Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
File: 0aVkCYrHZdC-2EkYgJFvYba48Y0.mft (raw, json)
Hash identifier: CINGql3/kbxPWBh/93Fm6puyH1kyOhRV5gix5TaZBGc=
Subject key identifier: 5A:AE:9E:4F:2B:C0:28:C8:72:D4:90:11:21:74:9A:88:BE:26:F1:BB
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 01A03FDFDE526F5E2C18515B4D61B5EC4E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
Manifest number: 0200
Signing time: Wed 26 Aug 2026 21:00:30 +0000
Manifest this update: Wed 26 Aug 2026 21:00:30 +0000
Manifest next update: Thu 27 Aug 2026 21:00:30 +0000
Files and hashes: 1: 0aVkCYrHZdC-2EkYgJFvYba48Y0.crl (hash: JQ0iLksWKVz4LPhI/YgnHPLktqqOrQVhviRy6ZcATrs=)
2: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (hash: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:de:52:6f:5e:2c:18:51:5b:4d:61:b5:ec:4e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: Aug 26 21:00:30 2026 GMT
Not After : Aug 27 21:00:30 2026 GMT
Subject: CN=5aae9e4f2bc028c872d4901121749a88be26f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:6a:64:e9:15:6e:2c:a7:8b:ae:c0:a6:86:
ad:05:52:fa:7b:44:4f:0b:d8:10:4c:b2:3a:4f:0f:
c2:be:c8:33:0a:d5:2f:9e:4e:71:d2:56:5a:d2:ab:
24:dd:e8:a4:15:4e:90:1f:77:f7:19:86:51:f5:63:
5e:a7:2a:49:52:e9:56:88:d0:f7:11:e7:06:86:ae:
34:d4:44:9b:17:70:3a:d0:2d:10:71:bf:70:a1:8a:
7e:61:9e:7a:e6:34:c3:19:fe:a1:f7:92:f2:a6:84:
2e:ec:b5:2f:ca:7e:49:bf:a0:9d:de:be:f2:77:e9:
ca:04:3a:3f:74:d3:b3:18:f2:8c:75:be:c4:9b:11:
49:6d:48:fb:8a:79:e3:8d:12:87:a9:99:dd:c8:71:
c2:fd:9a:ec:32:a9:80:2e:d7:57:10:f5:3b:0c:13:
30:1f:f3:1d:c9:56:af:67:2e:1e:59:12:e0:de:d5:
52:84:a4:d8:af:60:b2:38:62:bf:45:c8:0c:cf:79:
a6:c3:00:b9:eb:ca:fb:86:cc:de:19:2c:81:92:f5:
96:e5:77:e6:33:ba:d3:c6:ee:52:0f:d5:22:65:dd:
e8:be:eb:15:e7:4d:e2:00:10:d6:c3:70:38:8c:30:
8b:4c:6b:05:7d:0a:31:ed:cf:96:1f:3e:49:e7:e3:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AE:9E:4F:2B:C0:28:C8:72:D4:90:11:21:74:9A:88:BE:26:F1:BB
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f5:e2:81:ef:fa:ee:6a:95:40:fd:31:c5:f5:c2:55:b7:eb:
fd:65:23:68:8f:66:31:a7:71:06:fd:bd:c6:b8:ef:c2:e3:4e:
90:7d:20:17:30:bc:34:d6:c4:81:c5:dd:28:bb:25:dd:b4:77:
c6:e7:4d:7a:49:a2:df:8a:77:31:14:d8:30:a4:ab:42:4c:8a:
73:ad:7d:e1:c8:18:25:30:9a:e1:c9:0b:f3:f3:1e:09:5d:f8:
77:be:b3:8e:ec:7d:1e:79:4b:a3:a4:61:7a:0d:82:d8:bd:bd:
1f:4b:df:a7:4a:aa:df:70:c1:bc:2e:b0:34:08:c8:7f:2b:70:
08:84:42:61:a4:f7:ce:c2:53:74:7a:2c:51:3d:59:46:02:88:
93:ef:14:1b:5a:02:da:14:0e:73:ec:5d:72:73:08:f9:9f:97:
66:94:c1:24:c1:ef:08:40:59:25:10:f3:36:9e:b9:91:ff:a8:
3a:3c:d7:af:59:84:43:5d:fa:21:2d:7b:a9:df:e5:1f:e1:f7:
0c:f0:43:df:c7:47:f8:67:19:18:a0:19:bf:f5:19:95:ab:bd:
a6:d0:bd:6f:8b:f7:fb:53:88:84:8f:15:2e:6d:53:a3:6a:57:
be:66:bb:30:55:fb:f9:db:ea:94:4f:05:de:ec:c4:06:cb:30:
28:9f:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:53 2026 by rpki-client