Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: N7yatU4d8sAwoAfkQ9wGerUs0mlmnEZroEwnHWmb924=
Subject key identifier: 92:A2:74:2A:53:D4:E7:7C:8A:A3:B2:35:E2:79:A7:76:63:E2:9A:4F
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01A13F025372B423B365A0280269DA90E248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:19 +0000
Manifest this update: Thu 15 Oct 2026 10:01:19 +0000
Manifest next update: Fri 16 Oct 2026 10:01:19 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: Q6pRN5AECNJIG/8cD2eDmQb7hWZKIQSAYbogu+GzJ0Y=)
2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:53:72:b4:23:b3:65:a0:28:02:69:da:90:e2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Oct 15 10:01:19 2026 GMT
Not After : Oct 16 10:01:19 2026 GMT
Subject: CN=92a2742a53d4e77c8aa3b235e279a77663e29a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:40:b7:c7:52:1d:7e:bf:8c:93:21:c8:ac:
cc:fe:6f:0d:e2:da:e5:74:54:05:03:af:16:8a:3d:
25:0b:06:71:9b:66:85:e7:b3:84:8b:67:7b:4e:23:
e7:e7:4d:e7:69:ff:18:89:c0:53:5e:f5:e9:fc:e6:
fb:cc:ad:8b:81:ab:a2:10:85:55:67:6b:41:bf:44:
56:9a:27:bd:41:11:92:09:70:0d:1f:6f:3b:90:70:
9d:97:d5:77:8e:ad:66:5d:a4:7f:d7:48:e2:0e:f2:
41:96:f0:23:1c:d9:de:5a:49:cd:d2:8a:6e:2e:1a:
f0:da:e1:1c:32:3f:2f:c9:82:cc:72:29:a3:1c:7b:
dd:84:a1:96:f1:f0:fa:b3:fa:14:a2:a3:0c:6d:7e:
53:cf:1c:0e:f5:5f:09:a2:d5:77:b4:d3:8b:21:aa:
57:3c:e8:e3:4d:a2:45:bf:d1:32:b6:22:9c:75:b4:
5d:f5:8c:21:7e:84:f7:b4:c3:e3:02:c9:90:1d:e0:
63:52:99:78:8e:83:6b:3a:60:7a:4f:ea:b8:17:a6:
5a:81:2b:81:d9:24:25:42:16:0a:04:f9:89:d3:07:
9a:ae:10:eb:e0:3c:42:73:39:6d:f6:09:5b:a3:5d:
1b:5e:59:40:08:81:07:39:c8:01:6a:09:34:ba:bd:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:74:2A:53:D4:E7:7C:8A:A3:B2:35:E2:79:A7:76:63:E2:9A:4F
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:63:56:c3:52:d4:37:e5:d7:18:3a:b7:d3:84:3d:c6:fb:
cc:32:27:81:bc:0f:72:8b:41:5f:bd:94:7b:75:12:a4:28:3a:
f1:75:e5:df:a0:89:2e:5f:7d:25:ef:f0:9c:d8:3d:5e:bc:ce:
50:0c:d4:9d:7a:c0:71:64:8c:c2:92:09:b8:22:85:e2:c9:cf:
53:ae:ef:66:00:2c:e8:a2:2f:98:52:fd:4d:57:ab:95:57:9a:
a6:b1:3b:c0:23:fe:f1:95:a0:a2:bc:9f:c5:9b:b7:5c:49:0c:
4b:13:b3:70:2c:9c:cc:02:28:e0:32:14:5c:db:ce:8f:2a:71:
e8:5c:b9:e8:b9:49:e1:39:d6:13:85:58:c4:a9:a5:53:f7:42:
22:b8:cd:15:e4:19:10:80:fc:ae:bc:53:97:23:85:d6:98:95:
52:2c:c9:d1:63:11:25:25:51:98:93:9c:3b:eb:73:52:a2:2d:
cd:27:55:59:ca:11:c8:c0:97:a1:09:cc:36:d7:68:9a:ee:93:
f7:4b:be:10:23:4c:23:d7:26:1c:ca:2f:09:13:c8:e8:09:51:
25:75:9f:1f:4e:10:34:27:40:5c:95:d0:ad:ca:ed:b3:c0:55:
13:7e:ab:31:90:ad:fb:62:97:84:a5:17:f5:ef:9a:e9:51:63:
b8:25:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:52 2026 by rpki-client