Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: +/sEwdw0Fcqr3cp2XbnBw7mlyrq/6UzTz9VEtsZpkzo=
Subject key identifier: A4:B2:B1:5A:11:EA:D8:74:56:93:9D:B2:FF:83:A7:D2:90:CA:41:87
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 019D98BD94C1EAA83BE34ACF26E2A8629C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0735
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: YzPYVr2Bb73Lrf/WFFxQCrAbo2Q/li7351vJdnaycLE=)
2: INMcxslKzA9lQLIaiuC7po-TrrY.roa (hash: 9IPb8qBlhTZBbDZdvzgQp75cg/Es1qM9VUEr2AAlDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:94:c1:ea:a8:3b:e3:4a:cf:26:e2:a8:62:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=a4b2b15a11ead87456939db2ff83a7d290ca4187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:16:28:a0:0d:36:dc:23:23:27:49:9a:d2:
be:be:ed:c0:8c:53:36:39:48:b5:c5:3c:ad:36:17:
6c:d6:37:e2:99:61:26:95:d9:d8:14:0b:7e:9b:f4:
b0:0e:b5:30:6f:ae:f0:45:e4:81:bf:41:85:e8:72:
ec:d2:f0:4a:eb:4a:6d:76:74:a2:50:8d:84:28:61:
9a:0e:d8:4d:6a:81:4f:92:06:37:4d:5e:73:cc:26:
46:65:16:32:e9:5b:84:65:84:9a:e2:27:6e:a5:23:
16:e6:60:05:85:27:8e:ae:c1:22:17:8c:20:02:dc:
4f:15:7f:af:4d:76:c9:e1:0b:95:eb:ed:7f:1f:d8:
2a:b8:66:f4:11:cb:e3:1c:5e:0c:bc:78:de:52:d5:
8c:95:84:66:b4:e4:ee:88:78:0f:f2:70:4f:d4:07:
90:7f:15:8b:85:73:f9:c4:ee:c3:86:88:dd:4f:f0:
4d:2a:8b:2c:f3:52:91:39:e5:2a:e4:a4:ef:8a:67:
eb:ca:0f:7c:18:9b:ac:7a:0b:d6:e3:fa:82:40:36:
30:54:f5:b1:5a:fb:8f:29:4b:1c:cd:62:71:d6:95:
70:b4:67:c6:88:cc:fd:17:71:4e:e7:77:53:94:a6:
08:54:30:f4:48:34:ac:03:49:96:34:9d:ab:b3:ef:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:B1:5A:11:EA:D8:74:56:93:9D:B2:FF:83:A7:D2:90:CA:41:87
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ee:b6:4b:11:9d:80:07:bc:e3:6e:d5:30:1d:1e:1d:62:44:
67:29:f1:22:35:4e:e3:10:b1:67:ed:ef:1b:db:c7:c2:27:db:
56:c8:25:3f:eb:3f:23:ba:ce:b7:ce:8b:a3:31:02:87:ab:b6:
8e:72:eb:59:fd:9c:ea:c7:19:cc:ea:d3:0b:73:fb:95:70:81:
c2:65:30:c4:e7:0a:11:c4:11:bb:54:f8:05:6a:3e:2a:3a:1f:
4e:ce:2c:8b:30:c2:96:91:35:2d:a2:b6:45:08:79:58:61:39:
f4:3b:f6:f9:92:e9:23:b1:e9:1a:55:9b:78:d7:a2:3f:88:2e:
48:45:ed:c7:45:8f:9c:40:6f:9f:77:aa:99:84:1e:4b:59:23:
90:db:05:7c:b5:62:ac:d1:1b:5e:24:7f:17:25:1b:d8:04:e7:
1c:b7:e4:91:0d:79:9f:94:0c:93:31:db:8b:2f:ff:9b:5a:1f:
e8:df:19:de:58:7f:84:fd:2e:96:aa:4f:2e:16:b6:06:c1:11:
67:45:5c:38:4c:91:5f:61:08:b7:cd:ee:46:12:54:51:63:05:
20:55:e2:a7:5d:b6:eb:87:aa:f6:ec:7b:23:d4:5b:f4:57:3f:
9c:ff:2e:62:89:74:6e:a9:72:f4:28:c3:0c:7c:da:0f:d6:0f:
82:95:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:12 2026 by rpki-client