Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: aa+62dU00FSJPk30jrtGcdKEN3QB4G465AlqxDhlMLE=
Subject key identifier: AD:7F:9A:76:BC:63:24:C9:2E:41:86:03:DF:12:B0:E8:F4:7E:A3:AB
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 019CAB6AF78A6A8865B0FB0BB1639125129C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0DBB
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: HesWp18PuY2/2BkRDbvw8qhUJ3O9YK4PiM25QneNXfo=)
2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f7:8a:6a:88:65:b0:fb:0b:b1:63:91:25:12:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=ad7f9a76bc6324c92e418603df12b0e8f47ea3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:d5:4b:16:7d:ea:88:22:db:16:81:33:35:
ad:a5:81:a4:03:7e:5c:e6:7a:c7:e9:85:5a:ad:d0:
4c:5f:5e:b5:f2:ab:6f:e1:10:1b:50:ae:16:2b:2f:
7b:d8:76:ff:90:b1:39:1f:f5:dd:c1:a9:a1:8e:a1:
5e:76:e7:3b:36:4d:8e:e8:6e:b7:b3:76:6c:91:25:
0b:a3:ec:e0:ba:2c:b2:76:75:2d:4b:c8:96:4a:ed:
6c:41:d1:f1:c4:46:de:ec:85:a0:66:01:e0:54:bc:
5e:f4:aa:dd:c7:94:1e:12:65:b4:d5:01:90:56:93:
dd:8f:b0:5d:a3:0b:87:1f:6d:3c:f8:fa:8d:07:b0:
6d:e3:89:ff:eb:9f:f7:dd:d6:02:2c:87:c4:ca:b5:
c4:94:3b:67:ef:be:e6:a4:24:a7:b3:c0:22:7e:0f:
6c:4b:0c:5d:2b:f6:90:69:37:35:d5:3b:98:b0:4f:
aa:a7:73:04:b7:b3:85:e0:fd:9c:02:a9:2a:ba:43:
1b:b9:42:a1:10:a6:d0:4a:63:d5:43:f3:8f:30:62:
6e:be:42:2b:d1:ac:30:d1:bb:55:98:14:17:8e:1c:
ac:f2:ac:1b:ab:cc:83:ff:d1:8e:89:37:d6:ed:b2:
c9:ca:72:7a:aa:05:7d:f6:1f:ea:a4:fb:4e:e2:44:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:9A:76:BC:63:24:C9:2E:41:86:03:DF:12:B0:E8:F4:7E:A3:AB
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cf:c2:1e:7e:7d:56:a6:cc:f8:09:05:34:43:8a:b0:c2:e3:
55:8f:c1:04:68:e4:0c:1e:61:5f:3e:5f:f9:b9:a5:7c:37:8d:
50:70:eb:f6:df:2a:c8:44:c9:e6:2c:32:b0:8d:b0:67:0d:3a:
a8:fc:92:65:87:ca:e1:72:14:ac:ce:31:94:84:55:ad:27:0c:
f0:76:47:b4:7d:fd:1c:10:23:09:3d:67:cc:64:6c:65:e3:6d:
c5:de:18:9f:06:d8:60:5a:c5:ab:61:3d:9a:17:84:a4:d2:dc:
b2:d6:aa:09:23:55:a2:2d:11:f1:45:47:26:d7:47:31:8e:d0:
9c:0d:7c:8b:f4:9d:ef:b0:bd:15:c5:85:79:11:6d:74:90:27:
50:54:09:74:17:1d:df:26:ef:25:66:7a:30:1d:e3:5a:a2:e2:
89:93:7f:69:7d:4c:0e:b1:35:b1:30:6a:3c:cc:af:03:ec:4f:
12:a6:59:76:ab:e3:0a:ea:6b:a1:46:71:26:f5:e9:c6:b5:1f:
1c:eb:f1:0a:c4:d7:45:8a:b0:81:17:2b:3a:7f:1e:c5:cc:1f:
f6:63:4a:ab:a0:64:b5:5b:0d:97:f1:63:7c:24:84:b1:b6:ed:
13:c7:50:87:28:27:0d:b5:58:cb:cc:a1:10:7c:e1:4a:12:6a:
33:4e:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:25 2026 by rpki-client