Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: zt5v5t/iaiTjoxQ9fW9BB+5Hf8fclz/4DojTUAcmPZ0=
Subject key identifier: 28:D1:0A:95:19:49:48:74:02:0A:DD:C5:9B:EF:44:0F:0C:2C:95:C9
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019CA9EA8F472E00E89E8DD203E13AB2D424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 07F1
Signing time: Sun 01 Mar 2026 15:00:47 +0000
Manifest this update: Sun 01 Mar 2026 15:00:47 +0000
Manifest next update: Mon 02 Mar 2026 15:00:47 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: 4t1jdoDwx2Z+A6loWkQrt17UdYnyoZ4Vc5ByWbsWCB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:8f:47:2e:00:e8:9e:8d:d2:03:e1:3a:b2:d4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Mar 1 15:00:47 2026 GMT
Not After : Mar 2 15:00:47 2026 GMT
Subject: CN=28d10a9519494874020addc59bef440f0c2c95c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:13:6b:8c:92:f9:d6:45:66:9d:a6:44:98:
46:79:ec:2c:27:d8:03:5e:c9:33:1f:5c:85:25:c5:
13:ae:aa:f7:aa:b5:c5:08:62:ba:dd:4c:ec:f6:0b:
1d:7a:a5:92:b6:31:7b:2c:59:4c:c8:8b:a7:25:8e:
68:d8:b9:6d:15:85:53:98:32:2a:79:86:9a:60:e4:
12:a1:43:67:12:30:a6:34:27:97:5f:dc:1c:13:7c:
5e:2d:89:f7:f1:e1:0e:b9:21:a9:05:b1:03:92:a8:
cd:78:25:3d:aa:45:3d:35:ed:4c:60:f6:47:52:f6:
78:aa:c8:26:e8:5a:09:97:48:13:22:f4:5c:a4:9a:
0d:2a:b5:72:8b:e4:f0:f4:b1:81:e8:e2:53:07:f4:
7a:c5:fb:89:56:b8:5f:45:35:93:fa:40:4c:f2:6a:
e9:9d:a8:9f:c3:ab:28:10:4e:2e:04:d6:3e:52:6c:
4f:2b:c8:d9:ac:b7:8a:72:c4:b5:50:ee:d9:df:d5:
12:03:83:ad:43:ef:93:10:09:ec:45:ef:03:d7:fb:
88:16:fc:06:89:4b:76:2e:cc:cf:31:8b:f2:9b:62:
65:01:f3:2b:5a:53:99:b6:3e:7b:5f:f7:19:a7:52:
db:cd:3d:af:42:fe:b2:18:32:e1:79:a8:04:b1:7d:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D1:0A:95:19:49:48:74:02:0A:DD:C5:9B:EF:44:0F:0C:2C:95:C9
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:83:b9:1c:35:3d:b2:5f:ef:42:89:88:a0:a2:2e:07:33:
50:9d:bf:3c:dd:4f:f7:aa:6e:1f:53:ec:5d:55:00:ef:7c:58:
09:a7:49:3b:8f:93:8e:f7:81:1d:99:b0:12:ab:ce:22:5a:a8:
53:11:6e:01:c0:3d:59:17:8c:4e:ff:08:bb:49:d9:6b:b7:58:
a3:06:b5:e9:cb:1e:5c:9b:2a:54:2b:bc:1e:4d:ff:2f:71:c3:
07:4e:f1:88:8d:15:50:78:26:4e:d3:af:d9:d5:dd:06:fd:d5:
1e:93:38:81:1e:2e:23:42:94:f2:f1:cb:c5:69:7c:07:07:91:
b3:0f:57:60:4a:69:b3:e1:9c:a4:25:18:3b:99:17:bb:9a:10:
71:37:2b:fd:cd:45:7b:8b:e2:ec:5b:60:4d:a7:55:ad:00:55:
54:cb:da:83:4b:a9:ed:45:70:7a:d0:36:a4:32:81:c7:c9:88:
92:62:88:f9:b7:58:30:83:cd:8d:a8:2d:61:20:cc:7f:3d:14:
99:ba:1e:9c:bf:7e:ec:9c:50:d0:e2:bd:f1:ec:eb:1e:a8:04:
39:22:09:bb:1b:71:1f:5f:3e:0d:53:6d:84:28:a2:fb:77:c8:
45:b3:6b:cb:f6:81:53:2c:19:4d:ff:d5:25:75:8e:17:3d:49:
a7:1c:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:30 2026 by rpki-client