Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: wnSY5mulU/8AVZ150UfE1d22MrDRgYEVPcJymof8Q8c=
Subject key identifier: 72:11:FB:B9:8E:02:12:9D:AC:E3:58:8D:2E:99:22:17:0D:E1:17:D6
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 019D992AF7C39EE4168A21F1B5CE551F5A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 14CE
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: eAInsSf6kHejSfhOCTcmRM8Hkgbr61hY5th1z/dGHhg=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f7:c3:9e:e4:16:8a:21:f1:b5:ce:55:1f:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=7211fbb98e02129dace3588d2e9922170de117d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:a7:67:ac:b2:88:0d:5b:c9:be:1c:f6:7f:
dc:ad:6d:9c:ba:52:1c:a6:5c:da:94:23:0a:f0:97:
72:d5:2a:0c:46:61:c9:0a:90:59:ca:2d:be:d7:eb:
17:36:21:ab:97:ac:01:0b:15:3b:03:ca:d4:9f:37:
4f:0e:e8:e6:e1:64:35:3b:ea:f8:c7:1c:77:93:c8:
a6:0e:b6:14:53:55:d8:c8:14:1d:d6:19:fd:85:07:
b2:f9:e1:ea:19:66:42:25:c8:a7:da:25:43:b7:1e:
42:e1:1d:8b:d9:37:18:57:7f:98:89:6b:25:82:58:
9f:04:70:f7:7e:b7:10:73:aa:cf:7d:4e:d4:c7:82:
e0:ce:fc:33:92:7a:18:08:8d:e5:88:45:91:f7:0d:
8a:5e:64:10:ed:64:e0:33:b3:02:cd:be:85:f0:29:
3e:b6:57:2b:d2:43:6e:16:d7:b6:4e:91:62:39:1f:
97:a9:1c:94:a3:09:42:44:69:ab:0c:61:31:d7:ea:
3f:ed:fa:fb:d4:48:f2:df:f3:ca:e9:1e:34:d4:a1:
a5:06:9e:78:ac:37:94:aa:69:08:1f:4f:c7:4a:61:
d9:52:2f:78:e1:4b:a6:d5:6b:3f:45:99:88:14:1b:
90:a0:f6:48:6e:e0:2d:8c:bd:59:51:9f:cd:d4:9c:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:11:FB:B9:8E:02:12:9D:AC:E3:58:8D:2E:99:22:17:0D:E1:17:D6
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:84:3c:0c:85:f3:f9:15:34:31:51:ce:c0:c9:12:59:64:
4d:68:8a:d0:77:18:90:e6:46:b3:b4:02:59:34:d9:76:46:01:
2e:b3:9d:fb:67:d8:0b:25:c7:a1:8b:e3:aa:bf:ac:48:04:80:
0e:83:5e:1e:45:19:05:e3:40:98:66:1d:aa:67:99:bb:eb:a4:
5e:d3:97:2b:b6:ae:28:26:5b:0a:8a:a5:b8:00:52:a8:fe:dd:
23:77:27:63:31:1e:b6:0e:8c:f8:0c:60:15:cc:bc:6a:01:0f:
a8:cc:66:63:b1:16:ee:d8:c0:71:ab:84:d0:3e:c1:f7:90:dc:
99:8a:3c:6c:8c:13:85:3a:3b:b1:ab:3c:eb:38:17:17:c9:17:
7c:76:22:cd:0d:ad:1b:32:99:c1:95:9d:8e:fb:8d:f6:95:6b:
50:6f:1e:5e:d6:2c:b1:4d:de:0c:e1:cb:6c:a7:1d:c3:05:0c:
e0:9d:af:16:ab:05:28:22:a8:8c:d4:1d:6f:cf:17:b1:c8:cf:
52:53:db:11:83:f1:59:bb:17:aa:10:55:8a:9f:48:d4:dd:f8:
0c:c0:3c:ca:d6:41:38:e0:62:30:c6:68:cd:52:84:4a:f3:cc:
f6:fe:ef:ba:dc:90:94:46:41:de:13:ec:2d:29:8b:38:5f:ab:
06:3e:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:38 2026 by rpki-client