Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: lZMn2G0bUG5d9BX0RGj+d9zEzam/v/MSZ9ijJ7bUUr4=
Subject key identifier: F8:D5:B2:F9:B2:C7:03:4C:F0:7C:25:2F:0B:BA:CB:58:4E:05:F3:53
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01A001A5C82D3C9E6594866D5989AC27823D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1A05
Signing time: Fri 14 Aug 2026 19:00:36 +0000
Manifest this update: Fri 14 Aug 2026 19:00:36 +0000
Manifest next update: Sat 15 Aug 2026 19:00:36 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: Qjv5WOEMRNWsK3g3SA5i2Pny+q9ImQTjww2mjYETwZc=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:c8:2d:3c:9e:65:94:86:6d:59:89:ac:27:82:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Aug 14 19:00:36 2026 GMT
Not After : Aug 15 19:00:36 2026 GMT
Subject: CN=f8d5b2f9b2c7034cf07c252f0bbacb584e05f353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:66:61:e2:10:f9:25:a5:45:67:e1:38:06:
93:8b:50:54:4d:a0:e2:96:3f:72:73:c1:6e:15:c3:
76:9c:65:91:bc:e7:80:f2:2d:1f:d4:09:3c:2f:ed:
94:7c:d7:bf:d3:22:fa:81:eb:ca:b9:45:64:a8:37:
41:5c:d7:8e:88:d1:ce:6d:cb:e1:99:3b:18:c9:08:
74:69:d5:a1:fe:1e:f9:85:33:a1:44:94:07:e9:39:
a6:26:59:76:72:77:71:26:ae:56:f4:57:17:39:0c:
94:e9:8d:54:fc:61:4c:23:3d:14:f4:38:49:12:9b:
17:66:f0:0f:8e:6f:f5:02:e9:47:66:8f:92:f7:c8:
1b:ee:5f:93:2b:29:80:7c:4c:32:21:2d:09:db:21:
1d:fe:5d:95:09:62:85:7b:46:54:f1:cf:59:d0:31:
c6:3b:92:92:5d:6e:f8:58:b2:1f:96:fe:b8:6b:d5:
4c:6a:52:da:02:d2:80:ef:7b:5b:85:e2:58:95:d7:
79:30:43:72:ef:7e:11:c3:95:56:d7:a3:8b:a9:01:
bb:d0:df:11:07:c5:10:c0:da:e2:ce:48:07:78:fd:
5b:28:15:f2:14:67:95:5d:86:81:29:e8:1f:d9:52:
66:87:5d:82:10:22:80:87:06:07:31:e2:e5:9e:bf:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D5:B2:F9:B2:C7:03:4C:F0:7C:25:2F:0B:BA:CB:58:4E:05:F3:53
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:24:ff:f2:51:18:86:aa:7d:61:ba:d4:74:1c:d8:63:85:
01:38:dc:00:7c:23:10:3f:e2:44:c0:b4:be:b6:44:ef:1c:4b:
70:4c:48:ba:65:cd:dd:7d:96:14:ac:fa:a4:62:49:b2:bb:d1:
0f:81:fa:4a:9b:11:02:e4:c8:cc:0d:3b:44:08:5b:01:81:a6:
9d:12:55:24:86:a3:eb:ae:e7:54:df:9d:b7:94:8d:5a:f3:e6:
8c:39:e9:54:f9:6f:38:91:19:2b:3c:70:04:a7:c3:c5:f0:ef:
c8:08:ce:54:55:56:24:99:23:a0:bb:3e:7a:a5:7f:60:e5:35:
7a:71:97:25:cc:0c:08:22:c0:3a:dd:df:78:96:3f:b1:52:7f:
3c:35:fd:f3:8f:49:4f:00:0e:09:c4:fb:90:74:63:61:c2:fa:
43:0b:c7:33:4e:33:8e:46:ca:c3:9c:78:7c:d0:2e:72:0c:77:
47:85:96:38:23:82:47:cb:41:6f:0c:66:2a:28:35:bb:0c:e0:
1a:9a:12:38:bd:40:4d:3a:7b:13:79:7a:47:cf:3e:7c:dc:b5:
e0:20:58:76:89:9c:e5:ec:32:19:17:7f:cf:e7:81:11:4a:7b:
19:8d:a4:7f:cc:bd:fa:61:c9:52:c8:e9:ad:00:5d:5a:c0:7a:
bb:9c:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:02 2026 by rpki-client