Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: 3q0qDb7+chtpWnlbjqRGULXf/05RlsK9msejJGaZwgQ=
Subject key identifier: BA:58:EF:10:42:41:8D:E2:E4:53:2B:C1:F8:56:9F:90:C4:FA:5A:96
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 019CAC475333452A7824D2D3DEC4292B140E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 0455
Signing time: Mon 02 Mar 2026 02:01:21 +0000
Manifest this update: Mon 02 Mar 2026 02:01:21 +0000
Manifest next update: Tue 03 Mar 2026 02:01:21 +0000
Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: FaO8Hk1YLP5Zp+tSh2VA7h6QRxfRQ+lEMcUSygGaz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:53:33:45:2a:78:24:d2:d3:de:c4:29:2b:14:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Mar 2 02:01:21 2026 GMT
Not After : Mar 3 02:01:21 2026 GMT
Subject: CN=ba58ef1042418de2e4532bc1f8569f90c4fa5a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:6d:b6:4a:88:b4:90:b0:55:e3:bc:50:ce:
63:0a:79:97:0e:f1:0b:74:e5:b4:b1:74:0b:72:20:
ea:96:dd:f6:2c:59:21:c5:1e:fc:19:c6:8c:73:5a:
12:d6:04:65:22:fe:7e:2e:a3:f1:a5:ce:ee:17:55:
52:ad:18:02:86:3c:de:9e:9b:d5:49:ef:15:44:3d:
41:e8:55:b6:2d:fe:eb:47:97:b8:a3:cc:a0:b8:e6:
c1:2c:73:b5:49:b1:dc:1c:4d:f0:84:06:35:ae:60:
d5:ca:73:1a:25:0e:63:7d:a2:2c:a2:ee:bd:79:ea:
10:8f:7b:c1:aa:2b:08:50:05:33:80:ef:27:d2:37:
fc:dd:a8:7e:f2:99:d2:42:2e:87:29:c4:30:d6:e8:
0c:1f:eb:46:a0:45:33:2d:a5:a6:21:d2:4e:a3:43:
df:6b:69:f9:6a:56:81:77:80:ab:e0:64:e5:6a:b8:
be:4c:d4:2b:00:0f:08:73:cb:f3:be:d2:5b:36:4b:
5c:39:8e:f5:2b:5f:66:09:6f:a0:6a:9e:82:2b:cb:
0c:d0:b9:f8:69:4f:9a:02:d9:5c:1a:2c:6e:06:90:
8a:21:9f:e3:60:e5:b2:b2:1b:60:32:3b:f9:8c:70:
90:d5:3e:d0:d5:c6:02:72:55:78:b0:2b:c4:bb:6c:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:EF:10:42:41:8D:E2:E4:53:2B:C1:F8:56:9F:90:C4:FA:5A:96
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:29:34:13:e8:40:26:d8:a4:46:cf:f0:8c:2d:7e:a6:25:5d:
14:79:c0:1a:3e:6d:f8:79:59:64:1a:03:9e:8e:4d:12:bc:f2:
ba:b7:46:61:c1:11:88:73:c3:7f:db:5b:56:fc:c6:79:c7:15:
52:f2:c8:42:ee:69:9f:9a:e9:dc:c8:50:a6:68:7e:a6:94:66:
56:e8:a7:57:c9:21:67:f3:be:0b:f3:11:87:e3:44:9d:aa:13:
54:53:41:b5:a6:ab:3e:59:e5:df:34:b2:ed:95:bc:f9:68:7f:
73:56:7a:ca:44:8f:6f:c8:6f:ce:a0:4c:02:ce:f1:0a:24:3c:
18:df:11:2d:20:b4:d6:63:c2:58:ce:9d:c3:02:25:55:af:59:
55:19:c9:7b:54:32:24:08:d7:50:82:1a:af:82:b2:45:73:65:
a6:5e:f2:27:0e:91:e1:7b:84:04:9c:ee:ba:7c:17:c8:73:cd:
81:9a:84:5a:ba:e2:c6:4f:79:ab:ad:76:e9:72:98:af:89:48:
77:34:be:3e:c7:dc:d4:c9:65:1f:fb:a5:05:32:59:cd:4a:8e:
dd:d5:cc:4f:e7:28:03:6c:80:17:fe:c5:8a:a2:c5:80:43:1e:
29:f8:5b:b1:02:04:d6:da:8f:93:f1:61:cd:a3:75:2a:66:f4:
9d:99:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:07 2026 by rpki-client