Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: ODkM8h7KEHPYSyRlT0qgejRot7dAxoj9oE1hWZU5Uxg=
Subject key identifier: 74:95:BD:CA:CA:72:9E:2F:6A:F4:55:EA:41:1A:81:2D:BD:1D:BC:E0
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 019CABA1C9613AE81647B06AE55C6AB61977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1453
Signing time: Sun 01 Mar 2026 23:00:32 +0000
Manifest this update: Sun 01 Mar 2026 23:00:32 +0000
Manifest next update: Mon 02 Mar 2026 23:00:32 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: 0fiALb/H2zYPbXUmSTr+/PZbmFwTD7Xm5+AU6CauZ04=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c9:61:3a:e8:16:47:b0:6a:e5:5c:6a:b6:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Mar 1 23:00:32 2026 GMT
Not After : Mar 2 23:00:32 2026 GMT
Subject: CN=7495bdcaca729e2f6af455ea411a812dbd1dbce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:79:7f:67:78:32:b4:bf:2c:c8:0f:b9:47:
65:c2:96:22:3b:44:fb:82:68:5d:ca:9a:e7:eb:68:
f7:6c:75:8b:f4:34:4a:7b:b8:58:c5:79:c9:99:60:
1a:5d:bc:24:10:40:bf:2b:f3:89:10:a9:a6:45:71:
78:39:03:1b:19:eb:ab:d8:cf:e7:ab:4b:6d:08:76:
63:25:45:b9:90:ee:b2:65:91:63:07:03:ce:d1:4e:
d0:e9:f3:9c:d9:ba:68:f2:2c:b6:bd:d0:28:e0:c2:
d9:a4:fe:c8:e3:d2:2f:53:42:73:18:22:c3:85:05:
20:32:36:1e:ed:0f:75:eb:36:33:df:91:27:20:55:
0e:8c:52:fa:9a:13:de:70:93:2f:b2:d9:cb:73:13:
e9:62:b2:a8:86:97:59:45:05:58:8b:56:91:49:3b:
ca:37:e3:33:56:43:3a:c5:e1:77:80:43:5d:31:2a:
3d:70:1b:00:72:22:bb:07:bf:db:95:b0:19:dc:05:
46:6f:a3:06:f9:39:e8:65:4f:6d:9f:35:a7:d4:d7:
d2:fe:43:68:81:62:4d:30:76:7f:5a:c6:62:ce:cb:
2a:a5:06:d5:e8:b1:71:89:3a:bd:a5:c2:36:55:d1:
30:c9:1e:39:2b:9f:6e:81:0a:a8:6d:1d:d0:27:38:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:BD:CA:CA:72:9E:2F:6A:F4:55:EA:41:1A:81:2D:BD:1D:BC:E0
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:13:66:02:31:c5:d9:92:bf:d3:89:e8:ba:17:c4:3d:d4:18:
ce:4c:85:95:f5:d8:3b:51:9e:8c:53:e3:5e:e9:99:2d:46:22:
ea:d5:e1:cb:26:b2:88:42:fe:d6:0e:c3:ec:33:95:5b:a9:cd:
1a:05:37:c2:f3:c0:6b:20:d7:92:da:e6:e0:05:42:16:2b:c8:
d2:12:d8:ca:a3:20:9d:60:bc:ec:92:8d:5a:39:28:b8:b3:f0:
49:6c:df:6b:71:f2:44:76:a2:ef:0c:62:dd:08:5d:d9:7b:83:
5f:0f:f3:93:c1:d0:cc:8a:fe:e5:1a:2c:04:9e:9d:77:f4:75:
c2:df:21:4e:ef:24:02:8c:93:97:4d:b5:d7:7c:a2:dd:e5:3e:
c3:13:08:d9:56:c5:30:89:32:98:f3:7a:5f:a3:54:b1:c5:5f:
37:04:71:78:4d:23:c6:f5:e1:8d:4c:89:08:8e:41:16:73:52:
60:d4:b9:46:d6:74:c4:d4:e6:b3:91:52:6c:fb:4f:f5:c1:99:
7f:65:72:aa:fd:07:02:4f:8a:41:94:8e:a9:4c:4f:d3:40:d9:
c8:e6:e2:74:ac:f1:94:73:25:ba:c3:f4:f2:7b:89:95:ca:84:
38:1f:c1:e5:1f:d8:de:cc:08:e1:4f:5a:26:14:32:15:97:9b:
1b:8d:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:33 2026 by rpki-client