Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: 0E28EPGoKwwYISr9eWUIZQ7GfrkEJ1cqsrPRbkXDACM=
Subject key identifier: 57:12:B8:89:B8:A9:E7:3B:06:D6:E3:54:BD:18:93:7B:40:F3:4E:77
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019CABA25B6D1F7E4885872186E63E9FE601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 052D
Signing time: Sun 01 Mar 2026 23:01:10 +0000
Manifest this update: Sun 01 Mar 2026 23:01:10 +0000
Manifest next update: Mon 02 Mar 2026 23:01:10 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: 0P9o47BbV16EAYtQh/qCakz/7uv311TLWp8afkmmXbA=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5b:6d:1f:7e:48:85:87:21:86:e6:3e:9f:e6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Mar 1 23:01:10 2026 GMT
Not After : Mar 2 23:01:10 2026 GMT
Subject: CN=5712b889b8a9e73b06d6e354bd18937b40f34e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:40:de:b2:63:a9:b9:a6:64:85:22:e7:59:
1a:95:b0:6f:db:6a:c0:48:4f:18:91:4c:28:22:f8:
c4:f2:5b:bf:c8:c9:7f:4c:92:f7:01:0d:b0:6f:87:
77:65:e7:ef:b9:8a:11:21:04:1c:55:19:43:02:38:
37:16:88:f3:56:98:1b:23:54:85:7b:d2:18:0d:bf:
29:cf:6b:a6:cc:56:fc:78:05:77:fb:a9:ac:9b:24:
ab:7c:e7:97:72:6d:36:8c:4a:48:01:cb:dd:99:3e:
b4:6e:ad:5b:a8:a9:56:12:65:12:b9:aa:4f:62:af:
6e:e0:c7:d8:8f:9c:2b:1a:79:3f:5f:80:18:0d:28:
c7:c6:d0:a4:8b:ce:75:eb:bd:5f:91:a7:91:cf:24:
4d:a4:d5:74:b1:ca:f8:c1:59:43:22:f5:87:f3:a0:
a5:46:4b:7e:22:e2:95:6a:eb:4a:14:7e:13:c7:a4:
65:60:8a:6d:16:d5:8f:96:a1:4d:9c:7b:1f:ec:3f:
55:7b:13:5b:6f:ed:7a:55:2b:b6:45:99:c4:f9:40:
aa:49:4e:e8:43:a6:9e:17:e6:60:ae:62:4c:90:26:
f6:e2:9e:6e:68:f5:84:0f:dd:ef:d0:62:63:3a:4c:
25:3c:56:df:4e:71:42:43:5c:be:2c:1b:62:51:31:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:12:B8:89:B8:A9:E7:3B:06:D6:E3:54:BD:18:93:7B:40:F3:4E:77
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:79:17:48:85:03:27:b7:4f:ae:f0:28:7a:72:b3:e6:d2:69:
ee:99:57:89:8c:5a:f0:60:7b:02:b1:89:10:87:55:20:96:74:
de:ac:c5:49:3a:2f:69:eb:bc:7a:e3:4d:51:73:06:d4:fc:8c:
27:a9:08:4d:5e:48:11:b6:73:e6:7d:ba:c4:6d:7d:9b:1e:6f:
f3:dc:19:b2:ab:71:22:34:4d:bb:81:98:c1:79:b9:78:d7:35:
72:ca:7f:7f:70:1a:70:5b:02:75:64:d6:dc:a2:3b:f0:40:62:
2b:8b:b0:f5:f9:58:02:7e:a7:6f:fd:2c:4f:cc:74:88:d1:26:
b4:16:fc:d9:d0:e1:b3:09:dd:3f:6d:64:76:e2:68:3c:ab:4b:
09:e1:e0:f6:b6:74:98:57:10:07:d4:9c:c8:7f:31:3d:7f:a6:
21:89:b9:e7:f2:0e:1d:73:b6:83:a7:5d:c3:51:30:f7:af:0e:
c2:4f:6e:f2:af:90:6c:dd:24:c2:d3:42:1a:36:41:f2:90:ad:
30:b7:4c:54:55:99:aa:db:2e:3b:4e:dc:e0:27:92:2f:4b:b2:
64:5c:be:a9:09:14:47:ec:81:6e:9a:dd:10:36:1e:fc:62:83:
b8:68:7b:d2:49:ac:bc:79:76:8e:ef:c1:97:7f:42:f8:e1:e8:
f7:d7:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:24 2026 by rpki-client