Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: lv/YB1Jj4BWcM0/EnamOOds28CfALBP4DsjVfK90tYk=
Subject key identifier: 5D:87:AC:45:4C:1A:CF:1F:B6:DB:35:63:71:DA:89:DD:0F:FA:36:0B
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 01A0852F72218224E41255770BDCB995F7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 1A43
Signing time: Wed 09 Sep 2026 08:01:14 +0000
Manifest this update: Wed 09 Sep 2026 08:01:14 +0000
Manifest next update: Thu 10 Sep 2026 08:01:14 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: lPcQYdDcng35OzIUMDZL9hqQBgrDcW/LfqzHVXNTdlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:2f:72:21:82:24:e4:12:55:77:0b:dc:b9:95:f7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Sep 9 08:01:14 2026 GMT
Not After : Sep 10 08:01:14 2026 GMT
Subject: CN=5d87ac454c1acf1fb6db356371da89dd0ffa360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:b4:de:cb:14:c2:a8:ed:04:fd:3a:39:c6:
7b:dd:3f:de:a1:5d:e3:86:65:6c:80:d2:8f:fe:48:
75:c9:8d:87:19:f9:63:2c:17:54:17:32:01:45:33:
7c:d1:13:70:f7:b3:61:60:2c:f4:76:c8:16:66:5b:
99:56:05:e2:ca:95:36:fd:17:44:0f:66:42:c8:b8:
35:1d:98:b1:2b:9a:c3:b1:0c:c4:70:16:06:63:bb:
ed:88:5b:c8:1a:16:b0:d0:67:7d:24:05:c8:53:da:
87:0f:3b:83:b1:42:a4:bb:c8:bb:4a:74:6d:e7:7c:
57:8c:af:cf:74:b3:3e:60:9a:87:0d:a5:4e:6c:93:
b2:bc:36:ee:d2:66:d9:8c:f0:f2:c2:d1:ad:f7:f8:
bd:ab:b0:66:29:c0:df:bc:88:b6:ba:92:d8:24:ec:
9d:d7:ec:94:7b:cc:d1:92:38:6f:07:15:c0:d1:29:
b7:9c:da:24:5a:c3:e2:a9:21:5b:c4:09:ea:63:56:
c9:fb:af:a2:52:66:7b:73:3e:48:eb:89:0a:1f:4c:
4c:86:4b:2e:c3:32:6b:99:f3:4f:cc:1f:83:b1:84:
4d:f1:f7:3e:a6:da:ab:37:38:cd:79:ac:e9:92:66:
34:66:58:d5:be:07:2e:e8:ee:44:81:7c:37:4a:bb:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:87:AC:45:4C:1A:CF:1F:B6:DB:35:63:71:DA:89:DD:0F:FA:36:0B
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:f2:72:02:60:db:98:3a:81:44:f0:4d:42:d0:fa:99:32:
41:a9:a7:29:59:97:2d:53:ad:74:82:a1:e7:24:7c:eb:46:50:
7b:ff:73:51:af:21:2e:73:9c:30:d4:f3:e5:d9:90:1d:da:97:
13:c5:6f:4f:bc:3d:6e:2a:65:b8:2a:aa:9c:40:5d:70:e3:f9:
80:ae:d2:12:c1:ee:8b:32:a3:96:00:2d:e8:e6:25:67:d9:15:
43:ee:49:8a:7d:23:6d:14:fb:62:7e:c1:ab:a9:c9:92:77:82:
d6:1f:ec:dd:71:af:2a:d1:fa:e8:ea:c7:24:e6:95:e3:49:1c:
5c:82:38:e0:22:22:9f:9c:82:b5:2d:6f:d0:85:a1:25:86:e3:
01:88:2c:5d:dd:7f:1f:7f:88:d0:fe:80:a1:7e:28:da:c7:08:
97:54:7e:35:1d:51:6f:da:7c:27:f2:c0:f4:1a:7f:58:43:11:
54:2b:99:88:df:fa:b3:49:7d:25:36:39:be:2d:60:4f:c6:92:
bd:a1:3c:2b:b1:f8:9f:d2:8d:ee:d3:f6:e2:61:e5:04:ba:a4:
d6:49:b9:71:1d:4d:79:23:60:b2:e9:f0:3e:23:84:31:12:80:
ce:4c:00:e6:02:a8:ef:95:4a:c7:ac:f9:f1:00:46:4f:b6:9e:
71:7e:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:20:33 2026 by rpki-client