Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: UtOCzdngHckvYMgcIpAzYE6eOh5VPQXE63598XS0fIg=
Subject key identifier: 22:1B:57:02:64:6C:F5:C6:BD:8D:94:5C:64:09:04:48:96:9F:D8:35
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 019CAAC6EA86DB3225C6CABE29E8F92C5B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 1570
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: 55zpSPIb8yRIbjJpUuTnrKNG7KE.roa (hash: h4Ec3W5AoQcpGRKZrj+SMm1p96ZddYSDTRq4GA8UC/E=)
2: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: W6Jb7ag52RSficvECBvFWvkf7/sOa87QzjIRavRTEi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:86:db:32:25:c6:ca:be:29:e8:f9:2c:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=221b5702646cf5c6bd8d945c64090448969fd835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:f2:fe:3e:cc:a4:38:20:e3:44:19:df:73:
ef:5e:b9:cb:e7:97:e3:35:fc:bd:33:83:be:ca:0b:
f0:e8:ae:c7:52:b9:12:c6:45:bb:7a:4e:43:f9:3d:
44:ae:71:d4:f7:14:d2:93:f5:1b:eb:75:ad:5f:6a:
59:42:05:7e:77:4f:ed:c2:fe:32:06:05:db:c4:77:
ad:00:58:06:9d:ba:8b:d0:8e:0a:47:dd:ea:0c:43:
cd:5e:e7:1f:ab:7a:a4:55:14:b1:df:94:04:fc:fb:
52:10:b9:17:00:7e:f3:b2:81:7e:1b:e4:02:24:6b:
14:17:44:2d:ef:e8:d3:9b:c9:80:81:d2:7b:fe:dc:
4f:7a:39:67:4d:5f:49:51:cb:a0:0d:eb:0c:8c:5f:
17:4a:a0:da:c2:26:4c:17:b2:ee:c5:79:ef:55:c0:
74:b0:83:b5:51:ae:27:53:6b:91:84:c6:91:1b:86:
e7:fd:04:e9:4e:20:9d:ca:e6:0b:a0:f2:93:3d:80:
ba:bb:71:79:13:27:32:4c:79:63:c9:da:47:68:f6:
30:c9:e5:97:78:f0:cd:f0:67:b7:27:3b:4a:39:d6:
65:e3:d1:af:8f:f2:d9:35:df:fe:32:69:45:e0:59:
7f:e8:df:ce:3d:73:ff:79:fd:1d:78:6e:7a:f8:1d:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:57:02:64:6C:F5:C6:BD:8D:94:5C:64:09:04:48:96:9F:D8:35
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:d2:dd:9d:af:61:21:a3:f5:21:a1:1f:92:64:ce:ae:ca:
b1:9c:72:07:6b:97:f0:25:77:e5:9c:f0:b1:1e:7e:cf:29:76:
2d:b4:3e:cf:48:27:ff:50:4a:d1:43:dc:e0:76:b0:58:6b:99:
97:69:c5:62:a2:22:f7:4d:88:d2:df:3c:d8:b1:f2:60:0f:a6:
e5:ee:51:ed:c8:e9:5d:3a:c3:a2:77:89:f3:3e:96:92:0a:61:
21:9b:05:2e:7c:46:80:fd:8a:3b:7f:2a:a2:4e:0e:0d:d1:74:
2b:6d:e3:be:12:85:c1:77:82:a0:83:ac:a0:c8:11:65:12:5f:
62:65:71:ed:7f:9e:7d:e8:9c:0a:56:ab:c5:58:74:4c:a4:b0:
73:28:b0:5f:71:a6:b0:d7:07:27:80:7e:e1:11:3f:ae:75:02:
da:a3:92:8f:99:57:96:6a:d5:21:b1:7f:ff:35:c4:7d:b5:d4:
4c:be:7b:82:ce:cb:2a:ce:5d:3e:1e:f0:9a:59:62:87:b1:aa:
fd:1a:73:27:53:ed:88:07:8e:7d:dc:62:62:52:e4:a2:3c:79:
42:16:04:0e:76:06:0e:ba:7d:9a:cd:fe:b8:12:0f:64:bc:1d:
04:2f:7c:a2:0e:95:8d:6a:fc:b1:04:46:10:76:50:7f:82:29:
24:90:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:38 2026 by rpki-client