Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: ZWgBBISIT7PuukuId5Mh+DXTljVJaTBc14g7QzEcryY=
Subject key identifier: 22:BE:03:5B:56:E4:E4:5C:D9:7F:42:2D:B2:A9:09:FA:06:97:15:67
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 019D99623BA2BC6A8AE27FCE80DC6E6B258E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 03:00:45 +0000
Manifest this update: Fri 17 Apr 2026 03:00:45 +0000
Manifest next update: Sat 18 Apr 2026 03:00:45 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: gGStN6veMZbYYMYPEStWaqLaZqTaZ74TD3AcdSVaWrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:3b:a2:bc:6a:8a:e2:7f:ce:80:dc:6e:6b:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Apr 17 03:00:45 2026 GMT
Not After : Apr 18 03:00:45 2026 GMT
Subject: CN=22be035b56e4e45cd97f422db2a909fa06971567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:a9:4f:74:33:50:59:38:6d:96:92:1d:c9:
29:38:e4:aa:ec:f3:0b:41:fc:e2:da:88:92:95:69:
cf:6b:64:30:91:3d:db:ab:c9:bf:fa:b3:f4:2a:26:
29:27:9d:70:28:91:04:e7:fb:db:57:13:0b:ed:4c:
d1:4f:f9:a8:ae:34:8b:4a:b4:b2:fc:80:e7:0a:f8:
cc:75:9b:ed:4c:9d:32:7a:33:cc:dd:57:3f:94:fc:
1b:c9:dc:d2:69:f1:df:68:e0:f4:ab:c2:5e:8f:c6:
5b:94:a7:d6:5f:9d:d3:1e:14:62:d9:17:5f:ac:8a:
21:d4:1f:4e:f7:2c:a5:d3:c9:8f:1a:dc:22:b4:b9:
67:ab:27:0c:3c:de:9f:cf:08:af:53:3e:7e:dd:0a:
b2:94:4a:64:c8:36:a8:a8:5c:d6:8a:53:ef:37:c0:
74:a7:a7:d9:bc:85:e9:0f:4f:3a:75:cd:a8:94:ba:
2a:5b:a5:b1:59:84:ff:37:30:a0:bd:70:c6:5a:f1:
81:88:df:a7:25:27:2f:a8:36:f6:98:2e:8a:32:07:
a1:e7:70:b0:24:fb:c3:5d:29:37:cf:d7:e6:1a:19:
f9:e7:45:00:ed:14:35:6b:33:88:55:89:07:97:b0:
e0:6e:78:bc:fc:55:44:b5:28:dd:a2:9b:2e:e8:81:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:03:5B:56:E4:E4:5C:D9:7F:42:2D:B2:A9:09:FA:06:97:15:67
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:4e:61:6d:4b:ec:5a:e6:80:43:03:b1:cd:fb:1a:95:02:
d0:48:7d:f4:20:04:51:70:ba:0d:06:5d:6f:01:3f:13:31:fc:
4d:a7:12:c7:12:98:a3:b7:a3:17:e5:30:db:a2:43:8b:10:e0:
c7:64:71:1c:1f:c5:d9:89:4d:4c:4d:9e:1d:57:95:15:3b:ce:
03:2b:34:49:47:1c:44:c0:46:3e:d3:23:77:48:18:61:68:b9:
36:6f:59:5f:14:ab:47:37:b7:17:1d:e2:42:db:dc:35:f6:49:
60:af:18:77:e7:d3:87:0e:13:30:43:01:80:d8:13:f1:be:3f:
45:50:fc:10:dd:1c:43:62:fe:4d:98:e0:bf:17:8a:8b:5f:52:
b8:d5:ad:63:a6:ca:8b:79:17:d8:53:7e:ec:09:5c:6d:7b:85:
9b:ab:57:c3:93:50:d5:c7:a4:8a:a9:ae:f7:fa:bd:a8:34:9f:
c4:cc:87:1e:ef:92:40:0d:8e:2f:21:f6:6e:9c:1b:c9:0f:2d:
8c:2b:3b:f6:a7:08:cd:2d:81:9c:e1:df:eb:c1:51:a7:db:05:
92:3e:7e:30:03:d2:a4:2e:04:6d:db:20:92:46:f0:43:0d:70:
c7:0b:c7:f2:72:36:e8:9b:34:5c:fd:4b:f8:2e:14:e2:92:01:
8c:90:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:16 2026 by rpki-client