Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: A0lkfB33kn4MHunuBcHd51qI4sXVbJN635Www5hUaFs=
Subject key identifier: C6:7E:5E:46:7F:59:BE:A1:7D:83:0B:E9:AB:08:2A:2F:67:FA:38:27
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019CAC0FE35DBA0D7B4E17594469D69784D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: w/jqfHLIm1zoE94Wg8fZzF4Q2IJcFJSLc7/4U57UzDY=)
2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e3:5d:ba:0d:7b:4e:17:59:44:69:d6:97:84:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=c67e5e467f59bea17d830be9ab082a2f67fa3827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:a5:b2:b9:33:47:4a:0a:ed:5c:88:a9:5b:
a8:3c:dd:e1:c1:e6:e8:38:41:6a:5c:39:26:7e:b9:
b8:08:c6:6b:98:8b:d6:b0:27:39:9a:3a:16:2d:29:
83:33:05:0c:98:35:56:c8:99:9a:6d:6b:50:52:1b:
dc:20:15:94:7a:b1:65:8f:ec:9c:fd:61:f1:2a:ed:
d8:fa:7c:4a:84:6e:a3:43:e4:d1:4f:75:f9:7b:db:
e5:f0:a6:74:09:52:64:b0:57:1c:be:31:41:b5:9c:
e9:d0:b5:06:81:ef:25:d3:3a:c3:6a:5e:ab:38:d0:
dd:1f:71:c3:22:b2:37:2f:ca:95:dd:19:5a:98:08:
01:84:4e:3a:79:3e:82:ae:57:be:24:b8:8d:43:13:
f1:b2:7a:30:0b:bf:13:94:9b:af:6a:30:5c:c3:49:
ba:28:39:25:44:c2:94:9c:b3:b8:d3:b4:13:e2:0b:
e7:fc:1b:28:ca:a1:9c:a3:ee:67:d8:ae:95:8e:0c:
8a:1a:8d:5e:9c:be:97:85:f6:0a:4c:9b:9e:dc:e8:
e6:51:7a:b3:e5:4a:f9:82:64:40:24:d1:80:5e:08:
a3:a4:be:4b:59:a1:ad:35:9f:44:b7:ae:9a:80:d7:
2e:c8:0f:68:56:f3:b0:a2:a6:8b:be:1e:7c:5a:5d:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:5E:46:7F:59:BE:A1:7D:83:0B:E9:AB:08:2A:2F:67:FA:38:27
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:90:15:00:9f:8e:fa:ea:14:55:35:9c:73:ac:56:6b:8a:
9f:58:49:6e:60:3f:fc:e6:5a:7b:4d:a1:fc:fd:71:4e:a7:ba:
8c:af:d5:98:86:ca:86:1e:3e:ef:6d:b3:e6:f5:7d:ed:8a:ed:
06:3a:c9:5e:63:09:fe:79:4f:7b:55:70:ae:de:c7:c5:f3:3f:
b6:df:8a:b6:60:7b:53:43:62:0a:d7:c3:fc:b9:b1:76:55:dd:
df:ef:b4:ba:24:e0:77:81:86:6a:02:29:57:50:ea:26:07:e1:
58:23:32:a7:40:70:17:8a:9c:67:55:09:f4:08:f4:11:88:66:
82:d5:4c:cf:3d:95:f6:69:80:61:5e:14:36:1a:9b:8a:5b:98:
95:76:99:88:fe:6e:32:27:94:72:95:bf:ae:c7:96:dd:5b:02:
7f:fa:bf:e7:14:ab:65:0d:d7:04:27:ee:ba:01:d1:55:37:64:
65:10:4f:e2:bb:a0:f5:a2:ad:37:11:21:92:08:47:11:9d:3e:
90:1e:cd:1a:75:c7:e4:f2:57:17:5c:e0:2d:4b:65:22:d4:e1:
f6:22:c4:33:96:a6:30:0e:de:aa:43:5b:b5:86:af:e5:7a:b7:
a5:36:18:95:d5:e7:5c:08:97:d0:f3:e6:b9:f5:ce:a1:46:62:
be:b0:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:35 2026 by rpki-client