Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: 4kyIHLz4Ps/kH6fpqVLWBUy36zdrUOk0ZkULnVXqkcU=
Subject key identifier: DB:D8:3A:F3:DF:83:DD:78:B2:21:49:0F:6B:11:15:EA:D9:B0:4F:5D
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019D992B88495C3ED4A8CF0B28461CF84319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 05A8
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: m3+l69o8DlyGi5TysKIAlRowXynhg1k6iJaTTMNwiAM=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:88:49:5c:3e:d4:a8:cf:0b:28:46:1c:f8:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=dbd83af3df83dd78b221490f6b1115ead9b04f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:2d:18:c2:08:de:e5:09:c0:f9:89:b6:a0:
3b:64:c6:ed:9d:b3:a1:6e:d9:31:f9:2b:30:8d:1a:
78:0e:d1:b1:f6:54:c3:38:80:db:14:cd:52:3d:c8:
b7:65:88:67:a7:ba:92:d5:07:bb:78:0d:9a:29:a0:
36:ab:df:1a:4a:e8:5b:10:b6:91:8c:2c:d9:1c:15:
24:c8:14:7f:9e:b4:f3:58:a5:8f:ed:93:6b:d4:3f:
a6:96:4f:da:d6:2d:31:b4:68:7c:a4:f7:f5:d4:3c:
10:0d:a6:93:08:4c:11:7a:b5:89:73:0f:32:20:f1:
4c:d2:86:5f:10:4d:45:11:fd:98:52:e7:db:63:4a:
af:70:e9:d1:4b:fa:b6:05:8d:9d:f4:12:a8:73:4e:
aa:81:21:0d:1b:a2:a3:ed:f3:84:2e:53:6a:eb:40:
41:0e:a9:29:dc:e4:40:6f:8c:96:c6:0a:07:44:01:
ff:f1:60:64:a0:d4:f8:3c:85:06:19:61:72:fe:00:
bd:23:08:61:83:28:61:af:5f:2a:1d:91:ff:ea:8b:
1e:bf:72:b3:da:ea:7f:d2:cf:2a:34:13:2d:14:3a:
13:9b:59:37:41:b3:0a:de:19:1c:84:52:71:f4:3d:
d6:a1:f5:c5:48:da:e8:43:95:61:fb:96:77:be:e9:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:3A:F3:DF:83:DD:78:B2:21:49:0F:6B:11:15:EA:D9:B0:4F:5D
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:18:31:a7:b3:6a:97:94:fa:2c:0e:cf:d7:c5:8f:2f:c8:
1a:de:d2:9b:9c:a1:c4:a5:d5:50:ee:a2:87:ec:dc:d6:5d:00:
7c:5e:e3:ca:02:26:34:2c:7d:6c:2d:a3:2b:cf:cb:92:08:e8:
46:d4:cb:63:43:51:9d:ba:ee:85:3b:2a:3a:8d:06:e0:21:70:
20:91:c9:3e:b7:58:43:95:f3:6e:6d:44:8d:af:e5:a1:bc:40:
ce:54:37:42:c1:d9:7c:ba:9d:9b:27:b0:9a:2d:cd:98:22:d4:
df:cc:cb:52:c5:0c:5f:6a:66:8b:fb:24:85:8b:19:b4:c0:b0:
4a:15:6a:66:9f:dc:cf:14:b7:6a:80:c9:a4:e0:1f:f9:d7:64:
79:22:f5:77:b2:99:64:99:48:1f:ea:22:ee:00:bb:76:c3:0b:
35:fe:7e:3e:38:5e:4d:c5:da:39:53:f5:c8:38:8d:2f:d2:be:
30:50:87:16:8c:8e:ec:24:69:35:ad:56:0f:e5:e8:be:5e:aa:
02:e7:df:3b:db:e2:f6:fa:91:89:d9:6d:a3:46:cd:ff:40:c4:
d5:64:d7:46:2c:7b:ac:41:e9:cc:87:f7:77:bc:95:db:50:ff:
37:93:cb:f4:6f:95:76:ce:27:81:4f:8d:48:92:7f:56:ef:cd:
38:55:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:23 2026 by rpki-client