Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: j0P0BkAn8wEEdGTw5wfUFAfBObXeDd9TnMaLa9P6Iow=
Subject key identifier: 8D:91:CE:44:2F:72:D8:D9:32:77:F1:9A:2F:2A:56:71:2F:E9:00:6B
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019CAF112180D92509468BC381480D779663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 15:01:01 +0000
Manifest this update: Mon 02 Mar 2026 15:01:01 +0000
Manifest next update: Tue 03 Mar 2026 15:01:01 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: U+Ph34sQvTUQF3i7+LS/jSfcrQm71SKuBWJX4ev1xGU=)
2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:21:80:d9:25:09:46:8b:c3:81:48:0d:77:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Mar 2 15:01:01 2026 GMT
Not After : Mar 3 15:01:01 2026 GMT
Subject: CN=8d91ce442f72d8d93277f19a2f2a56712fe9006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:78:c2:c0:6d:46:a3:b2:ca:20:1e:db:3b:
45:38:ba:f5:e8:7d:38:76:77:54:03:e8:9b:c2:94:
b6:0c:15:55:06:27:d4:81:18:9c:3e:95:9c:30:67:
4a:6c:24:38:c8:1e:17:18:9b:27:31:e2:90:28:45:
4b:ff:e3:91:0d:09:54:fe:9c:a2:e4:b5:b3:0c:1e:
a1:99:3a:b6:83:7b:a2:78:92:e8:91:69:d9:e3:a5:
ba:b5:fd:4f:40:26:a3:60:95:7f:42:8c:72:7e:c1:
73:a7:d8:23:71:96:d9:5a:34:ed:54:06:e9:35:a6:
27:10:54:9b:14:99:40:36:b3:a8:58:63:54:ed:98:
5e:84:a9:23:7e:ce:15:b5:f7:0c:7e:4f:2e:cd:a9:
05:24:3e:55:70:de:25:86:ae:26:14:83:36:ee:a6:
e5:e8:d5:8e:ae:ce:7b:68:08:6d:3a:72:95:2d:fd:
e4:b8:2b:61:a3:0f:08:fa:20:e0:fc:1c:02:6c:b5:
34:88:a5:ec:6e:f8:c1:d9:6d:cf:ea:0b:df:b9:41:
d2:d5:c9:96:84:13:15:b6:6b:30:68:19:35:03:23:
80:7f:fa:6b:84:b7:27:29:53:d1:92:b3:6e:70:94:
ff:cd:f6:a8:e1:87:f0:e1:ec:6f:89:3b:ac:3e:e5:
0c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:91:CE:44:2F:72:D8:D9:32:77:F1:9A:2F:2A:56:71:2F:E9:00:6B
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:5b:cb:c6:b1:d3:12:da:a9:5c:ce:82:f5:94:22:20:11:
42:58:42:ce:37:f7:2a:f4:87:7d:cd:01:d2:79:f2:87:b0:cc:
9c:ec:63:50:de:67:81:76:65:47:d5:66:53:ce:55:7c:3e:28:
8d:8c:1a:18:d9:a5:1e:47:41:9f:84:24:8b:53:1c:63:8f:5a:
87:b4:c9:74:d9:d4:da:85:d0:44:9b:90:42:fb:ec:8d:ed:2c:
d0:bb:0c:78:46:3d:26:ec:20:3f:14:81:e6:b1:b8:b7:f0:1d:
24:81:ec:a1:41:56:80:b6:99:80:ce:bf:0f:36:4e:3b:05:4c:
a1:6d:e8:a9:03:ce:cf:c3:ec:c1:f3:fa:e8:99:02:10:94:60:
9a:4a:40:c2:fc:5c:68:a1:01:7c:19:2c:f1:bb:ae:2d:55:6f:
b0:88:df:78:77:78:f0:4b:0b:dc:0a:85:f4:8b:a8:31:bf:5b:
b6:32:51:73:fc:71:9b:39:aa:fc:32:27:72:ec:a8:2b:12:fa:
d4:43:73:9a:0e:93:c4:c0:f7:19:82:af:47:39:51:3d:42:8b:
0b:bc:41:1b:d7:a8:ff:2e:b7:8e:13:6d:e5:2b:cb:48:4c:5d:
d8:33:dd:da:03:68:02:a4:01:b9:48:6b:39:50:10:47:5b:34:
7f:ca:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:28 2026 by rpki-client