Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: 447nXIXWF77j9Om1NAor4Y7c3JNZd5pFqvFca9sDpKQ=
Subject key identifier: CB:16:E0:75:78:5C:EE:1F:B8:B6:94:65:1F:E8:CF:E1:6A:59:F0:15
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 019FA0A8B12186AE88F98AA389AFC8E4A836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 15DB
Signing time: Sun 26 Jul 2026 23:00:37 +0000
Manifest this update: Sun 26 Jul 2026 23:00:37 +0000
Manifest next update: Mon 27 Jul 2026 23:00:37 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: NFSDAqiDzDhcgM8xlgLGLXXtp0TkGaiUXIHVuR747y0=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:b1:21:86:ae:88:f9:8a:a3:89:af:c8:e4:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Jul 26 23:00:37 2026 GMT
Not After : Jul 27 23:00:37 2026 GMT
Subject: CN=cb16e075785cee1fb8b694651fe8cfe16a59f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:2c:08:4d:15:89:75:70:5e:d3:6e:f8:2c:
64:bd:66:df:c1:1d:f4:89:80:56:c4:98:78:71:f7:
aa:49:b8:80:dc:49:78:af:7f:99:a0:af:0a:3a:61:
e2:54:94:79:50:37:52:8a:8a:e8:2e:65:b9:88:0a:
f3:61:ac:18:66:f3:05:47:67:c9:ca:86:43:39:59:
93:a7:a8:ee:8a:81:f8:98:66:1c:7e:a4:a6:50:d0:
ab:2d:ca:b6:73:c5:bb:7d:90:28:14:8a:41:25:48:
fb:12:35:22:f9:48:8d:56:22:b2:8f:51:11:30:3f:
00:a0:7a:ad:bd:15:9b:7f:15:b8:e7:35:ec:66:39:
a2:ea:37:c1:50:85:2f:01:09:c5:10:56:ed:a4:93:
5e:71:fc:18:f4:d0:44:9d:4c:10:94:57:cc:e7:14:
ae:82:aa:90:09:cf:38:e7:a0:03:30:0c:6e:40:61:
4c:b4:59:08:02:b3:78:2c:cf:ad:b1:cf:53:86:7e:
f6:e8:d6:13:d4:a6:59:9c:ea:0a:2e:da:a5:9a:a6:
a0:c0:79:79:6e:4f:fa:03:4d:a4:ee:df:a7:b2:f9:
a2:79:49:69:05:c1:ff:ff:0b:40:b5:28:77:cf:29:
86:1f:af:d6:33:0c:0d:f0:10:dc:a4:8d:c2:7b:c8:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:E0:75:78:5C:EE:1F:B8:B6:94:65:1F:E8:CF:E1:6A:59:F0:15
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8f:d3:7d:e9:ce:c2:28:9e:53:21:46:c3:dc:a7:72:21:83:
a4:ad:e5:bd:b7:9c:49:6a:b0:1c:4d:4d:6b:bd:07:23:b2:50:
8b:c1:19:18:57:e8:f7:96:9c:59:e8:6a:fd:ed:ca:a1:45:68:
a1:83:9d:a4:f5:8c:c5:6a:c1:46:e4:b4:ec:a1:37:92:af:27:
0b:e8:83:26:34:31:05:1e:1a:a3:dc:ad:1c:84:10:2c:4f:0d:
2d:6b:13:61:3c:75:e7:60:ab:7c:b4:d4:3b:2a:ed:7e:d3:45:
c1:8e:50:14:10:f1:8e:1b:43:d7:78:95:e6:1a:16:33:7e:26:
8d:13:08:c7:47:d3:6a:26:19:dc:cd:04:c5:50:71:d0:f1:8d:
41:4a:b2:ba:ea:6d:25:fa:94:6f:77:d5:9c:b6:e2:42:04:70:
08:74:47:5a:a6:b2:64:09:22:2c:4e:ee:c4:9f:1a:b9:98:ca:
51:a1:94:1f:e3:7e:02:b2:8b:27:95:6e:f6:09:0a:01:44:de:
2c:ff:4a:d6:db:28:39:4a:0b:d4:71:3d:a9:43:60:4e:55:d9:
02:c0:45:23:69:1e:5a:17:a9:49:92:fc:39:64:fb:51:75:32:
1f:53:69:66:d6:f0:53:06:c6:f6:48:3e:73:c0:5b:12:21:ec:
d4:c8:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:52 2026 by rpki-client