Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: A3CIsX4G6H3pGwsDS0DtRdDvlvLNAEYStnGIoSnp0xk=
Subject key identifier: EC:CD:D5:71:AC:54:67:1D:3A:2B:F7:CF:F0:5C:54:86:2C:59:F3:82
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019CAA21EB533DB8DA717C01CCFA0E1F2040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 16:01:15 +0000
Manifest this update: Sun 01 Mar 2026 16:01:15 +0000
Manifest next update: Mon 02 Mar 2026 16:01:15 +0000
Files and hashes: 1: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: nUPnDhzP2RVXllgQ+bD7WUByX66p7HZJ+tmZScUklRA=)
2: FXyAhkD-8Q5q4GQ3avZeolFCnH8.roa (hash: ZUZeRBd+6uQSjPBdIWYrxSWAHVlOiQl5Z7Q0BZoi1ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:eb:53:3d:b8:da:71:7c:01:cc:fa:0e:1f:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Mar 1 16:01:15 2026 GMT
Not After : Mar 2 16:01:15 2026 GMT
Subject: CN=eccdd571ac54671d3a2bf7cff05c54862c59f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:89:e0:88:8b:1f:62:21:3c:0a:ad:50:69:
50:b1:13:90:f4:f0:e4:f1:aa:ea:74:f0:e9:4b:40:
57:d6:7a:ad:6e:02:42:59:8c:00:94:75:a3:f9:93:
c9:9c:2a:f6:2b:46:e6:6f:88:78:c9:ff:f2:3e:ba:
3e:2c:ad:c3:bf:01:78:0f:ce:f4:75:62:cf:26:68:
5c:0e:13:67:c8:0a:bd:f5:d3:d2:72:ea:46:5c:ad:
c9:9b:5c:04:71:9f:33:9f:7a:d5:e1:ce:42:4b:04:
91:95:a0:c2:e2:00:48:51:dc:7e:17:9f:12:6a:57:
d2:78:09:8e:0c:76:d1:0c:c2:dc:2b:14:21:58:2a:
45:9d:e3:7c:1a:de:33:82:06:dc:47:ff:ab:6a:ba:
ee:2a:fd:fb:fb:da:e8:9a:76:14:bf:91:7d:af:a3:
0f:47:18:28:bb:f0:3c:92:85:66:42:63:67:29:85:
ff:1e:7a:ef:13:fa:ab:ed:1e:bf:10:fe:06:ec:82:
fe:1e:da:4f:bb:47:f7:14:1a:81:e4:46:78:17:98:
29:39:4c:fd:11:3f:3e:35:ca:49:24:80:be:c1:22:
fc:e6:0c:a8:6a:0f:85:6b:d0:df:69:04:3c:3b:dd:
62:0d:44:4f:89:47:a0:43:e3:bc:ca:d4:6d:b8:7e:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CD:D5:71:AC:54:67:1D:3A:2B:F7:CF:F0:5C:54:86:2C:59:F3:82
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:6f:2c:eb:18:75:8d:b0:55:c7:c2:09:77:2c:fe:20:0e:
72:74:34:26:85:e5:0f:76:a6:f3:b1:1d:b9:28:0b:25:c4:d6:
21:01:4a:88:82:43:87:f3:1e:87:97:1d:d3:e5:d7:c8:56:ff:
11:5c:92:d1:49:30:67:32:04:44:21:17:b6:f2:01:ad:35:95:
4b:d1:95:a4:b0:28:81:c2:19:c6:2e:93:b0:fa:d0:72:de:dc:
7f:c1:ae:b8:38:72:16:8a:c1:ab:2b:c1:eb:68:aa:9e:79:26:
91:f9:f1:05:52:02:3e:02:42:7a:cf:f4:90:d8:49:48:b6:21:
03:a5:ce:c7:17:5f:5a:a3:7a:8d:32:6e:1a:41:0d:87:be:89:
bf:98:69:6e:ea:6c:4f:a5:0e:e9:33:99:c3:af:07:4f:00:75:
81:b3:1d:a8:57:d1:c2:59:0a:20:da:eb:ff:fc:e6:75:35:9e:
ab:8a:c3:7d:a1:af:1e:e1:2b:7f:29:eb:1d:e2:f9:99:a6:02:
56:19:a5:32:66:82:35:de:bf:54:cf:fc:ca:fa:c4:15:aa:61:
c1:54:ca:ca:24:67:2b:6e:eb:91:ab:b8:9e:b3:38:f1:3f:14:
af:53:06:fa:d6:d5:91:39:cc:42:a5:07:4f:b2:54:83:1d:7a:
85:66:0d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIetTPbjacXwBzPoOHyBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTVhZGQ4NmJhZjZiMmQwNmZmNDFmNTUyNmQzNDdmNzFl
ZWI0MTAwHhcNMjYwMzAxMTYwMTE1WhcNMjYwMzAyMTYwMTE1WjAzMTEwLwYDVQQD
EyhlY2NkZDU3MWFjNTQ2NzFkM2EyYmY3Y2ZmMDVjNTQ4NjJjNTlmMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8GJ4IiLH2IhPAqtUGlQsROQ9PDk
8arqdPDpS0BX1nqtbgJCWYwAlHWj+ZPJnCr2K0bmb4h4yf/yPro+LK3DvwF4D870
dWLPJmhcDhNnyAq99dPScupGXK3Jm1wEcZ8zn3rV4c5CSwSRlaDC4gBIUdx+F58S
alfSeAmODHbRDMLcKxQhWCpFneN8Gt4zggbcR/+rarruKv37+9romnYUv5F9r6MP
Rxgou/A8koVmQmNnKYX/HnrvE/qr7R6/EP4G7IL+HtpPu0f3FBqB5EZ4F5gpOUz9
ET8+NcpJJIC+wSL85gyoag+Fa9DfaQQ8O91iDURPiUegQ+O8ytRtuH5VKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzN1XGsVGcdOiv3z/BcVIYsWfOCMB8GA1UdIwQY
MBaAFAOVrdhrr2stBv9B9VJtNH9x7rQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMt
Y2ZjNGE2NzZkNmUwLzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mZGIzOTgtM2ZiNS00YjZhLWEwMDMtY2ZjNGE2NzZkNmUw
LzEvQTVXdDJHdXZheTBHXzBIMVVtMDBmM0h1dEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR9vLOsY
dY2wVcfCCXcs/iAOcnQ0JoXlD3am87EduSgLJcTWIQFKiIJDh/Meh5cd0+XXyFb/
EVyS0UkwZzIERCEXtvIBrTWVS9GVpLAogcIZxi6TsPrQct7cf8GuuDhyForBqyvB
62iqnnkmkfnxBVICPgJCes/0kNhJSLYhA6XOxxdfWqN6jTJuGkENh76Jv5hpbups
T6UO6TOZw68HTwB1gbMdqFfRwlkKINrr//zmdTWeq4rDfaGvHuErfynrHeL5maYC
VhmlMmaCNd6/VM/8yvrEFaphwVTKyiRnK27rkau4nrM48T8Ur1MG+tbVkTnMQqUH
T7JUgx16hWYNEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:06:37 2026 by rpki-client