Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
File: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft (raw, json)
Hash identifier: UQc33Abn9wFLEpD0r8OIOfw2acoL0yBtcF6D8HKftNQ=
Subject key identifier: 33:2D:AB:67:F0:D4:2A:86:C6:DA:35:AB:0A:C2:68:51:22:6E:39:C7
Authority key identifier: D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
Certificate issuer: /CN=d316b921907d8845a50c71210ea3940810f77418
Certificate serial: 01A0412AE3B162E8F7A7B3195E839694D875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:04 +0000
Manifest this update: Thu 27 Aug 2026 03:02:04 +0000
Manifest next update: Fri 28 Aug 2026 03:02:04 +0000
Files and hashes: 1: 06qsiTs00oCJ2kROd3qD36mUxjE.roa (hash: z4BUL/0kp3HzAZA+43CMRJbHV1qXo2AEN+PYpjUwUcU=)
2: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl (hash: eJaSjQEMJnVEBnXFONwsdMa/8ryzSCPK9vsCV5/Iheg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:e3:b1:62:e8:f7:a7:b3:19:5e:83:96:94:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d316b921907d8845a50c71210ea3940810f77418
Validity
Not Before: Aug 27 03:02:04 2026 GMT
Not After : Aug 28 03:02:04 2026 GMT
Subject: CN=332dab67f0d42a86c6da35ab0ac26851226e39c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:84:cd:a2:46:0b:57:fb:5a:58:6c:91:42:
2c:dc:7c:55:73:12:7a:d2:25:7d:e5:0d:f8:3c:01:
ab:20:57:79:96:ad:7c:48:1d:2a:cf:87:54:60:eb:
b1:d5:96:3e:fb:61:90:60:9a:5f:54:b0:2c:c9:a8:
d3:39:2b:5d:7b:cf:e7:d5:a8:af:f2:c8:ec:c7:3a:
e7:a3:84:a5:7b:98:6d:01:1d:1e:ac:8a:30:7f:d4:
bd:96:f1:10:c0:e0:82:18:15:36:f5:b0:93:2c:c0:
13:ae:c9:b2:38:44:e8:88:75:a0:8f:b5:a3:73:55:
b0:eb:c5:80:91:34:9c:70:24:45:19:b6:af:9e:47:
90:94:75:a3:fe:c3:78:34:d7:19:2f:7d:1e:bf:3e:
5f:2e:a8:bd:e7:c1:8b:fc:f3:ac:9b:eb:af:26:72:
7c:fb:48:83:b9:79:d8:96:ae:c5:97:9d:65:ad:04:
61:e5:6d:ac:76:1a:29:38:29:c1:3d:3e:2a:ba:f3:
75:5c:40:18:12:0f:30:af:3d:e2:25:02:12:6f:e9:
e7:7c:6a:77:f0:97:8f:d6:b0:60:92:d7:e2:31:d8:
f9:f6:be:db:69:b9:70:be:f4:9b:fc:a8:16:4c:bb:
1f:42:49:cf:06:d3:a0:96:c1:4a:03:00:aa:09:16:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2D:AB:67:F0:D4:2A:86:C6:DA:35:AB:0A:C2:68:51:22:6E:39:C7
X509v3 Authority Key Identifier:
keyid:D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:52:f2:95:f6:71:58:e0:78:c6:77:ad:c8:5a:00:67:d8:8b:
9b:cf:f6:d3:63:2c:f6:59:2b:26:7c:93:a9:0f:23:3f:09:a1:
55:ee:13:7e:37:6e:34:ce:d3:04:e3:f1:fe:41:b2:66:72:73:
27:29:41:be:76:2e:a1:b3:3b:87:c9:af:a7:3e:fc:b0:56:c4:
52:8b:1c:a3:6e:77:39:0e:e9:7b:86:59:4a:07:7b:14:1c:36:
f0:bb:7a:fb:ee:7c:ee:0c:55:56:aa:9e:86:5a:a9:cb:d9:65:
65:71:23:a3:81:fa:26:0d:8b:f6:fd:4b:0f:18:5f:34:94:56:
6a:95:f0:57:be:38:cb:80:b7:ac:08:84:bc:c3:9f:a0:80:22:
7b:90:ca:3c:3a:b1:47:41:2a:ce:01:67:fc:15:77:d5:1e:b7:
ad:3c:39:03:37:13:a4:a0:ce:50:a1:4e:3d:14:ba:b2:8c:e9:
6a:21:46:c2:1f:8e:4f:31:98:ea:c3:81:42:f5:d2:2f:6f:e2:
e7:10:ce:cf:e4:90:95:5e:8d:26:19:e1:c8:e9:a6:0c:8a:d1:
3e:04:78:a2:2e:a7:8b:48:1d:82:8f:26:a6:33:19:e4:31:b0:
b8:f0:70:8b:ae:16:47:6c:e9:6f:83:21:5e:97:fb:ab:cf:eb:
85:b7:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:49:51 2026 by rpki-client