Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: H/Nxw3MuiYCdelA17JiyeEAna6RHFFPYuH7VXLbA6HM=
Subject key identifier: F2:38:A8:5D:1B:FE:66:FB:5C:32:0E:53:21:03:8D:F0:FA:DB:49:80
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 019CAD22F926153E7C07E5F3D7A8BC808592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 06BB
Signing time: Mon 02 Mar 2026 06:01:16 +0000
Manifest this update: Mon 02 Mar 2026 06:01:16 +0000
Manifest next update: Tue 03 Mar 2026 06:01:16 +0000
Files and hashes: 1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: GEICuXDwIGeIOJ7htofRdPPAAGA45W2lIxan7ipqc2A=)
2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f9:26:15:3e:7c:07:e5:f3:d7:a8:bc:80:85:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Mar 2 06:01:16 2026 GMT
Not After : Mar 3 06:01:16 2026 GMT
Subject: CN=f238a85d1bfe66fb5c320e5321038df0fadb4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:5b:5c:7f:19:25:8d:fb:6c:05:36:2f:6e:
3c:c5:f8:cc:53:e9:47:11:ff:3b:11:1c:eb:1c:cf:
23:4c:4e:8c:b1:71:83:f7:ad:dd:ad:d2:53:d5:c4:
4c:0f:24:97:61:65:fe:40:db:2b:32:63:cb:87:7b:
ac:9f:34:ff:91:10:1a:7e:80:7c:4d:c4:91:3f:32:
39:26:8c:36:0c:d5:7f:bb:b6:ff:a0:42:06:a7:ed:
bb:12:b7:97:52:d3:f1:fa:01:84:d9:d3:07:b3:0d:
1c:c1:5b:93:44:ad:e0:7c:77:d0:da:0e:9a:ba:d9:
a4:de:8c:5b:8c:a6:74:8d:ea:49:9e:d3:18:64:f6:
3b:60:7b:88:af:53:d4:fb:7e:98:9b:ac:67:8e:41:
91:be:e1:d7:42:f8:d5:60:66:2f:32:00:07:12:c8:
7a:ce:cb:86:d9:0b:7f:7b:93:f0:ac:5f:8b:1a:79:
16:7a:ab:db:b8:f8:bc:0e:70:d1:14:4c:08:9c:78:
2b:15:19:00:c0:d3:bf:06:27:78:8d:7e:15:a2:78:
7c:3a:cd:8a:60:49:3e:88:b4:64:3b:0c:58:7a:1f:
98:90:70:8f:3e:1b:32:f3:fa:5f:a9:6c:1c:82:89:
93:5f:94:ea:30:cf:1f:f7:c4:24:ba:8a:84:a8:e3:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:A8:5D:1B:FE:66:FB:5C:32:0E:53:21:03:8D:F0:FA:DB:49:80
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:87:e5:66:c1:8d:1c:ad:7b:7b:1e:9e:4e:cb:de:d9:d6:c7:
ab:c2:72:09:10:18:f6:7d:25:fb:ee:f5:a8:53:1b:04:4c:f7:
52:76:0d:33:83:44:ae:e0:92:1a:b8:d8:60:8c:54:c6:81:69:
f9:ce:5b:b9:6f:ca:ea:4f:55:21:21:50:19:67:a4:d9:21:f4:
f4:ef:08:9d:58:87:3c:dd:d6:12:c5:6c:20:bd:d8:ff:ba:4e:
41:ef:d6:92:f8:0b:90:27:6d:9c:4b:64:11:48:d8:c9:4c:45:
c8:80:af:b2:8e:77:10:84:e4:ea:fa:37:66:cb:84:4e:b8:ae:
2c:34:16:2d:39:0d:2a:3e:1a:ca:46:1d:e8:b4:4b:4c:ad:71:
ab:1a:79:56:13:84:6b:f2:98:68:98:8d:04:c3:38:0b:da:ad:
73:ee:9b:fc:7a:da:86:37:dd:79:15:fa:c6:69:e0:81:f8:f1:
57:79:ad:e0:af:1c:1f:e4:64:d8:18:04:3d:92:36:f5:76:ea:
ad:a7:ab:09:1e:1e:2a:e1:99:75:d8:3f:e0:8f:c2:14:af:f4:
4b:d1:46:5d:23:9f:a0:3d:e3:35:92:7e:d5:8d:37:03:d0:55:
1f:32:36:43:a1:50:3e:8f:7d:5e:89:93:83:87:dd:d8:fa:2f:
52:19:af:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvkmFT58B+Xz16i8gIWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOWU3OGI0NWI1ZjU5NTk0ZWI4MTFmM2FjNjkwNjI5Njdm
MjhjNzcwHhcNMjYwMzAyMDYwMTE2WhcNMjYwMzAzMDYwMTE2WjAzMTEwLwYDVQQD
EyhmMjM4YTg1ZDFiZmU2NmZiNWMzMjBlNTMyMTAzOGRmMGZhZGI0OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCtbXH8ZJY37bAU2L248xfjMU+lH
Ef87ERzrHM8jTE6MsXGD963drdJT1cRMDySXYWX+QNsrMmPLh3usnzT/kRAafoB8
TcSRPzI5Jow2DNV/u7b/oEIGp+27EreXUtPx+gGE2dMHsw0cwVuTRK3gfHfQ2g6a
utmk3oxbjKZ0jepJntMYZPY7YHuIr1PU+36Ym6xnjkGRvuHXQvjVYGYvMgAHEsh6
zsuG2Qt/e5PwrF+LGnkWeqvbuPi8DnDRFEwInHgrFRkAwNO/Bid4jX4Vonh8Os2K
YEk+iLRkOwxYeh+YkHCPPhsy8/pfqWwcgomTX5TqMM8f98QkuoqEqOP7pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI4qF0b/mb7XDIOUyEDjfD620mAMB8GA1UdIwQY
MBaAFAOeeLRbX1lZTrgR86xpBiln8ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQt
MjZhMzhkYzg2NzBiLzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hZWJjNzctMmI4MS00MGNmLThhYWQtMjZhMzhkYzg2NzBi
LzEvQTU1NHRGdGZXVmxPdUJIenJHa0dLV2Z5akhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoflZsGN
HK17ex6eTsve2dbHq8JyCRAY9n0l++71qFMbBEz3UnYNM4NEruCSGrjYYIxUxoFp
+c5buW/K6k9VISFQGWek2SH09O8InViHPN3WEsVsIL3Y/7pOQe/WkvgLkCdtnEtk
EUjYyUxFyICvso53EITk6vo3ZsuETriuLDQWLTkNKj4aykYd6LRLTK1xqxp5VhOE
a/KYaJiNBMM4C9qtc+6b/HrahjfdeRX6xmnggfjxV3mt4K8cH+Rk2BgEPZI29Xbq
raerCR4eKuGZddg/4I/CFK/0S9FGXSOfoD3jNZJ+1Y03A9BVHzI2Q6FQPo99XomT
g4fd2PovUhmvlA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:46 2026 by rpki-client