Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: hYn3PQDkx6YutJ+HwkVr/14/Z/O2R1v77AFSD6a4+38=
Subject key identifier: 94:61:E3:FC:26:57:69:EE:94:F2:E4:EE:83:DC:2E:4B:B1:A1:12:9A
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 01A0CC34D2BF09DA08EE7B25C3D737B9C1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 0A15
Signing time: Wed 23 Sep 2026 03:00:08 +0000
Manifest this update: Wed 23 Sep 2026 03:00:08 +0000
Manifest next update: Thu 24 Sep 2026 03:00:08 +0000
Files and hashes: 1: 6ay0wHDiAgZDJPmL-UcgJsFPARM.roa (hash: pRBfANPJG+/QAyrSHAeenbhDDnLtn2aB52e6eqKhKNI=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: 7bfvG1hVicXfZSG2tPP1fSgBb7puFqilPaIlOvG+eJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:d2:bf:09:da:08:ee:7b:25:c3:d7:37:b9:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Sep 23 03:00:08 2026 GMT
Not After : Sep 24 03:00:08 2026 GMT
Subject: CN=9461e3fc265769ee94f2e4ee83dc2e4bb1a1129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:12:51:d6:82:56:2c:57:3c:e5:34:09:35:
12:44:1c:6a:7c:fe:5d:51:34:60:02:07:f4:d9:eb:
61:c4:65:05:9a:f4:bd:f0:88:cd:cb:b6:27:42:2c:
13:ce:56:34:55:c6:7d:bd:55:55:5b:b1:d6:1c:0a:
78:81:02:eb:b8:62:64:33:00:6f:ef:d5:58:87:29:
d0:62:24:fa:49:7a:31:7a:5c:c8:15:4f:d5:64:26:
2f:ec:ae:e5:95:ae:21:52:a1:c4:2b:69:59:ff:47:
c4:8f:09:01:7d:8c:03:8e:3d:51:3d:ae:e2:66:a5:
33:4b:57:03:09:97:52:d6:b8:82:e4:8b:eb:81:3b:
91:f9:68:d6:23:13:23:58:6f:d0:50:2b:af:3a:23:
7a:44:74:9c:17:8a:19:9d:c7:8b:04:e8:64:8c:a9:
b1:de:17:48:78:8e:b6:33:a3:c8:e8:5c:6d:f0:be:
76:56:65:d9:29:38:36:ab:bf:e9:a3:5c:94:07:1e:
ef:f2:73:f8:66:22:52:91:29:ad:66:d5:06:c3:9c:
c9:a3:56:c5:19:77:f2:54:07:63:5a:5d:b1:d0:69:
37:62:d6:eb:bf:70:e5:7a:d5:b6:13:3e:fa:d1:4e:
29:b7:cb:22:fc:e8:56:d1:83:20:5a:e4:c1:5e:8b:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:E3:FC:26:57:69:EE:94:F2:E4:EE:83:DC:2E:4B:B1:A1:12:9A
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:05:ec:e6:e7:06:f4:86:26:42:f9:71:04:28:13:b4:9d:8e:
2c:e0:da:2d:19:a6:7f:a4:b7:60:b2:ee:b0:70:10:61:87:45:
39:ab:3b:6c:0a:97:4b:bd:e0:63:f4:f5:d1:6a:b9:65:bc:1f:
7c:b4:85:38:ba:d8:2d:31:a5:0b:7d:26:71:77:0d:1c:23:ab:
15:a6:e6:b0:42:46:8d:9f:99:cd:b9:06:12:f5:09:53:3b:d1:
ef:a2:d8:e5:bc:44:f9:6a:ee:41:c4:4a:2a:4f:84:98:d1:6f:
5e:5d:77:89:15:cf:ef:2f:05:f8:e0:85:3a:80:26:2a:4e:e4:
fe:21:98:f4:31:08:21:4d:2d:e9:1c:fe:08:fb:7b:40:f4:7a:
f7:6a:46:5d:7e:72:9f:aa:b4:5b:ad:55:d1:b3:b1:58:9d:c8:
af:22:b5:46:9b:ba:49:18:77:cd:a0:8b:48:9f:b3:f1:1b:fe:
c2:3e:74:43:57:9b:c8:e8:47:61:7e:4d:a6:69:f1:b2:a0:84:
76:85:9b:b1:b4:10:cc:51:9e:71:ac:0f:be:63:b2:42:c8:d5:
dd:62:86:dd:9c:f1:81:f4:be:5b:46:5d:97:ea:9b:3d:83:90:
fe:15:80:52:b2:08:81:02:51:d0:ca:36:5a:27:3d:66:91:b6:
de:1a:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:53 2026 by rpki-client