Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: 6WOO2yE+BMsFC6CefekOlAIpO0MIWyylP574oUQWuf4=
Subject key identifier: BD:2B:68:7F:BA:BC:3A:2D:30:B0:03:68:3E:09:66:3A:CF:C8:3A:EE
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 01A1DCEFF6C9633518C7BE3561D6A24D70E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 0D2B
Signing time: Sun 15 Nov 2026 02:01:16 +0000
Manifest this update: Sun 15 Nov 2026 02:01:16 +0000
Manifest next update: Mon 16 Nov 2026 02:01:16 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: PZvt8SQSIjv+N2jgfDFEJCtIX4pE1dW2QfjP2yOsdIw=)
2: hNa00z3Ek8rroowJ5HR9dqvaJ5Y.roa (hash: mk1STTZtmkvzNbIsJ9T8/GykF8a5Am/eaK0HhSuEcmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:f6:c9:63:35:18:c7:be:35:61:d6:a2:4d:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Nov 15 02:01:16 2026 GMT
Not After : Nov 16 02:01:16 2026 GMT
Subject: CN=bd2b687fbabc3a2d30b003683e09663acfc83aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:0f:96:84:ce:b5:2e:7d:d7:01:10:ae:91:
c7:ab:fe:8c:3a:ad:97:c1:fc:f3:5b:74:ab:2e:c8:
ca:40:4f:b5:86:70:08:89:69:9d:03:b4:c7:8e:78:
8e:94:02:20:01:54:68:dd:b7:cb:39:d0:29:ec:c5:
24:19:6a:0e:af:7a:b8:6b:ab:f1:ea:d0:f4:f7:e8:
f0:21:d7:16:23:2a:1a:aa:a8:73:af:30:70:71:2e:
1c:7a:59:da:5a:59:ae:d6:c5:a0:6a:b0:dd:93:7a:
85:03:b2:09:a2:4c:1f:8b:b8:d8:81:34:2f:f6:58:
80:67:91:5c:3b:3d:fe:eb:75:07:27:9d:00:57:09:
a8:7f:c0:76:53:1e:be:a2:57:13:58:8a:6f:98:23:
42:87:1c:7a:89:dd:0f:49:cf:03:1c:26:d8:c9:8b:
aa:c3:c9:58:ad:1d:b2:fb:b6:cb:14:3e:1a:8f:24:
e6:ae:20:10:04:c6:35:3d:b2:15:a1:a4:71:24:3c:
84:79:42:5b:73:46:f0:1f:4c:da:de:da:7e:8c:36:
b8:c4:53:77:97:d8:e5:e9:a0:bb:f8:a9:f7:27:f1:
f8:5f:80:29:43:fe:ff:37:d9:9f:90:c0:68:ab:cf:
56:87:c6:4c:85:d3:45:b4:b2:46:97:66:a4:73:23:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:68:7F:BA:BC:3A:2D:30:B0:03:68:3E:09:66:3A:CF:C8:3A:EE
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e0:50:64:1d:2f:2a:23:d0:4a:35:38:3b:a7:a8:2c:80:c1:
01:b5:1c:1c:60:a0:c7:a7:c3:6a:ac:93:a4:23:31:13:a0:f4:
85:bb:b6:ff:ce:97:71:b3:9d:43:a1:c4:41:8a:53:45:e1:bf:
e3:f2:5a:31:36:a2:36:96:4d:54:d3:c0:78:d8:71:6e:fd:ac:
2d:88:28:f6:02:32:f4:8b:b6:0b:09:ba:ea:d4:b5:e1:04:1d:
d4:1a:91:ef:c2:4c:ff:90:0d:f3:b0:2b:8b:f2:cc:9b:4a:02:
20:16:eb:b6:c2:e8:c6:d8:ee:61:38:46:d7:39:89:bf:cf:a1:
40:4b:7d:8d:b3:cf:cd:6f:df:0e:8b:6c:43:b0:a9:41:14:4f:
98:b8:c3:00:1d:e7:9e:98:b4:58:12:70:73:56:b1:fc:b5:12:
97:b6:78:2e:d2:ff:37:8e:c5:b8:cf:c0:2e:f7:5f:1c:40:c2:
ae:ab:8a:09:9f:dc:1b:3d:8f:61:5e:f1:51:68:fa:32:9f:1b:
92:28:f8:49:db:17:d0:9b:99:44:df:b1:6a:56:d1:80:fd:12:
a8:be:b2:93:26:2c:77:ce:29:fb:1a:37:2d:10:ca:7f:a4:76:
dc:c5:3a:04:79:74:09:71:6c:42:a2:eb:36:94:f8:49:2d:80:
4d:84:d6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:12:56 2026 by rpki-client