Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: 3P/DWlEQ8NFA84/6uVX/AD1mZV5pz8MOg/rpEOdU9Yo=
Subject key identifier: A0:75:9B:CB:79:F1:C5:D6:E2:3D:39:E8:AF:7B:66:D7:4F:0C:5B:11
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 01A13F7027F84863B18F7705666BE1410285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 16AA
Signing time: Thu 15 Oct 2026 12:01:17 +0000
Manifest this update: Thu 15 Oct 2026 12:01:17 +0000
Manifest next update: Fri 16 Oct 2026 12:01:17 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: VanBx7wiKTbUycK3OsyFJCCA31MWevCqx5PKLux/4lg=)
2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:27:f8:48:63:b1:8f:77:05:66:6b:e1:41:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Oct 15 12:01:17 2026 GMT
Not After : Oct 16 12:01:17 2026 GMT
Subject: CN=a0759bcb79f1c5d6e23d39e8af7b66d74f0c5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:18:c0:69:e9:43:f2:0e:40:58:b0:ea:21:
09:c8:d6:0f:70:cb:1d:40:3c:d1:f7:21:df:2a:c3:
26:bb:88:55:3e:2e:26:68:47:51:40:e4:cb:ba:42:
7a:22:db:40:a7:28:b4:6b:60:eb:de:7b:7d:98:c9:
27:d2:99:25:ac:77:16:78:47:ec:bc:57:fd:87:50:
1a:0e:71:b3:75:92:02:8b:8e:d7:d6:5c:d5:85:89:
81:0d:90:68:55:2c:1d:08:73:3e:80:fb:4d:73:1e:
34:e9:2c:23:d0:29:17:70:72:ca:63:ec:4f:47:28:
ca:b2:62:a4:93:2b:59:45:38:d8:eb:8d:0d:45:c3:
88:aa:a5:8f:3a:7f:f2:25:f5:cb:5a:3a:6c:34:21:
9e:30:c0:75:46:b5:b5:c4:fa:00:f0:20:e4:e6:67:
07:3d:45:78:55:03:ce:6e:df:e8:4e:da:68:11:b6:
64:0c:7a:f2:ac:3b:6b:b3:42:f8:5f:20:f2:2c:98:
be:b1:0f:5f:69:9c:16:4c:f1:6e:19:9b:87:85:88:
5f:28:0c:a4:b5:48:ca:fe:b8:93:1a:f3:78:5a:5b:
91:1d:48:c7:57:ab:29:8c:29:40:a3:d6:e9:ca:ee:
bf:92:83:f0:da:57:73:ea:83:3a:40:00:1d:e4:7d:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:9B:CB:79:F1:C5:D6:E2:3D:39:E8:AF:7B:66:D7:4F:0C:5B:11
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ac:66:2f:49:3a:77:d6:cc:d7:d2:80:fc:d8:0c:d9:5c:5d:
2e:5a:6a:df:7b:13:60:88:00:03:a8:4b:ee:1e:f4:a9:61:11:
34:91:65:df:24:b2:b2:09:4b:a3:c6:b0:d4:0e:08:b1:65:c7:
3a:10:6a:6c:47:ea:69:e4:a4:e6:b0:d9:d4:87:c5:7d:e7:ee:
96:bb:cf:38:c0:e9:9b:c7:eb:df:7d:6f:c5:2e:3c:dd:9d:7e:
71:1e:1e:cc:bc:3e:71:12:cb:4b:ff:68:70:2a:64:f3:41:59:
c3:19:05:43:16:6d:56:26:a5:bb:1a:46:3a:ac:98:81:d4:3d:
35:61:ca:ee:55:4d:e3:6d:da:ac:5c:61:17:45:64:d7:24:80:
b5:da:81:64:5f:d3:b2:29:88:10:4c:15:82:84:c0:fe:b4:66:
84:d7:19:0a:9e:be:9b:0c:7c:41:af:45:c4:3b:60:3b:60:74:
fe:b8:a2:53:df:46:0a:64:01:39:c9:3d:7c:b8:eb:8e:f0:78:
e7:79:e2:e0:08:19:c6:f9:53:9b:b1:45:b3:d2:f9:e8:3f:fe:
49:62:2f:13:bb:59:e7:77:11:36:21:1b:dc:6a:df:88:47:c3:
30:2d:30:92:b4:69:87:38:8a:35:26:f1:b5:71:54:0e:6b:e2:
da:1c:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:46:31 2026 by rpki-client