Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: qcRL9uKBcUW90wJUhcLqhovxUktaCtTD9m6wB+co2k8=
Subject key identifier: A2:0F:A8:E0:19:7E:80:36:C0:D0:70:2C:D6:C7:09:DE:EB:D5:E6:68
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 01A1C58CC82E46F5FFF7FBC5F5DAA188E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0D33
Signing time: Tue 10 Nov 2026 13:01:40 +0000
Manifest this update: Tue 10 Nov 2026 13:01:40 +0000
Manifest next update: Wed 11 Nov 2026 13:01:40 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: ixGCwNLj+5DolXRLhyXzSXJp/ZOs1GeLBzFOcGvszO8=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:c8:2e:46:f5:ff:f7:fb:c5:f5:da:a1:88:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Nov 10 13:01:40 2026 GMT
Not After : Nov 11 13:01:40 2026 GMT
Subject: CN=a20fa8e0197e8036c0d0702cd6c709deebd5e668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8a:7d:b3:aa:75:6e:a4:84:82:39:32:0e:87:
61:77:43:e9:a2:8e:95:cb:4b:42:59:19:7c:30:2c:
7f:bf:ec:2b:ba:ef:2d:88:24:75:f3:77:2a:01:8c:
ae:da:17:06:c8:6d:58:1d:d3:cd:e6:c8:16:4f:2c:
1a:b0:5b:af:cf:ef:37:55:20:24:89:46:e1:e2:7e:
6e:01:e1:ee:07:56:bd:39:c8:51:08:0a:44:42:b9:
a2:51:d9:4a:4a:8d:7d:d4:6a:e4:75:66:3c:bb:3c:
c4:22:a4:af:cc:65:2f:ba:7f:f4:ea:5c:ea:00:b2:
4d:40:a8:0d:58:47:0a:d5:79:d3:74:ad:d0:d6:39:
fe:c5:22:24:f1:6f:2d:de:6c:8d:00:ec:e2:d5:65:
ba:bb:4c:fb:91:29:99:ea:d3:ea:17:16:f8:3c:51:
00:fb:77:0f:27:13:a0:3a:3c:66:fe:93:0c:d7:b6:
7d:d8:8a:ae:1f:dd:9b:db:1e:e4:df:58:ff:bd:1c:
e3:bf:84:e1:54:d0:07:c8:6e:c1:e4:fc:53:fd:b7:
90:1d:c4:ef:c5:02:39:28:1b:1f:0a:d6:5c:20:b1:
cd:90:18:ef:06:55:50:ee:51:8f:8f:3b:4d:7b:53:
0a:52:d4:21:30:eb:6c:b3:e1:79:d5:80:39:08:c0:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0F:A8:E0:19:7E:80:36:C0:D0:70:2C:D6:C7:09:DE:EB:D5:E6:68
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:24:3c:4f:37:01:31:27:d3:b7:4e:31:a2:90:98:02:c9:b8:
08:3a:d3:f1:36:7b:1e:70:ea:6d:89:1d:ef:d9:3d:2b:3e:5a:
ca:42:d2:7a:4c:db:bd:7a:cd:c7:e3:0b:15:71:6f:c5:aa:95:
cc:2e:38:5a:2e:c0:5d:0b:97:28:7c:8d:b6:1e:34:4e:d9:fd:
fc:46:b9:24:00:69:6b:0d:b3:ef:2c:d9:54:1f:ab:eb:a7:6a:
5a:cc:40:e6:80:d4:9c:87:7d:fc:c7:f2:28:b6:cb:cb:be:59:
05:1a:97:ff:9a:70:fc:b8:5d:5e:29:6a:c0:2b:cf:f4:83:80:
7b:0b:b1:f3:40:25:82:27:90:f5:99:f1:cc:73:32:61:e0:b5:
01:03:c4:30:49:2c:4a:7a:c4:66:49:a0:c3:60:9d:ed:66:4b:
c9:49:0e:41:ee:88:87:54:ff:92:22:f8:fb:4e:f4:ed:09:73:
83:ac:05:1e:a5:6c:91:de:a8:db:f1:d3:90:02:c9:4b:7a:3e:
3d:34:f0:de:92:17:86:b6:4b:ea:81:59:c2:52:ce:83:3d:59:
88:01:ef:c2:5c:f1:e4:80:78:be:31:c1:10:54:3f:63:d8:9d:
8f:89:46:02:06:93:91:fe:23:73:05:93:ee:b9:ef:80:c3:b5:
0d:24:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 18:05:34 2026 by rpki-client