Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: aARVgaU/3dFUjln8BlVa7/ni/GXdmRVfRPFoxKbMWlc=
Subject key identifier: 78:DD:45:14:3F:36:2A:47:BE:FF:F5:3A:3D:A6:CD:56:CE:1E:44:FF
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 019CAC0FF4E76FE4E0C70A30A92FD7A223BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0A8F
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: hh7Mvo4hbLsdZWImA8onykskEDRzrqQsVCAyKdCAy/k=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f4:e7:6f:e4:e0:c7:0a:30:a9:2f:d7:a2:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=78dd45143f362a47befff53a3da6cd56ce1e44ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:82:92:28:53:4d:80:df:28:4a:87:4f:f2:
25:08:a0:cd:b6:ca:ad:e4:40:01:1e:79:19:35:bd:
ca:c3:cb:8e:2f:3a:10:87:ce:6e:2f:41:a5:b6:43:
21:6a:ca:41:b0:64:b0:6d:44:02:c9:48:50:ae:60:
0f:dd:bb:0f:73:92:ec:64:d7:b4:80:f1:61:bf:f5:
e3:0a:94:c3:5d:8d:15:c2:c4:94:2a:46:0c:05:05:
de:1c:5b:67:aa:53:ea:52:25:c6:27:7a:c6:4a:1c:
74:81:92:21:ee:c4:0e:b4:51:e9:4b:20:d9:67:32:
b4:1d:79:63:49:17:70:6f:44:a9:0c:3f:0d:db:8a:
85:08:74:64:db:2d:dd:bf:51:7e:ff:bc:e6:e4:43:
08:f8:ca:b6:ce:f3:bb:7d:9d:e5:3b:bc:ba:4a:7e:
30:4d:81:8f:1a:e1:a8:7a:aa:04:5b:cd:31:12:f7:
4b:ba:46:6e:a7:8d:2f:5d:6e:38:f7:d7:d1:2d:d7:
99:22:a4:1f:7e:c7:70:c9:6b:a1:cc:9e:8e:3e:96:
37:de:e2:2f:78:6f:31:ff:fe:78:9c:b5:fd:78:99:
64:4f:9d:24:97:d7:54:df:94:2b:58:c1:98:4c:6a:
6e:aa:14:fd:53:3d:c4:dc:f0:6e:64:70:c7:98:e7:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:45:14:3F:36:2A:47:BE:FF:F5:3A:3D:A6:CD:56:CE:1E:44:FF
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d1:8b:cf:a6:d1:97:ed:df:76:2b:c0:21:64:5f:42:d2:20:
54:05:fd:d0:27:6c:91:7d:a8:26:78:6a:b3:ab:37:be:9e:e9:
e7:01:71:9d:88:e1:3e:0d:91:99:f1:88:d6:90:a4:87:7f:29:
fe:95:4c:4e:56:dd:f6:7c:d0:33:56:dc:c3:f3:70:2f:62:b0:
22:f1:b6:31:5b:1c:1f:81:d8:34:38:6b:38:42:91:ab:84:14:
8e:79:9e:b1:dc:07:14:e6:1d:2c:2b:8a:07:72:58:a8:68:a0:
a8:f8:54:0d:c3:12:8b:ee:31:c7:1b:14:16:19:9a:f4:21:72:
17:af:71:e1:12:fe:4d:0e:e2:d7:48:25:06:bc:a1:ca:58:94:
09:20:de:9b:32:4f:66:8b:55:d1:c0:89:57:c5:b0:44:84:8b:
3f:58:ea:2b:07:24:a9:69:ca:f1:93:d7:a8:c4:1c:9c:d1:7a:
d4:3c:75:d5:51:33:ea:2f:4e:74:ec:6b:2c:e8:ac:48:86:71:
b7:0f:5d:52:06:b2:59:5a:e8:e4:62:eb:55:38:f3:59:e0:14:
4c:1e:99:1c:fe:ae:02:1c:3f:9d:b5:68:c9:1b:10:15:2b:d2:
1a:45:a7:27:98:01:1e:f6:12:9f:7c:96:db:36:9b:c7:9c:cf:
65:54:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:54 2026 by rpki-client