Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: iDVj/a/z5xUR/SE4k+XTV58f3pE68O1wPNI3v/SQz7A=
Subject key identifier: 2D:FB:AE:2C:F2:81:FF:56:78:F6:10:D8:A3:8F:98:0F:A3:DD:47:CE
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019CAA8F778DBBD064C3D69788DE86FCEAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0EE7
Signing time: Sun 01 Mar 2026 18:00:54 +0000
Manifest this update: Sun 01 Mar 2026 18:00:54 +0000
Manifest next update: Mon 02 Mar 2026 18:00:54 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: oN6pOb2xnAjUNDhD9yRe0VZsWhdtgRszAjnNuvuNmvc=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:77:8d:bb:d0:64:c3:d6:97:88:de:86:fc:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Mar 1 18:00:54 2026 GMT
Not After : Mar 2 18:00:54 2026 GMT
Subject: CN=2dfbae2cf281ff5678f610d8a38f980fa3dd47ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:48:83:b9:f6:c9:8c:d1:5c:74:2c:bb:2b:
b9:9b:8f:5d:c8:48:d9:65:28:ff:1a:5a:4c:cb:5f:
0c:fc:bb:08:9b:3f:0e:b9:bf:b8:09:56:d9:d4:56:
f6:ce:67:de:8b:88:76:a4:1d:ed:e8:2a:c4:68:b8:
b6:fb:36:73:e6:44:49:90:ae:ce:1c:c9:59:88:ce:
a6:8b:a4:24:5d:eb:43:1d:7c:cb:16:80:a4:75:36:
e8:5a:d8:16:0d:ab:06:a7:ff:81:98:4d:d2:25:86:
54:69:7b:33:37:c4:9b:81:ec:51:11:01:13:b1:e8:
19:22:f0:4d:72:40:15:b6:75:26:78:4b:14:8a:4c:
ad:7a:5f:a0:0c:9c:7f:8b:a8:db:56:14:bd:2d:88:
01:61:e3:a0:f0:40:88:2c:da:4d:fc:92:bd:40:53:
9d:86:a7:1e:d0:a2:25:0d:7d:ae:b7:e2:41:ad:28:
0d:2b:95:e0:47:7b:4e:69:ef:28:88:16:f4:b2:f5:
f7:7e:23:33:a9:39:e2:40:18:96:77:68:c4:37:df:
62:69:02:63:0b:9f:21:a0:d1:15:d1:ab:43:b1:0a:
c6:47:c9:98:80:d6:c9:d9:96:1f:fb:fa:dc:60:77:
10:1d:da:38:30:12:71:35:0f:4e:5f:6a:69:ee:77:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:AE:2C:F2:81:FF:56:78:F6:10:D8:A3:8F:98:0F:A3:DD:47:CE
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:11:bd:f6:33:e7:2e:d6:12:b2:23:a9:95:35:0c:1c:04:
ff:f6:f2:2f:fc:4c:0d:2e:7d:44:76:6c:af:17:55:f8:33:d6:
dd:5d:64:bb:a1:8c:24:38:3b:49:bd:32:47:b6:85:49:fd:20:
2f:bb:61:72:8d:09:0b:b2:48:fe:b5:c6:53:1b:32:4e:c6:44:
02:43:3f:dc:19:9e:8f:82:8d:cc:51:80:38:72:ba:0d:5b:68:
c5:75:98:f2:b2:e2:64:9b:b1:a5:0f:8f:e9:da:0a:30:5f:a5:
72:b9:e1:ef:4b:c0:fb:3f:68:4e:cb:57:ce:d0:d8:bc:66:e2:
04:9d:ec:1b:0a:82:54:b3:89:45:67:cd:0a:8c:6b:63:93:d5:
bd:c5:26:b2:4e:08:10:65:ae:cd:f0:fe:c8:86:0e:ac:ca:2e:
6e:eb:67:5b:33:7e:28:37:ee:fa:80:89:e9:1a:96:8d:57:f6:
67:0f:54:62:05:7f:4a:8a:b2:2a:9f:dc:c5:8e:51:83:7c:9d:
e8:87:63:81:8b:6c:3d:a4:4a:a9:a7:d2:af:12:fc:7d:92:59:
5c:c9:82:58:c2:72:dd:e4:36:6b:82:7f:f9:87:ec:00:9c:0c:
ff:7f:b3:46:b7:c9:9c:bc:7e:b8:d4:81:ca:a8:c8:47:37:a0:
f8:71:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:56 2026 by rpki-client