Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File: A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier: nvIeNCfKyAMskkcOU9M04+NLNPaekEwOzA52rkreCHY=
Subject key identifier: 03:CF:B0:67:A8:90:FA:04:13:41:8E:2B:39:BB:69:92:A6:36:C8:9B
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 01A0C6A136B733F33CA1C4B019F9363B345E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number: 0CAF
Signing time: Tue 22 Sep 2026 01:00:49 +0000
Manifest this update: Tue 22 Sep 2026 01:00:49 +0000
Manifest next update: Wed 23 Sep 2026 01:00:49 +0000
Files and hashes: 1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: ogk6n710zR7euHXihjyiXg5El4Ub0A3KyFptPc0d6OI=)
2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:36:b7:33:f3:3c:a1:c4:b0:19:f9:36:3b:34:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Sep 22 01:00:49 2026 GMT
Not After : Sep 23 01:00:49 2026 GMT
Subject: CN=03cfb067a890fa0413418e2b39bb6992a636c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:94:f8:fd:d7:2e:45:a5:4f:45:3a:55:12:
33:32:92:22:c7:a5:40:f9:a0:f0:36:67:2f:18:33:
65:ff:82:9f:05:4c:55:57:3b:bb:de:ae:bd:47:ec:
c9:06:a1:c3:04:bc:c0:79:6f:dc:33:c4:0b:f4:c0:
89:41:96:bd:c1:46:db:82:0d:46:c1:d2:a2:93:85:
ce:f4:ea:3e:a5:6a:da:17:56:82:50:fd:11:9d:9b:
02:bc:8f:6f:93:65:56:6c:c2:cd:e5:ab:a3:2d:df:
a8:01:47:53:fe:ec:c3:5f:dd:c1:4a:29:35:75:83:
a1:8c:98:65:57:a0:a2:91:6f:1a:ee:af:22:54:54:
4c:d4:e8:78:ea:3d:8f:f9:0d:58:b1:dc:d3:75:f6:
e7:d4:bf:90:98:a3:bd:0f:12:9a:00:ca:8a:42:6f:
64:03:ff:10:0a:18:36:68:d3:5c:d3:4f:d3:e1:14:
23:89:1f:f1:77:4b:27:df:05:58:c0:bb:1a:fa:dd:
71:83:b7:7e:3a:d7:5f:36:34:1a:ca:4a:48:48:6d:
2e:7e:72:e8:5a:99:a3:ab:bb:c1:7b:7f:b5:75:f2:
50:cf:2b:73:a5:a0:50:0b:71:20:2f:a1:f7:66:54:
e1:74:3d:23:3f:03:43:ed:86:d3:73:34:51:84:27:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:B0:67:A8:90:FA:04:13:41:8E:2B:39:BB:69:92:A6:36:C8:9B
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:8a:ae:03:e6:b9:8f:ac:d6:34:ef:91:86:9c:eb:63:e5:
73:d6:32:3c:2f:98:87:7d:78:b0:a0:cf:da:cc:f2:e6:6e:40:
60:e5:06:e7:c7:72:8c:82:b3:4e:d9:42:b9:48:d2:85:71:83:
16:ed:a2:dd:e5:13:65:60:8d:32:a9:a0:ab:c1:0c:a3:68:57:
b0:64:42:99:97:65:48:4e:26:9e:50:f6:e0:96:8e:b5:14:38:
8a:4b:48:df:cf:db:24:4f:68:26:49:c2:69:47:80:11:46:d4:
80:0c:e5:65:82:de:c2:d0:58:25:1e:9e:6b:23:32:ba:8c:4d:
e7:d1:3c:9b:dd:ef:f0:4d:24:92:97:2b:aa:81:31:63:19:5c:
5b:ca:50:91:af:26:90:e8:c4:c1:bf:32:31:45:d7:1c:9c:ef:
82:5e:56:fa:e4:60:ec:bb:22:94:42:9c:1f:99:b4:5f:c2:0b:
94:65:2c:cf:ee:f8:38:6e:86:78:fe:1d:92:9f:d3:fb:0d:2b:
40:92:f9:92:1a:fc:be:72:ad:5c:f6:06:4e:40:1c:ef:d8:bc:
02:d3:90:51:e9:a2:0c:83:7b:73:1f:21:22:85:f2:08:3e:78:
05:1b:7e:72:a4:f0:48:97:09:93:65:64:37:fd:ad:5f:9e:6b:
c2:44:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:47 2026 by rpki-client