1b:0d:d3:57:bd:d7:a1:e9:28:46:21:59:82:6a:
9e:19:a4:aa:72:a7:25:28:c8:77:6c:ee:56:fb:c5:e0:ac:79:
6b:32:5a:ce:4a:17:60:6a:86:4e:97:01:be:3c:50:60:a2:ef:
50:a6:ec:81:40:a3:ed:95:be:8b:5c:49:2d:be:2d:f9:5f:08:
64:91:c4:70:de:49:93:2e:59:ec:1f:df:cd:f3:70:21:88:ac:
d0:49:5b:c9:84:eb:cd:20:a7:77:45:ff:ad:65:c2:f4:16:7a:
71:85:d6:c3:9d:f1:98:c7:05:74:9f:34:e5:78:48:0d:c4:ff:
64:f6:7b:40:2d:8c:67:6c:97:d5:82:1d:05:4e:f0:05:b6:c8:
6c:75:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:33 2026 by rpki-client