Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File: A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier: 2nAY1kE2tyQC+BgUg5Vmteqh+oZQ+bxLNLAVHf+bFnY=
Subject key identifier: A8:4B:E0:FE:1E:50:FE:5B:1D:20:FB:50:F9:60:33:97:50:C0:F4:52
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer: /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial: 01A0ECD3B74DCCB7E0801315C5F552528691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 11:01:33 +0000
Manifest this update: Tue 29 Sep 2026 11:01:33 +0000
Manifest next update: Wed 30 Sep 2026 11:01:33 +0000
Files and hashes: 1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: Mf/xr3eBaTUoEh8Th8Tyl8PJAZDIZRR0icUsj59u0L4=)
2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:b7:4d:cc:b7:e0:80:13:15:c5:f5:52:52:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Validity
Not Before: Sep 29 11:01:33 2026 GMT
Not After : Sep 30 11:01:33 2026 GMT
Subject: CN=a84be0fe1e50fe5b1d20fb50f960339750c0f452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:97:c0:ad:70:07:5d:dd:7e:a6:59:0d:e2:
1f:b9:d6:4e:68:f9:ea:c5:f8:a5:29:66:5d:b9:25:
3d:4f:f3:4a:be:ef:27:37:95:fa:c7:1b:be:c9:b6:
e9:1b:3b:8e:2d:d9:ff:1b:84:7d:1c:c0:de:ad:a4:
19:00:35:db:92:53:55:21:1f:f5:55:18:e0:b2:6c:
96:06:85:ed:71:e9:38:a1:f4:ed:20:01:e0:a3:38:
a5:bb:67:26:02:fc:f5:40:ab:e8:54:f6:47:bc:82:
77:e2:33:41:25:58:e1:2c:13:32:16:2d:2d:e7:c1:
e6:d7:cc:31:50:92:17:4a:35:8b:73:c2:ea:71:48:
12:3d:32:9f:85:d4:fa:41:df:c6:fc:14:6d:38:f8:
93:7e:9a:a9:73:98:0c:eb:fb:c0:f9:c5:56:f4:86:
12:4f:a8:01:57:ca:34:47:cf:3a:24:ce:b2:0a:5e:
42:93:ae:52:dd:78:da:14:98:15:86:cc:e8:6f:e0:
cf:3c:bc:ed:7a:04:1d:5d:e0:23:6b:45:dc:19:b3:
18:2d:a9:64:6d:59:a5:6b:60:60:7e:9b:d0:b4:63:
ac:3f:38:37:bc:8e:b5:a4:14:a9:34:d4:7c:4d:39:
3c:79:96:b8:ca:ca:ed:d5:05:84:7c:98:49:85:0c:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:E0:FE:1E:50:FE:5B:1D:20:FB:50:F9:60:33:97:50:C0:F4:52
X509v3 Authority Key Identifier:
keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8e:b3:88:9c:42:ad:49:ad:d0:a4:98:e2:e1:7a:7f:a7:0c:
7b:7d:3d:ad:80:89:02:88:71:2c:de:fd:0e:24:c2:4b:9d:86:
a3:cd:09:ec:be:9b:ef:f5:b4:33:52:d5:5f:b9:6d:44:c9:9d:
74:04:d1:6a:34:5f:0a:d7:c2:87:92:ed:fa:4e:8f:3d:69:db:
90:13:0e:d3:c7:2e:45:b8:3e:d5:7c:53:46:ef:42:0a:a8:4b:
80:fb:ed:c6:fc:fe:cd:d4:21:cd:93:d1:88:8b:76:08:ec:7b:
05:84:88:d2:dc:55:a6:f1:6f:3c:9c:f9:10:a3:d3:b9:8a:51:
55:9d:35:da:73:51:2d:86:a2:12:20:32:69:d2:e7:d1:e0:3f:
0a:96:76:40:02:09:83:81:f1:58:92:70:a3:ae:c1:f8:97:f1:
90:a2:4b:93:a7:f5:8e:2e:40:83:c1:ef:00:dc:ef:4f:23:cb:
c1:e4:8a:e9:66:79:e5:37:eb:e5:ea:e9:49:23:57:dc:9a:9e:
98:c4:27:b7:96:cf:5e:12:2c:24:cb:8b:37:6d:51:a5:37:47:
52:f0:3f:a2:d8:d5:ed:e3:40:e1:cd:72:86:5b:0f:08:ba:8b:
f6:74:82:9d:66:8f:0e:b1:32:32:68:fe:aa:d2:f5:fa:d8:7e:
4b:5e:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:45:13 2026 by rpki-client