Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: Loa+UvcaKsnEpAy+yUKYmvpwCmgjfw410yX0bEkswi0=
Subject key identifier: 7E:22:03:14:65:62:39:B8:25:91:AE:F8:E8:71:37:C4:0D:5A:91:1A
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019D9B50C2DDF020CB960ECD96BAEEA98E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 086E
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: zWsq3MJBobQcmLH0mDLYfpp+GdwOKuMdW7EgcakiYCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c2:dd:f0:20:cb:96:0e:cd:96:ba:ee:a9:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=7e220314656239b82591aef8e87137c40d5a911a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:7f:11:d5:9c:1a:6d:cd:37:7c:1d:d8:5a:
ac:63:75:c3:e8:39:12:ef:6a:2d:26:ed:bb:d2:93:
2d:dc:f2:1c:a8:a5:55:01:79:f8:7c:5c:a3:5d:3c:
ca:56:e8:12:f3:3c:44:16:d2:0e:bd:29:83:8f:f5:
08:f4:48:4d:e3:b1:49:50:dc:78:44:2e:4e:06:27:
7c:ea:3c:ad:5f:7e:a7:da:48:3a:88:97:1f:90:e6:
74:76:d7:e3:7a:4f:81:8c:5a:58:ae:a2:64:9c:68:
09:21:df:c6:98:d4:e2:c5:a0:0b:9d:32:2d:38:59:
38:76:7e:eb:60:4c:ea:0f:0a:22:74:fe:f2:7d:a9:
4b:76:b6:9f:20:bb:e9:13:cd:59:8d:b4:73:8b:6c:
24:d1:07:69:ac:0c:83:b9:8e:42:87:fd:1f:ed:94:
ec:56:60:85:36:e1:52:93:3d:02:8e:7e:5d:3c:d6:
66:74:d1:de:9e:ac:11:44:a2:83:90:56:2d:26:02:
43:6a:55:c3:f1:1f:58:7b:dd:56:6b:95:e4:dc:c4:
a4:70:7b:7c:27:21:38:cf:b3:5a:32:7b:46:19:ab:
f8:b8:ca:97:84:73:89:54:a9:8a:06:5a:b2:d9:5e:
86:3a:37:0c:f0:6c:01:6b:5b:71:12:56:b9:92:24:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:03:14:65:62:39:B8:25:91:AE:F8:E8:71:37:C4:0D:5A:91:1A
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:df:88:a1:06:05:c7:06:65:a1:3e:c6:4f:b1:70:12:25:21:
1f:f0:79:22:7d:3b:21:5e:76:fe:39:9a:b7:29:26:6c:d4:8c:
df:c2:e6:fd:37:ed:3e:67:74:cf:c0:da:65:e2:88:89:a0:8e:
8c:9e:6b:2a:dd:7d:ae:d0:f1:89:46:35:25:52:1c:2e:57:47:
16:04:2f:7d:cd:58:5f:51:8d:ac:3a:9a:c4:d0:33:75:0f:9f:
65:37:97:8b:5d:f4:b0:a5:c3:23:c9:e0:9f:91:3f:71:27:0a:
bc:c5:6b:cd:e1:e8:0f:b0:4d:be:06:47:97:10:9f:e2:65:4b:
bf:5f:b0:b2:da:26:d7:02:a2:3f:45:7b:91:9f:6b:47:c5:43:
81:ea:c2:5e:f4:18:d1:6d:c1:79:a2:0b:65:44:a4:cf:04:b8:
da:9e:0f:f9:97:8c:50:5f:df:b9:6f:54:85:fe:4b:fa:e2:70:
cb:cb:63:a4:8d:1c:2d:37:58:9b:d7:4d:3f:e4:52:de:05:60:
ee:78:b9:c8:57:eb:c6:8e:d4:1b:e4:fb:ce:fb:7c:be:c1:95:
eb:4d:78:63:7d:7a:c9:e2:7d:9d:98:5b:a1:d8:9e:0a:88:df:
4c:be:2c:b8:9a:9d:a8:d5:1b:75:e7:8a:ac:2d:e4:5b:66:81:
9a:e0:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:34:24 2026 by rpki-client