Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: 5NRl1iCIGoCrkZP7A4ZTSSYQ+1hODczMrR9aFEzdCGM=
Subject key identifier: 31:24:6C:C3:E1:AA:A7:98:03:9B:66:FF:31:A0:4C:AD:36:46:15:A7
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019CAD226D333300C88423BF8F751BD2C4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:00:40 +0000
Manifest this update: Mon 02 Mar 2026 06:00:40 +0000
Manifest next update: Tue 03 Mar 2026 06:00:40 +0000
Files and hashes: 1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: oClp6DPpzQOy1z2k7VG/itzBvNRo6YGn38tqJ8uq9T8=)
4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:6d:33:33:00:c8:84:23:bf:8f:75:1b:d2:c4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Mar 2 06:00:40 2026 GMT
Not After : Mar 3 06:00:40 2026 GMT
Subject: CN=31246cc3e1aaa798039b66ff31a04cad364615a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:e9:da:d8:53:fe:75:b7:09:16:15:80:12:
d1:bc:c9:f7:2d:be:27:8e:2d:c5:00:cc:25:e3:52:
4f:48:79:d3:2a:a2:61:61:08:57:de:c9:cd:2f:e3:
a4:7b:da:be:27:d0:49:a6:64:37:40:e8:8c:d1:fe:
dd:af:78:b8:d3:a8:23:5d:31:07:bc:80:b9:84:6d:
53:64:ab:3e:c0:83:0c:51:d8:a5:16:ae:10:a2:f4:
c5:19:02:0e:92:60:94:2d:ae:99:94:ea:70:6d:31:
02:73:a6:f9:f0:db:46:85:1e:b9:25:ba:f2:54:59:
7e:b4:de:25:cb:5d:a5:41:23:83:f4:de:33:d1:c5:
39:39:04:54:d0:c3:9e:17:a3:d9:3b:73:8d:3f:47:
21:c4:18:2f:1c:65:a9:82:9a:78:f2:a3:22:7e:44:
4f:7f:1d:24:6f:1a:70:ec:dd:b9:ed:e1:1b:01:25:
38:71:8d:d2:11:b4:69:0e:2a:af:ea:43:ed:f7:93:
b3:c8:d3:3d:13:99:91:c4:8d:b5:9c:35:dc:0d:a7:
4b:9f:fe:29:d2:1d:23:37:9f:53:e1:78:17:07:fa:
3d:12:4a:f0:ae:1d:a8:1f:6a:dd:a3:ed:71:70:de:
75:d7:a2:bf:40:1f:86:67:0c:12:bc:10:92:61:98:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:6C:C3:E1:AA:A7:98:03:9B:66:FF:31:A0:4C:AD:36:46:15:A7
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:fa:0a:6b:5c:3a:c9:09:00:e4:78:a2:39:21:3e:e9:97:
fd:bd:53:f5:4b:8c:98:c9:34:af:a6:3d:69:7f:40:e7:bc:c1:
20:8c:5b:8d:93:a6:a0:53:c1:b7:77:29:52:7f:20:81:4c:00:
40:da:65:86:15:f4:cf:ce:ba:6f:78:0c:17:65:d7:f2:e1:94:
5c:5c:12:a9:c3:56:ab:bc:f8:82:df:06:93:97:47:b3:94:6a:
66:39:f8:6f:5d:e7:b3:61:f1:d3:34:6d:5e:a0:20:dd:3a:5e:
76:df:25:56:07:be:f7:37:4d:6a:62:b1:7b:13:f0:a5:8d:5b:
64:0a:5b:de:df:ff:4b:9e:3f:6d:9c:3d:25:8f:49:04:9d:a9:
ba:e3:e8:76:b0:ff:02:38:0e:6f:8a:fe:17:e8:69:4d:12:43:
b3:9e:33:9e:82:25:96:25:8f:6a:cb:69:32:4e:aa:ba:c4:52:
67:ba:99:d5:85:df:a8:4d:83:b7:b3:58:c3:7a:be:1e:1d:1d:
84:18:6d:7c:31:11:bb:ef:0b:d7:d0:cd:67:f6:81:af:f0:1f:
49:10:3d:be:68:6c:6c:d3:b6:8e:16:43:ec:af:62:13:8e:93:
97:89:5f:d2:93:9c:67:53:bb:94:49:8c:43:4f:09:dd:9f:bf:
a6:e3:57:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIm0zMwDIhCO/j3Ub0sTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm
MmUwNzUwHhcNMjYwMzAyMDYwMDQwWhcNMjYwMzAzMDYwMDQwWjAzMTEwLwYDVQQD
EygzMTI0NmNjM2UxYWFhNzk4MDM5YjY2ZmYzMWEwNGNhZDM2NDYxNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Hp2thT/nW3CRYVgBLRvMn3Lb4n
ji3FAMwl41JPSHnTKqJhYQhX3snNL+Oke9q+J9BJpmQ3QOiM0f7dr3i406gjXTEH
vIC5hG1TZKs+wIMMUdilFq4QovTFGQIOkmCULa6ZlOpwbTECc6b58NtGhR65Jbry
VFl+tN4ly12lQSOD9N4z0cU5OQRU0MOeF6PZO3ONP0chxBgvHGWpgpp48qMifkRP
fx0kbxpw7N257eEbASU4cY3SEbRpDiqv6kPt95OzyNM9E5mRxI21nDXcDadLn/4p
0h0jN59T4XgXB/o9Ekrwrh2oH2rdo+1xcN5116K/QB+GZwwSvBCSYZjdaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEkbMPhqqeYA5tm/zGgTK02RhWnMB8GA1UdIwQY
MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt
MDNhZGZiYzY4YzkxLzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx
LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIj6Cmtc
OskJAOR4ojkhPumX/b1T9UuMmMk0r6Y9aX9A57zBIIxbjZOmoFPBt3cpUn8ggUwA
QNplhhX0z866b3gMF2XX8uGUXFwSqcNWq7z4gt8Gk5dHs5RqZjn4b13ns2Hx0zRt
XqAg3Tpedt8lVge+9zdNamKxexPwpY1bZApb3t//S54/bZw9JY9JBJ2puuPodrD/
AjgOb4r+F+hpTRJDs54znoIlliWPastpMk6qusRSZ7qZ1YXfqE2Dt7NYw3q+Hh0d
hBhtfDERu+8L19DNZ/aBr/AfSRA9vmhsbNO2jhZD7K9iE46Tl4lf0pOcZ1O7lEmM
Q08J3Z+/puNXuA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:59 2026 by rpki-client