Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: qqbN7kBvRk9x3uYHJ77cT6cmhbZw+zBLi9Eu/eUASwk=
Subject key identifier: 9D:E6:C8:3C:D0:71:05:57:05:88:8A:B8:AD:83:65:ED:3E:2B:1F:61
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01A1404C6A34993AE11E14D12DCE6DF0C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 16:01:52 +0000
Manifest this update: Thu 15 Oct 2026 16:01:52 +0000
Manifest next update: Fri 16 Oct 2026 16:01:52 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: SvsYcbim65qhlkiD6im3BQBjxKPH3t4iEA++24wUSfc=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:6a:34:99:3a:e1:1e:14:d1:2d:ce:6d:f0:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Oct 15 16:01:52 2026 GMT
Not After : Oct 16 16:01:52 2026 GMT
Subject: CN=9de6c83cd071055705888ab8ad8365ed3e2b1f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:22:dd:7f:54:90:08:70:74:21:06:25:49:
57:22:f0:5b:d9:08:aa:28:9c:9f:51:a4:e5:24:f1:
47:13:95:13:49:84:8b:73:61:2d:fc:e6:80:4c:e9:
43:7b:ce:21:22:72:3a:ce:87:70:7b:9e:a4:08:b0:
a0:10:db:43:20:9f:09:56:1a:82:46:44:57:e6:87:
6a:68:eb:19:80:84:68:a0:51:0e:44:ef:f5:3c:a2:
98:3e:01:16:bc:a7:20:4f:d8:3a:65:18:96:e4:dc:
a4:94:4f:59:59:9a:cf:ac:92:66:86:64:c9:41:e7:
6b:fe:ad:be:e9:10:8f:c6:94:23:c1:32:23:3b:1a:
16:db:95:30:10:9b:38:35:e1:34:ae:b7:d2:d8:81:
ad:0d:9b:8a:79:98:86:63:4c:f1:2b:6c:9f:9c:8b:
61:ad:c5:32:fb:b4:4c:23:f4:2b:40:46:4a:67:be:
d7:ee:3f:a5:f6:61:48:a4:80:fd:0d:98:6d:80:f6:
61:f5:66:ad:fe:86:dd:b4:2d:de:9f:9b:8d:ce:06:
16:37:2e:98:91:1b:21:c1:19:c1:e8:db:8e:45:62:
43:29:81:55:62:0d:70:0a:ff:0b:31:d2:5b:28:66:
2a:df:5c:c1:16:09:95:e5:ea:ef:ae:93:fd:a0:f9:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:C8:3C:D0:71:05:57:05:88:8A:B8:AD:83:65:ED:3E:2B:1F:61
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:c8:08:13:4f:69:a9:05:cf:14:0e:a8:c4:0a:ec:eb:39:
7d:39:83:11:1d:9b:08:7c:a3:87:b0:f2:5c:a2:bd:68:80:a0:
00:0a:71:21:77:e1:13:2c:7f:ea:c5:72:aa:e5:b1:f5:65:5a:
ea:11:74:b0:de:e8:1a:2e:89:a5:40:6b:99:a1:72:33:0c:13:
6f:8f:41:5d:42:41:b3:d9:57:c4:ef:c6:4f:8c:97:26:3b:c7:
39:19:5a:2e:90:c6:05:b5:ee:34:92:82:06:1c:9b:69:b0:e3:
81:7e:97:3a:1a:c8:06:d4:9d:c6:e3:1d:a6:64:56:ca:21:bd:
db:c5:71:b0:59:31:55:ba:bd:e0:17:04:9b:63:e8:a9:4d:77:
77:40:4d:02:6f:15:dc:f5:5c:5f:0c:ec:26:04:63:a6:15:24:
a6:47:0a:c9:f8:9d:38:76:f2:1b:48:08:bd:2d:00:88:f4:45:
4c:21:11:68:c6:6f:25:09:44:6a:5d:c0:81:a8:e4:b8:06:b0:
81:d5:4e:11:d3:85:c3:bf:5d:6c:35:c0:74:15:93:44:ee:7e:
51:bb:67:ec:05:64:2f:82:34:61:b1:da:39:df:e5:fe:df:b5:
d9:ee:07:f4:00:c1:9b:2e:c4:93:e6:6d:94:a9:f5:4b:ba:d8:
36:d2:65:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:24 2026 by rpki-client