Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: OHCl7ASxWILQvtq/w3BmhbxZygp5Q7wil5FujxUco+I=
Subject key identifier: C0:6C:EE:58:09:20:33:A6:D1:A2:80:63:A3:0C:3A:42:60:D8:85:87
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019CAC105758DD021A81ADD4A81CEC078CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:01:17 +0000
Manifest this update: Mon 02 Mar 2026 01:01:17 +0000
Manifest next update: Tue 03 Mar 2026 01:01:17 +0000
Files and hashes: 1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: VsbSejL0HQ/ElEenpBPMBIuKoWHmyWtiPmHZtDGybmk=)
2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:57:58:dd:02:1a:81:ad:d4:a8:1c:ec:07:8c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Mar 2 01:01:17 2026 GMT
Not After : Mar 3 01:01:17 2026 GMT
Subject: CN=c06cee58092033a6d1a28063a30c3a4260d88587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:3d:9f:0d:d5:e7:bc:bf:65:8d:75:e0:b4:
a3:32:4f:e4:db:81:2f:56:1e:46:31:61:1d:e1:78:
9b:ff:24:d2:e6:64:ec:b2:bd:a7:8b:e7:1c:0d:9f:
39:0e:16:bb:cb:28:8e:1d:18:b1:e3:e7:4e:23:77:
f9:fa:cd:36:4b:c4:28:b2:ab:97:20:04:89:bb:91:
53:65:31:38:53:42:c9:5c:8e:bf:bf:85:ec:df:fd:
a3:9c:59:b5:28:c4:09:c3:e0:f2:77:7f:9c:91:3b:
09:22:a5:d5:82:c7:f1:10:22:31:f8:92:07:df:b1:
d5:5d:d8:82:7f:36:90:18:28:1b:8d:81:91:3c:0a:
39:cc:d6:02:85:f0:c2:a8:d5:b1:72:73:75:3c:b4:
05:ac:2a:21:89:fe:cc:81:9f:6d:86:b3:c5:97:33:
40:24:65:36:8f:3d:25:b9:27:1e:21:21:e2:7d:a9:
76:2e:b3:fe:9a:75:ba:2e:27:fd:cb:a5:10:b9:1f:
88:26:df:5d:6c:80:a3:92:db:c3:e2:98:a4:25:90:
f5:52:a5:d5:44:94:7d:df:29:c7:9f:a9:bb:90:60:
13:6b:fa:0d:3f:f5:f6:4b:d2:04:aa:fe:90:1c:69:
68:29:fd:46:5d:64:8a:32:2e:60:62:32:d3:42:79:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:EE:58:09:20:33:A6:D1:A2:80:63:A3:0C:3A:42:60:D8:85:87
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:52:6e:29:ca:1d:d7:49:9e:de:23:c2:16:7f:f2:52:39:ed:
32:9e:b5:52:57:33:c4:85:2c:8a:ee:f9:94:ba:df:df:da:73:
df:b4:6c:de:ba:38:a6:aa:81:8a:fe:62:11:23:19:15:97:43:
72:31:e5:57:af:6c:98:c4:a7:6b:30:8d:2e:59:ad:5f:58:59:
c5:67:82:de:15:90:fc:3e:33:2f:63:36:94:f6:5c:a3:b4:1b:
29:6a:57:93:6f:e2:e8:6b:ab:e9:0b:23:1a:f0:d2:4a:1b:88:
59:1a:c9:56:c0:68:13:04:a4:fa:22:4c:ba:8d:95:38:7a:0a:
03:ea:fa:cb:be:38:b5:1c:c2:12:ce:c6:8e:d7:b9:6a:be:80:
f1:a2:9f:f7:86:12:92:b4:d0:86:20:d6:56:9c:3e:cb:61:e8:
4a:30:25:d6:0f:c6:83:53:76:57:4b:d6:d6:41:33:a6:13:24:
bb:5f:9a:17:79:c7:76:2c:9b:91:67:03:09:e3:53:a8:45:77:
df:0f:a5:57:97:ec:91:e2:47:6f:e6:1d:3d:9c:2e:4c:d9:10:
39:87:a8:c8:10:10:c5:f1:c1:47:d3:97:77:94:cd:a0:e2:77:
20:0a:6a:81:8f:ad:83:be:6a:41:aa:a1:53:e3:68:e4:89:c6:
f6:f4:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:31 2026 by rpki-client