Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
File: A8gBV7VkJs46X0PIn-sdQ3x3y84.mft (raw, json)
Hash identifier: 0tRWAQEF/OjZpSLfcdsiLvQreWs0CWLpnTFuA2b5NR0=
Subject key identifier: 5E:5D:36:7E:42:98:6C:7A:EF:B7:D1:E7:1F:6B:9B:10:00:6C:AB:3D
Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Certificate serial: 019CA9EA8C01BDEE46375EC9C20720692DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
Manifest number: EC
Signing time: Sun 01 Mar 2026 15:00:46 +0000
Manifest this update: Sun 01 Mar 2026 15:00:46 +0000
Manifest next update: Mon 02 Mar 2026 15:00:46 +0000
Files and hashes: 1: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (hash: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0=)
2: A8gBV7VkJs46X0PIn-sdQ3x3y84.crl (hash: 6yjZuYVB4ahuWzd8V9oTcOydjx7yCYApO1beG2cKkYE=)
3: LSYKZL6bL-kdhHy7Rekdkn-v5FM.asa (hash: +N5sGX/uOLbypJ4AbC7ZYsPhCOcK9Y9mwfmo1tGT698=)
4: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (hash: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc=)
5: e9xI9xxAFennKLtQShHvt8Vdf3U.roa (hash: nJ6Dkjs+4T2Bh6E1zT3mOI9063o+MgviDZiRTob06t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:8c:01:bd:ee:46:37:5e:c9:c2:07:20:69:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce
Validity
Not Before: Mar 1 15:00:46 2026 GMT
Not After : Mar 2 15:00:46 2026 GMT
Subject: CN=5e5d367e42986c7aefb7d1e71f6b9b10006cab3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:56:9c:1f:df:33:fa:a3:ca:ce:4d:3d:17:
f0:7b:ba:79:97:8c:37:c9:ec:51:c4:f4:cd:de:75:
ae:7f:aa:b0:f2:04:0c:30:e2:e1:dc:87:72:10:8b:
ae:2d:06:b7:f8:e9:1f:8e:75:b0:76:5c:64:ef:e5:
dd:95:f4:63:f7:a9:f8:21:82:7f:8f:63:e3:4b:2d:
ec:1c:51:4f:5f:7d:62:d7:4a:fc:f2:c1:5c:99:c4:
da:25:92:29:38:26:dc:65:ee:2e:5e:9d:ac:40:19:
6f:67:d9:46:53:98:31:cc:56:ca:c0:dc:2e:49:22:
d1:f5:cf:b2:5d:b4:4b:5f:38:cc:d2:71:63:96:b4:
d5:ce:ee:c5:e4:d8:40:63:b3:e6:4f:08:6d:b5:33:
7d:5a:45:67:40:59:f6:a5:54:50:3b:c2:c6:fa:14:
ef:11:f7:33:f5:76:f9:1d:9a:d4:5a:bf:fe:e5:80:
eb:c7:d0:07:e6:49:e7:f0:c7:f7:b9:53:e3:84:60:
dc:fa:33:ee:24:9a:62:c5:4a:cb:19:59:86:18:6d:
2f:44:e6:6a:62:d6:35:7d:3c:96:6e:94:ad:95:c5:
70:38:33:bf:41:14:f3:cd:a6:09:37:66:19:21:17:
d7:68:42:a7:88:5c:bb:76:09:20:ef:de:01:ba:b6:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:36:7E:42:98:6C:7A:EF:B7:D1:E7:1F:6B:9B:10:00:6C:AB:3D
X509v3 Authority Key Identifier:
keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:b5:4a:f0:a3:df:22:31:13:61:20:61:ab:52:a2:3b:14:
c4:e1:3b:0a:13:38:8e:64:e0:7a:68:92:b2:27:a0:6f:29:ce:
e6:60:54:0b:af:52:86:18:37:31:59:6b:05:cd:7a:53:1d:23:
ed:36:58:d9:a5:59:7d:d8:64:0c:af:db:19:2f:50:fd:64:42:
da:03:bd:f5:d7:80:ce:24:b1:74:d5:33:1d:22:6b:9e:7e:a5:
76:76:0f:18:f2:5f:17:09:6b:f6:cc:2c:ad:9b:64:57:2e:5f:
44:5c:5c:e5:cf:ce:30:f5:50:1f:5d:9f:ff:1e:6f:ee:79:ff:
f9:b4:8d:20:28:ef:c8:2b:06:93:d1:1f:e4:a2:f5:29:5d:a2:
e5:99:20:b8:0d:14:18:05:d7:98:b2:db:32:52:21:6a:43:d7:
a6:30:5f:93:78:ad:bd:4d:1c:1e:03:95:78:44:c3:3f:0b:55:
75:eb:a1:31:a3:c1:4e:a1:f8:4d:5d:c4:05:a2:fe:d5:44:61:
17:7d:02:e7:b5:10:fc:25:a2:75:a1:ab:03:ef:d4:e0:6c:3e:
32:2d:d1:ae:85:ca:6a:e3:c0:a5:42:0d:f7:34:70:2a:05:f0:
7c:e6:04:7b:bc:1d:0c:2e:e7:cc:5b:c2:f0:ac:d0:c7:6d:92:
12:4b:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:52 2026 by rpki-client