Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: UNjIPrRn2QM86eCz9FENJ2tRJZP5aPaNA+MItnVoC3w=
Subject key identifier: 75:FE:A2:94:90:F9:CA:F6:3D:7D:53:88:F2:97:8A:1A:55:8A:0A:41
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01A1822BCC8633BF4F8A56136BB9BFCB4E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0BA6
Signing time: Wed 28 Oct 2026 11:01:10 +0000
Manifest this update: Wed 28 Oct 2026 11:01:10 +0000
Manifest next update: Thu 29 Oct 2026 11:01:10 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: 3C0CpJGVT2brX+dchABygHA0nC/duhV6BOgKemAmex0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:cc:86:33:bf:4f:8a:56:13:6b:b9:bf:cb:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Oct 28 11:01:10 2026 GMT
Not After : Oct 29 11:01:10 2026 GMT
Subject: CN=75fea29490f9caf63d7d5388f2978a1a558a0a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:bf:d7:a0:0c:9e:71:9c:e4:6f:59:03:2e:
11:a1:d5:30:e3:34:82:c3:d9:d5:13:d7:c1:9d:aa:
21:4e:ae:20:5b:31:6b:26:7e:06:f4:6e:90:6a:9b:
6a:47:3e:52:45:6c:a6:53:0a:74:af:05:08:1f:6f:
73:f0:97:31:10:c9:67:ab:7c:ec:8a:3b:01:e7:4a:
a2:1a:ae:62:8a:73:e3:42:c0:0e:5b:eb:45:6c:e6:
54:e7:62:7b:dd:a6:67:06:f7:f2:8a:6e:51:e9:99:
74:da:12:2a:46:8d:58:74:a9:bb:e6:82:07:40:08:
81:b9:d3:e0:1e:d8:fa:65:2a:b7:fa:18:ed:7d:1f:
a4:d5:4f:a0:c6:68:2e:cd:56:05:6b:21:fe:24:5e:
2f:3f:89:d6:27:cf:45:28:3b:55:0c:c9:66:bb:de:
70:9a:16:f9:2e:62:3e:5a:4b:2c:ef:82:c9:1c:0c:
17:f9:a9:cb:0a:b1:d1:bf:e8:03:2e:0b:ce:0f:aa:
46:0b:d8:d0:4a:a1:59:35:b9:5c:10:0a:f2:1a:08:
39:47:bb:fd:ff:f6:ee:5d:7c:89:de:2d:d1:0c:a6:
3d:ed:35:ad:70:ed:f7:af:19:30:b8:78:b0:36:07:
c8:6b:28:ef:1a:e0:5a:45:f1:04:63:c1:d9:81:07:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:A2:94:90:F9:CA:F6:3D:7D:53:88:F2:97:8A:1A:55:8A:0A:41
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:06:48:3f:e1:d0:cf:83:4e:22:7c:fc:b0:7a:49:14:56:
25:60:82:ab:7b:27:83:7e:ba:c6:2b:76:85:cb:32:3c:67:17:
ef:1b:df:cd:cb:41:10:62:ef:f5:76:7d:54:60:86:17:d6:05:
a2:6d:73:6b:2c:16:17:e6:e8:37:f8:39:15:e9:42:ff:0b:10:
98:25:6b:c9:23:e1:2b:76:77:39:4e:b1:89:52:5e:fd:97:7e:
53:51:27:f5:22:8d:d3:c2:f8:eb:c3:f3:b3:82:bd:db:c5:06:
38:81:e7:6a:f4:f9:76:e7:16:9f:78:38:f1:8d:c9:03:46:4d:
d1:2f:b9:19:5e:75:1c:cd:d3:4f:f3:b1:85:05:cd:8c:c8:40:
8a:1a:03:b2:30:c6:48:dc:e0:6b:02:8f:99:0f:05:3e:95:b8:
e1:19:74:3a:89:30:ae:b5:a3:38:e3:1f:da:05:83:52:5f:49:
ee:11:a7:1d:ed:a9:81:17:bc:8b:b5:6f:5f:5f:14:9f:95:d9:
2a:0a:ca:89:14:b0:9d:29:b4:90:bd:e2:44:5a:ed:96:ea:60:
07:b3:5f:1d:c6:50:19:94:0b:57:6c:b8:fb:e2:5c:cd:ed:1e:
ec:7e:9e:38:05:b8:f6:d8:69:80:16:88:36:32:e4:91:66:32:
2f:c0:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:31:55 2026 by rpki-client