Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: u3vRWLkeurIqPFfOGjqnq0u54XMwqSv6dFjvr+ZBCN4=
Subject key identifier: A0:57:CC:9E:66:28:B2:93:FB:8E:46:3B:EE:C4:12:D3:4B:2A:18:DE
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01A13F70BCB0F3E5C323CEE4910FCE7F1B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 14C5
Signing time: Thu 15 Oct 2026 12:01:55 +0000
Manifest this update: Thu 15 Oct 2026 12:01:55 +0000
Manifest next update: Fri 16 Oct 2026 12:01:55 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: jlmthtxv52tT5FMRi+v/D1yWqhRr67w6xpk0HzqUeLo=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:bc:b0:f3:e5:c3:23:ce:e4:91:0f:ce:7f:1b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Oct 15 12:01:55 2026 GMT
Not After : Oct 16 12:01:55 2026 GMT
Subject: CN=a057cc9e6628b293fb8e463beec412d34b2a18de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:ff:b6:5b:e0:4e:e5:44:9e:95:86:47:9b:
d4:fa:3b:e6:ed:7d:ad:2b:df:49:39:50:30:ad:be:
d8:a7:4a:b4:08:05:25:c1:ab:0f:0d:27:33:60:67:
9e:d2:c3:78:a1:73:73:62:be:bb:d8:60:bd:6d:76:
21:00:14:49:6b:3f:16:37:e5:20:2f:83:a6:f7:06:
23:4a:ce:9a:4b:93:b1:7f:85:d9:9e:31:68:59:66:
31:ab:39:c0:bd:bf:b0:df:b4:6e:03:5c:0e:16:34:
88:9f:bd:b3:9d:e0:c4:c7:9a:21:20:79:82:78:9d:
c0:ed:56:3d:10:18:ac:6b:b0:2e:3a:5e:2c:21:04:
02:3e:c6:d8:f2:17:86:6a:5f:ea:4d:f0:02:c1:42:
c2:de:e4:15:ff:6c:f9:54:5d:a2:3d:fd:ca:a7:46:
2e:51:c8:78:d7:19:a7:e9:5e:b1:fe:d1:dc:bb:30:
ae:9a:6a:7c:15:b0:ca:b8:ce:fd:4e:a4:7b:88:4f:
20:59:f4:e5:b3:a9:fb:29:12:f3:4e:68:ca:7e:e1:
69:25:ab:dd:bf:db:33:a1:3b:26:ec:6c:38:26:a6:
29:56:8b:bc:69:49:85:ef:48:68:65:c0:82:07:0e:
09:26:84:38:79:cf:13:2c:d1:a5:fb:fb:d0:83:49:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:CC:9E:66:28:B2:93:FB:8E:46:3B:EE:C4:12:D3:4B:2A:18:DE
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c2:d1:64:3d:07:9e:7f:5a:24:ec:8f:d8:e3:ae:0c:25:b7:
6c:2e:99:7f:95:6f:6b:a6:19:ed:c0:56:e0:09:86:b9:ca:98:
6e:51:aa:a1:6c:03:ae:0c:a7:26:67:b4:54:e4:f3:a6:f2:71:
37:b0:55:78:e2:20:01:6c:3c:3d:c5:23:63:f9:ff:5d:84:4c:
64:49:2d:5d:a3:22:20:7c:10:55:9f:62:43:ad:8e:e8:cd:cf:
9a:60:bd:15:55:69:f7:3e:e9:b6:8d:35:7e:95:aa:b7:d8:24:
d4:03:d3:8c:c9:a1:39:82:1d:9a:45:cc:29:3e:ab:52:dc:05:
9a:f2:a1:d7:7b:6d:0d:79:ce:47:27:f5:54:ca:a7:cc:2e:07:
dc:f0:a5:bb:af:fa:28:eb:9d:5d:2f:39:85:85:e6:73:7f:da:
24:6f:08:ec:28:c5:93:82:9c:06:b5:43:0d:8a:db:15:08:ed:
06:37:a6:06:89:e8:eb:30:45:56:97:9d:f8:06:61:db:dc:bb:
a6:80:cc:10:7e:bd:d6:19:0a:94:dd:0c:69:dd:4b:64:ae:c6:
8e:4f:69:47:15:79:94:3c:c9:3d:01:fc:73:74:1c:bb:28:88:
43:c9:64:a1:34:29:5a:2d:a6:b4:49:97:4a:69:98:1c:a0:34:
30:bb:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:36 2026 by rpki-client