Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: G5zDnHthPQijnh3BicPrTuA2UAPVMoGV4m6mfi45Nec=
Subject key identifier: ED:E9:B7:23:7D:4A:61:9F:8C:A4:B2:56:7B:F2:ED:4A:F5:0D:95:2D
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 01A0010159BE8C42E1ED30D132A18E711C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 1690
Signing time: Fri 14 Aug 2026 16:01:00 +0000
Manifest this update: Fri 14 Aug 2026 16:01:00 +0000
Manifest next update: Sat 15 Aug 2026 16:01:00 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: 0lT5vOYyViFkgCeUBRdcCCURZjuYye+TC6ymSvQ6uP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:59:be:8c:42:e1:ed:30:d1:32:a1:8e:71:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Aug 14 16:01:00 2026 GMT
Not After : Aug 15 16:01:00 2026 GMT
Subject: CN=ede9b7237d4a619f8ca4b2567bf2ed4af50d952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:e8:d0:ad:f5:9b:9c:68:39:90:98:a7:87:
aa:02:c9:7f:50:a3:b3:21:24:8f:1e:10:59:0e:4a:
c1:bc:d9:d1:08:df:b9:93:c8:39:bb:c1:5c:60:76:
8c:b5:62:3a:b0:5c:c2:55:34:5a:12:bf:5f:e3:3a:
3c:7b:e3:b4:09:32:f6:28:75:2d:a4:4c:c8:6e:04:
29:f7:36:12:ee:5f:ca:14:af:4f:81:b4:af:b3:94:
80:50:af:f6:24:e4:e4:3e:75:53:e3:b7:2d:26:03:
ab:d6:a0:7b:14:1d:41:86:84:d2:0e:53:ec:cc:af:
b6:77:1e:be:91:57:d1:b6:4c:7e:f1:d5:d7:bd:05:
af:bb:81:6d:a1:07:8b:3d:54:8f:b6:20:d5:f4:69:
74:68:30:5b:51:3f:dc:bc:8a:63:c6:66:fc:54:e8:
4f:a7:d6:c5:9e:15:c8:18:cb:4b:d3:c7:dc:6a:44:
2c:a5:59:ac:47:20:1d:69:72:06:9f:9a:af:c2:d8:
0d:b2:de:eb:94:11:9f:17:03:ac:47:3d:f7:08:33:
fd:ed:9a:7a:12:be:53:8e:23:d7:55:6f:fe:e4:31:
39:2d:1d:5e:24:06:9f:06:f2:53:15:8c:a1:9f:7c:
1b:29:6a:50:10:99:0c:d4:1a:ad:cc:70:36:9d:55:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:B7:23:7D:4A:61:9F:8C:A4:B2:56:7B:F2:ED:4A:F5:0D:95:2D
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:15:28:7d:4c:07:b6:72:c8:fb:2e:6b:a3:4f:d7:cd:43:05:
e3:65:29:1f:9c:6f:6b:65:da:f4:b0:1b:fd:cc:09:9e:a5:31:
de:43:f4:c7:ec:21:51:d5:df:7a:79:ed:2e:ff:d8:0a:f7:ec:
3e:45:54:14:8a:e0:8e:1d:ab:d6:2b:8e:c5:cd:ce:b4:4c:8a:
6b:ce:df:6c:44:27:08:a0:3b:af:a6:b7:7b:98:4f:e9:9b:d2:
dc:58:bd:1d:2b:71:1c:60:46:b8:04:6b:a0:b5:83:a1:25:14:
87:f5:2b:ad:1a:b0:88:ee:20:5f:36:c6:5b:de:41:87:b8:8c:
80:34:fd:5f:66:09:4c:16:eb:0f:89:51:51:68:3a:4c:15:bd:
1b:42:fa:ef:bc:4d:ff:fc:f6:ce:1f:3e:b6:77:34:30:ed:23:
1f:e6:11:be:ad:69:45:51:63:ce:58:70:42:67:d1:94:e5:d2:
1e:d5:86:a5:58:1e:68:f3:16:e6:e3:d8:e6:26:4e:4c:d6:ee:
a6:8e:01:98:5b:a7:f9:74:79:3e:f2:ac:23:9a:3c:5a:8e:1c:
53:ba:8d:1f:26:0b:92:85:39:c4:4a:97:a8:49:71:eb:54:20:
0f:08:01:48:5c:11:32:5c:34:ba:d8:a0:97:29:c6:d2:9f:c1:
27:ae:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:32 2026 by rpki-client