Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: qp8RFmsQgmwz/3BLDHru8K2SKnT1TMmNHopMEpBkL3c=
Subject key identifier: 2B:2A:06:29:3F:FA:90:CA:2F:5E:69:25:E2:EA:82:88:F6:E5:9E:15
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 01A08A5572B534CD2079FA81EDF21D140911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1654
Signing time: Thu 10 Sep 2026 08:00:50 +0000
Manifest this update: Thu 10 Sep 2026 08:00:50 +0000
Manifest next update: Fri 11 Sep 2026 08:00:50 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: J/hei9IYk+k2SN0M1lJWZ5GIgB7MV9Ts7O2Bz+A1+No=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:72:b5:34:cd:20:79:fa:81:ed:f2:1d:14:09:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Sep 10 08:00:50 2026 GMT
Not After : Sep 11 08:00:50 2026 GMT
Subject: CN=2b2a06293ffa90ca2f5e6925e2ea8288f6e59e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:c3:3b:45:6b:a6:09:c9:cb:c7:61:8f:92:
06:c9:f8:2f:49:aa:01:49:83:b7:f5:4d:cb:b3:50:
9b:1c:7c:f4:73:68:70:ce:93:6a:39:c1:f0:5d:21:
d9:3d:c7:94:13:fc:27:53:d0:14:73:79:24:b7:39:
e6:51:93:8b:a6:5e:fc:a1:e9:53:27:3f:86:6e:a6:
da:8f:a7:1c:01:7a:fe:66:72:9f:4b:8f:4c:b7:73:
48:c6:c6:29:23:c4:b2:7a:aa:7b:02:a0:d8:7b:10:
70:be:be:a6:30:96:6c:f2:7e:c7:eb:a7:c9:33:b2:
29:92:e2:36:88:0a:4c:d2:88:6a:af:7a:31:a9:62:
72:76:ef:74:89:c5:41:9d:84:54:bc:d1:19:d1:be:
82:ca:24:1c:14:11:b2:6c:cc:97:c3:1d:bf:7d:f0:
7e:4a:93:f9:da:35:ab:3e:8c:71:55:35:ec:2c:1b:
5a:c1:05:88:15:0e:01:a6:8e:b4:d3:32:a3:0b:e0:
44:a6:c8:b0:dc:ea:34:63:34:fa:06:4f:41:df:45:
77:fd:a5:53:a9:65:45:4f:8f:cf:f7:27:46:49:2b:
d3:ce:58:b9:10:15:e6:a8:b5:8f:f4:ae:cc:6f:62:
83:16:c0:e8:ed:43:21:5e:49:f5:b4:74:f1:ad:6d:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:06:29:3F:FA:90:CA:2F:5E:69:25:E2:EA:82:88:F6:E5:9E:15
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:42:8f:61:18:89:c8:4c:a1:6c:65:9e:66:5f:f1:a0:e7:
b0:97:67:4c:26:e2:a7:d6:0e:21:a5:8d:ac:e2:e4:6e:e7:c8:
b0:6a:17:8f:6b:8d:7d:21:90:66:bc:e9:7a:7b:9a:db:84:25:
85:cb:9c:14:d7:d7:2a:b5:c7:63:3a:95:af:79:ff:aa:65:29:
dd:3a:76:02:ef:91:34:a4:89:ce:1b:ac:7f:a2:fb:38:c1:82:
72:ea:52:08:4d:02:5f:5d:98:c8:2d:29:5b:96:76:90:71:da:
53:05:79:61:09:a5:46:d8:9c:1c:ce:a2:8a:a8:d9:e4:81:7b:
98:6a:e7:a7:e0:dd:a2:5e:66:2e:2b:e4:7f:1e:96:e8:b6:da:
ad:20:ae:61:c4:90:26:dd:00:e5:5f:90:e8:15:36:63:6f:e9:
77:7f:f0:d2:69:fe:79:1a:0e:fc:79:42:88:5b:e1:9b:d8:f7:
c5:23:55:08:b4:8a:28:3b:df:27:9c:96:c4:0c:d2:45:ed:38:
63:a7:4b:06:40:09:48:5d:54:95:a5:8e:51:52:32:f6:1b:54:
06:77:24:62:d6:0e:d0:b0:62:5e:b2:ba:b7:0c:4f:c1:05:65:
0b:17:e5:61:2f:a6:be:72:17:d0:1a:52:c7:ca:0c:d9:36:21:
ac:89:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:16 2026 by rpki-client