Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: YekprkG3SVlV4LwFRnBRMLOL4Dl5ueNhCB1zmMf1RCA=
Subject key identifier: A7:28:3F:A1:E9:99:1B:1F:9B:A6:86:1C:B4:7B:6D:C2:EE:4E:85:F4
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01A0024A8DAAAE513423DBD21891C56B59CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 22:00:35 +0000
Manifest this update: Fri 14 Aug 2026 22:00:35 +0000
Manifest next update: Sat 15 Aug 2026 22:00:35 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: 2PAJCGdu9oO55lw9UD49JGGQkR+ZpcGl7lh3he7ouBQ=)
2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:8d:aa:ae:51:34:23:db:d2:18:91:c5:6b:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Aug 14 22:00:35 2026 GMT
Not After : Aug 15 22:00:35 2026 GMT
Subject: CN=a7283fa1e9991b1f9ba6861cb47b6dc2ee4e85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:a8:ba:7d:1a:df:aa:9b:6d:1e:c9:24:62:
1b:aa:08:3f:49:54:fb:3e:78:30:8c:18:50:7f:80:
38:13:37:30:b1:93:cc:c0:4c:97:78:dd:89:e1:81:
df:38:44:1f:48:30:72:3c:93:6f:60:3c:9c:01:04:
f5:3b:f7:08:66:66:64:58:15:58:22:82:54:e7:59:
9c:08:5e:f7:c8:c0:7b:2f:da:70:9c:79:e5:bf:45:
43:6f:f7:6d:01:4e:5d:e7:59:99:0f:bd:8b:63:7e:
6d:62:2d:1a:5a:b3:7b:a7:e6:27:9d:bb:33:8f:93:
e3:cb:71:f5:78:76:2c:f6:74:a9:08:f4:d9:95:dd:
04:db:eb:af:b5:06:33:a4:2a:db:1f:ac:40:fa:24:
75:c4:72:99:6c:12:a8:84:37:d2:d6:a0:5f:10:b5:
30:ce:81:1b:af:34:c1:b2:10:0a:e9:b4:9b:2f:00:
6c:d2:cc:0d:5b:c0:71:92:d1:b1:54:fb:15:19:3d:
d9:c7:76:45:e7:dc:d6:d5:4b:5f:ab:69:5e:e2:73:
62:cd:3b:8c:cb:f4:3b:02:92:c9:5a:df:ab:63:29:
d0:fb:6d:6d:50:93:17:c2:f2:0c:ca:da:0a:38:78:
74:9d:e1:dc:9b:8f:c9:28:2c:cd:f6:cd:d5:91:67:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:3F:A1:E9:99:1B:1F:9B:A6:86:1C:B4:7B:6D:C2:EE:4E:85:F4
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:18:ef:78:aa:6c:43:01:bd:d6:a5:a1:bb:21:ae:48:dd:a7:
56:e9:b5:28:7b:3a:e8:6e:63:e5:5b:3e:38:0f:1f:f7:66:97:
8e:e3:8d:bc:ed:0d:5d:78:37:81:dc:3a:46:30:fa:65:e8:0a:
99:03:05:bd:03:42:3d:47:2b:ee:69:cc:1f:ed:e6:79:94:8f:
fb:ce:df:a5:10:82:f3:52:bc:4f:2c:b6:87:99:fe:06:b5:50:
79:54:8d:db:8e:17:d2:73:02:66:84:03:6c:48:6c:7d:be:02:
3e:7a:a8:75:04:da:62:6f:21:31:cc:dd:f7:54:b3:42:9a:57:
96:1c:1e:34:ea:54:7d:40:ae:65:f3:7a:e4:d0:bc:6a:c2:43:
c5:02:f1:6b:be:2b:8a:2b:45:48:b2:83:02:5d:ab:3b:65:ae:
b7:d5:83:50:3b:8e:a1:1b:d2:89:50:48:6a:45:75:35:17:f2:
6c:19:e3:53:d5:ec:98:aa:1d:da:b1:45:71:29:79:3a:e9:c9:
b0:53:67:0a:f0:41:fb:65:e2:91:c9:0d:a2:46:8d:16:b8:b5:
3b:49:37:6e:6f:cb:c6:fb:08:4d:4f:39:92:47:aa:4e:ba:a0:
34:fa:e0:9e:da:9d:50:c8:56:05:67:34:af:66:14:e0:34:cd:
be:17:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:58 2026 by rpki-client