Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: eKBurnzj5a6FdZsG0H+rL42nh3NrFF75WlOfNUT1pn8=
Subject key identifier: D5:29:34:56:52:8C:AF:B0:B7:F4:6F:8F:7D:CB:65:E3:EE:53:8A:11
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 01A13E5CD5493DFA2A1C4D012EB6BDD31722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 152D
Signing time: Thu 15 Oct 2026 07:00:33 +0000
Manifest this update: Thu 15 Oct 2026 07:00:33 +0000
Manifest next update: Fri 16 Oct 2026 07:00:33 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: ZsLPJOQhPC2MkqCcmV7DRfbZ/yvViDXsL+xIv48Q7n0=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:d5:49:3d:fa:2a:1c:4d:01:2e:b6:bd:d3:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Oct 15 07:00:33 2026 GMT
Not After : Oct 16 07:00:33 2026 GMT
Subject: CN=d5293456528cafb0b7f46f8f7dcb65e3ee538a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:70:fb:43:1a:1e:63:ec:36:10:a0:74:63:
48:b5:2f:f9:b8:31:0e:d1:69:20:a7:7d:b4:0d:2d:
96:1a:2c:0b:51:9b:e2:2e:e7:4c:66:1f:75:6e:dc:
9c:e3:2e:9b:60:e9:94:ca:11:de:b6:e1:f8:fa:ac:
31:08:a6:dc:fc:3c:aa:97:dd:06:5d:bc:4a:b8:e7:
80:d7:a5:ed:c3:92:c3:c3:7e:8a:46:32:d2:66:c1:
e5:d8:57:a9:22:34:0e:83:82:ea:f8:b2:32:a6:a8:
ea:95:65:79:29:e8:5e:86:04:92:e8:b1:ee:46:9e:
8f:a3:ad:4b:03:89:d3:e9:6f:b2:31:13:94:ba:8b:
49:9f:66:7e:92:5d:ef:9f:77:8a:18:b7:b7:29:ce:
6f:14:c3:f4:ee:47:73:57:62:3c:7a:d3:dd:83:ca:
0a:a7:6e:6d:08:6b:3e:f0:d4:36:e3:aa:56:bd:8d:
15:27:10:dc:cd:39:74:61:2a:f0:f5:5e:f3:09:d1:
f6:62:96:70:d5:b1:eb:96:81:81:ed:c9:b7:64:d0:
4f:e1:90:5e:c2:99:38:bb:88:70:f8:47:f5:3b:10:
49:74:fb:2a:45:b3:31:8a:12:6c:0b:e3:3c:59:80:
ee:d7:71:49:30:a3:f0:79:91:77:73:73:02:31:6d:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:34:56:52:8C:AF:B0:B7:F4:6F:8F:7D:CB:65:E3:EE:53:8A:11
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:10:f6:5f:f8:43:72:b9:68:7b:98:bd:2f:a1:af:0c:0b:
f4:7c:82:d9:54:0f:f6:db:43:1c:8b:62:db:d6:2f:10:af:06:
11:b2:d6:a3:99:7f:26:01:60:96:1f:fd:c2:ae:27:bf:14:e7:
bb:f4:14:08:31:ef:52:18:7b:51:04:6e:76:98:4f:a8:eb:d2:
7a:82:21:08:e3:2d:0b:c7:86:9c:03:83:15:ac:57:42:ce:07:
00:1a:ea:5f:21:28:7f:06:43:32:9c:4c:5c:94:ab:d6:bd:c1:
71:23:69:b4:12:91:69:f1:c5:e4:1b:c9:95:8c:7d:13:c1:e9:
36:a3:a9:c1:04:97:83:88:25:34:fe:7d:bc:a4:9f:32:e2:85:
0e:32:62:5d:ab:e6:c3:91:80:2d:61:ae:e2:cf:8a:d5:f5:4e:
5b:0e:4c:aa:02:f9:2b:c2:c9:d6:37:0f:5b:af:d5:aa:ae:b9:
b4:45:02:65:5b:2a:4e:c3:7e:e6:1a:99:92:28:7a:f0:87:be:
c5:81:40:e3:60:b1:3b:ac:cf:d9:23:69:78:5d:39:15:f9:c3:
25:04:71:fa:cb:d7:f6:aa:76:0d:6d:12:ae:4a:01:bd:c2:cf:
0c:fc:37:93:67:50:6f:1e:a4:cf:46:4a:47:be:a6:3b:2a:4b:
60:e8:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:35 2026 by rpki-client