
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: 3EFexYhqCPyyci1I8I16W6R3k1CurGQ2TQRHGkihrLE=
Subject key identifier: 87:7C:2F:5D:99:AD:CA:64:9F:F5:A3:F8:9A:90:51:F6:FE:94:5C:93
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019FA8CFE8AFEE93800B64D85B68D9615E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0C1B
Signing time: Tue 28 Jul 2026 13:00:25 +0000
Manifest this update: Tue 28 Jul 2026 13:00:25 +0000
Manifest next update: Wed 29 Jul 2026 13:00:25 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: EADEVpsmDxsjd2dJDBTm6wlZaVakHkxUAu7SqQcbHUU=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:e8:af:ee:93:80:0b:64:d8:5b:68:d9:61:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Jul 28 13:00:25 2026 GMT
Not After : Jul 29 13:00:25 2026 GMT
Subject: CN=877c2f5d99adca649ff5a3f89a9051f6fe945c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:b9:2e:fd:c9:f3:85:29:fa:04:7a:8e:89:
51:c3:64:c1:37:7c:ba:cf:1b:9b:3e:07:0e:e0:b6:
6b:cf:f8:2b:fd:d3:4a:7d:3d:be:a2:60:c2:09:8c:
3d:0b:bc:1b:06:5d:1d:bf:8b:c8:ff:de:4e:af:90:
b2:d6:04:35:aa:07:a4:da:6b:f6:db:52:5d:a8:55:
c8:e0:86:9d:02:9c:14:4b:20:13:e2:ff:da:08:3b:
33:33:10:04:ca:9d:1b:32:06:80:ef:88:0a:3e:ad:
da:e6:75:1c:6f:00:9c:5e:57:ff:f6:b9:13:3d:9b:
7b:5c:5c:94:64:1f:6f:59:5f:4f:08:22:b0:55:66:
e7:fe:79:02:10:ff:df:ae:6a:44:be:ef:66:8e:1d:
a4:a7:59:ab:14:35:53:5c:32:ae:bc:07:c6:b8:58:
57:a5:bb:d9:15:88:39:d6:02:30:d9:ac:a2:83:99:
ea:c0:3c:aa:aa:59:1e:1e:e3:52:d3:23:22:0a:ae:
d3:80:62:48:8e:97:53:8e:5e:ba:5b:35:d9:b7:ea:
02:c0:55:c4:d2:56:88:d2:6a:19:3c:ba:2b:41:76:
86:19:04:e2:1e:ca:ff:29:aa:56:b3:2f:86:7b:c0:
ef:19:8d:dc:28:5e:25:4d:31:81:63:84:ed:30:d1:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:2F:5D:99:AD:CA:64:9F:F5:A3:F8:9A:90:51:F6:FE:94:5C:93
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:77:6f:f3:7b:8f:0a:ce:db:3a:3f:c6:d8:35:b5:3d:a9:
90:85:95:58:2c:dc:eb:3b:0c:9b:1e:89:06:e2:22:a8:3b:72:
88:af:14:62:83:c7:8e:93:96:c9:da:a4:e8:e6:e6:09:ea:70:
c8:bb:71:3f:61:96:15:31:92:12:4b:1b:a1:28:04:ab:25:93:
78:c0:38:6f:65:05:ac:78:b5:e8:cd:33:58:b4:c0:b7:aa:ba:
0b:71:1f:1a:71:2f:9c:2e:da:fb:c0:12:83:25:09:40:4d:f0:
51:d3:82:8d:87:fb:3b:2a:e9:b1:ce:26:d6:0f:72:bc:48:4c:
f0:7e:3b:79:7b:6d:c5:59:21:ce:87:0c:90:28:2f:8a:0e:e7:
90:81:91:7a:7b:cf:49:8b:9c:28:69:3b:06:35:63:71:27:1d:
ba:5d:14:af:1b:21:53:86:f5:e9:87:88:97:a0:9b:22:08:d6:
c0:c3:08:58:2a:06:f2:7c:61:b2:a1:d1:20:27:d3:19:ba:a4:
0a:5b:d4:f6:0b:96:6b:67:fc:3d:03:59:4c:7a:59:b7:9e:ea:
f0:5f:92:42:9a:a0:01:e7:15:10:a3:e1:2f:f4:82:9a:8f:ba:
4a:68:75:62:3e:e1:2b:49:cb:e5:63:62:3f:28:db:29:2e:65:
d1:44:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:33 2026 by rpki-client