
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: VQMqCKCClxa4TWkxeLjChGYa+k1V9h2zkJqJ45WRxP8=
Subject key identifier: 1C:FD:80:DE:E6:48:6A:80:45:7E:F4:8D:0F:47:28:05:9E:0E:B3:66
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 01A040F288DCCAC2A8AB6A4E8F78099AE7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: 03ED
Signing time: Thu 27 Aug 2026 02:00:31 +0000
Manifest this update: Thu 27 Aug 2026 02:00:31 +0000
Manifest next update: Fri 28 Aug 2026 02:00:31 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: ISc/PHouusQlHVS+vHBh/uVRDH1G0aFhq1BULGi7azo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:88:dc:ca:c2:a8:ab:6a:4e:8f:78:09:9a:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Aug 27 02:00:31 2026 GMT
Not After : Aug 28 02:00:31 2026 GMT
Subject: CN=1cfd80dee6486a80457ef48d0f4728059e0eb366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:29:30:13:b1:60:07:29:fc:5a:b8:c7:b1:
12:a8:49:f6:c3:17:e2:44:84:32:fc:58:ad:8c:4b:
94:02:8e:59:7e:07:87:29:37:a6:4a:4a:8b:3d:1a:
16:b1:09:be:cd:d5:00:73:34:6c:45:46:bb:7f:f7:
d4:6b:ff:fe:08:80:55:ba:d4:c9:cc:1d:35:e9:fc:
3b:c3:11:d3:2f:69:78:e3:f0:f2:74:45:e7:d2:77:
78:4e:bb:fb:1f:95:00:75:02:d5:42:f8:4d:08:3e:
49:f3:d4:0c:6f:52:8f:3a:ed:c7:66:e3:ce:59:5d:
0d:b9:01:24:b4:3d:eb:ee:e4:6a:53:28:30:0f:1c:
a4:d2:f5:de:83:c4:cc:fd:f7:3d:1c:6c:19:0d:45:
cf:32:a7:f8:4f:e0:c2:27:e2:1d:92:e9:ec:2e:c7:
6d:48:87:de:23:08:72:58:a2:f5:90:78:1e:46:15:
a4:69:93:af:c4:88:b9:a9:6f:1a:c7:1d:ef:7a:a0:
2d:7a:6c:72:cd:aa:0e:7e:a6:66:85:af:88:e7:d4:
c7:8e:04:66:45:19:4c:c4:79:ad:29:05:df:32:43:
f4:c2:d9:0f:41:02:f8:04:ff:b2:21:38:04:2e:5b:
66:04:a5:09:ef:5d:4c:ba:5d:bc:d4:63:cd:91:34:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:80:DE:E6:48:6A:80:45:7E:F4:8D:0F:47:28:05:9E:0E:B3:66
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:9d:01:2f:56:b7:46:37:18:f1:53:13:44:ec:8b:df:8c:
cf:fc:12:d5:65:8f:08:9d:ae:0b:87:7b:80:ba:a5:ad:97:e8:
5f:91:fa:32:4e:21:76:80:2b:6a:34:d1:2e:74:09:4d:ea:76:
28:c6:93:39:f4:83:a2:d8:52:c5:95:e1:32:b8:dd:b2:0f:f3:
63:94:7f:40:46:63:7f:1e:f7:29:7d:7f:d8:cb:a0:31:6a:3c:
96:26:74:d0:69:27:05:7c:bf:7f:c4:20:74:51:bc:4e:f6:c7:
ac:97:08:5a:83:e5:7f:3c:f8:65:d8:f3:68:05:2c:3a:88:dd:
06:76:7b:8c:85:61:94:5c:8c:f5:b4:37:ff:35:71:11:7d:a7:
d1:a4:27:5c:8a:b7:50:58:2c:37:22:8c:a5:b2:e4:2e:ba:a1:
1c:c1:0f:1a:e2:64:f9:e2:57:a5:a1:80:01:95:21:39:67:9e:
e8:16:23:73:64:64:82:89:8a:35:a8:fb:b1:41:e8:92:68:d8:
a6:b7:6b:3b:ec:a7:2d:5e:98:ae:19:b3:ae:5c:98:3c:2d:3f:
34:57:ed:82:dc:e7:54:92:65:51:fe:9c:2a:94:4d:ae:1f:a7:
3c:35:31:66:92:0c:43:30:39:58:66:6a:e8:57:e8:e1:ad:cc:
12:1a:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:08 2026 by rpki-client