Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: A0VBspDIQ8QftIJqxaUmi6fyxsI6tR4ZpibEtbK9AMw=
Subject key identifier: D5:4E:CA:72:F7:B7:41:73:22:D8:9A:34:BA:EB:BE:E2:B8:D3:BB:D2
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019D9A3EDE1430D18CEC8CC4E71D50F100EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 15EC
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: LedzlB+bS3IU5aiFH9SAgYQWRAG0O7ywH3gwNIGj1BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:de:14:30:d1:8c:ec:8c:c4:e7:1d:50:f1:00:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=d54eca72f7b7417322d89a34baebbee2b8d3bbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:74:a4:63:10:f3:d5:3d:6f:43:66:df:5b:
08:dd:de:08:8c:7a:a0:e7:3a:bb:13:8f:ef:20:45:
69:cb:56:54:24:ad:11:2a:4d:0e:aa:f3:9a:b7:4b:
8a:5a:2d:94:76:d2:07:a4:d4:13:1a:de:d2:09:55:
23:be:3c:c8:d7:c0:91:16:d1:35:65:1f:56:39:24:
2a:21:3c:23:01:79:db:0c:b5:1a:7e:ea:5c:17:56:
35:7c:ae:23:aa:00:32:12:4d:d3:e4:2a:be:67:61:
3f:38:76:78:c9:7c:46:0b:28:2d:40:98:7c:e9:ba:
46:63:c6:04:be:cf:f1:90:d2:5c:64:68:3d:af:e8:
a6:91:2d:05:fe:07:65:8d:ce:21:19:81:4b:11:9a:
98:0b:d1:77:d6:31:f3:0f:43:c2:9c:57:44:a9:86:
ee:24:af:08:1b:9d:a6:2c:86:9d:a7:c4:97:53:ce:
11:0b:90:de:41:0d:ec:d8:a6:ab:6d:94:3b:c5:cd:
ff:7a:c5:65:59:61:ed:76:c5:af:54:ef:44:f4:35:
f5:02:cc:15:a4:2c:d5:da:cf:e5:56:bf:49:62:1b:
38:11:83:21:47:c5:e5:81:e1:f2:0e:a8:b4:63:fe:
16:c7:1b:45:da:2a:dc:f1:21:bd:4d:c3:b1:25:ef:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4E:CA:72:F7:B7:41:73:22:D8:9A:34:BA:EB:BE:E2:B8:D3:BB:D2
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:98:65:1b:ad:3c:61:67:24:27:9b:61:76:8a:67:9f:f9:30:
a2:61:6b:60:90:18:19:ef:1b:32:d3:01:f0:f6:92:3a:3f:70:
73:18:c4:72:67:a0:c5:f5:94:f6:aa:80:19:ae:62:27:da:69:
e5:31:75:ad:25:f6:33:0f:9f:db:34:cb:4f:53:11:a8:09:bc:
be:92:21:dd:38:d7:ca:ad:96:c8:09:09:7b:31:a7:1d:da:8b:
48:de:08:ce:41:e9:fc:c5:9e:fd:5e:2c:53:6b:38:97:31:eb:
01:4f:57:b9:4d:a1:99:d5:7f:7c:ad:ab:3e:bf:d8:0f:7b:96:
15:d5:8c:12:07:e9:a7:50:14:cb:87:9b:20:eb:9a:66:02:9a:
11:3a:66:d8:7b:36:cf:03:07:e3:07:f4:1f:64:97:ec:e9:3f:
ea:79:ba:b2:92:38:82:1b:60:3a:3b:5e:2b:17:15:7c:2d:23:
20:f2:12:09:95:51:86:e5:29:e3:6f:e4:ee:a2:15:4c:31:88:
ef:7e:de:c1:f4:6d:b4:4d:09:03:64:c6:7d:56:99:8b:4b:eb:
d1:b1:b0:8a:2f:60:73:52:ee:6f:93:87:4b:35:d1:ec:0c:76:
5f:3c:44:b2:52:93:cb:5e:ea:0e:1d:ec:17:ec:50:f0:8d:5e:
0c:49:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:11 2026 by rpki-client