Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
File: 00aPL6qp053JwDKNMP0DFGbVD3I.mft (raw, json)
Hash identifier: x51Dp2zvbMFgrvTua0EFu745n1ydFjHtvOA+yVaGfN8=
Subject key identifier: 01:85:07:8C:2D:A6:F5:C0:99:3F:72:77:30:80:B9:B5:F8:33:06:FC
Authority key identifier: D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
Certificate issuer: /CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Certificate serial: 01A04084F05EB9B778F4CD102AF86B5ADEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
Manifest number: CA
Signing time: Thu 27 Aug 2026 00:00:48 +0000
Manifest this update: Thu 27 Aug 2026 00:00:48 +0000
Manifest next update: Fri 28 Aug 2026 00:00:48 +0000
Files and hashes: 1: 00aPL6qp053JwDKNMP0DFGbVD3I.crl (hash: GT8hkFhRTF+IWFH8/phk7dVyLb66lwUPpX76ZIT54bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:f0:5e:b9:b7:78:f4:cd:10:2a:f8:6b:5a:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Validity
Not Before: Aug 27 00:00:48 2026 GMT
Not After : Aug 28 00:00:48 2026 GMT
Subject: CN=0185078c2da6f5c0993f72773080b9b5f83306fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:ed:1a:43:81:7b:4b:80:c7:ad:56:3b:fb:
03:d0:1c:e4:54:88:b1:50:6f:b2:77:b0:a0:b5:14:
89:19:51:19:b8:89:d9:9c:e2:1b:f3:0b:a4:f5:5d:
3a:45:b6:bf:21:70:af:18:de:ea:d1:3e:86:12:97:
23:ee:d6:52:08:b1:dc:4c:18:0c:57:7e:6c:50:f2:
ef:b6:67:0e:a0:99:1c:4f:0c:cb:9a:15:9c:86:a5:
32:f5:f6:75:4f:8d:e8:2b:0c:71:c7:76:b2:9e:99:
6c:e7:c9:c4:09:0c:a5:a6:b4:e9:7a:9e:8d:6a:cf:
8c:4f:6b:76:87:14:ae:b0:7c:4e:ec:f6:23:55:b8:
1d:26:65:b2:48:1e:e0:15:a4:0e:23:2d:3f:47:07:
37:e4:d2:96:b3:00:c5:4b:18:70:2e:3d:d8:aa:88:
17:12:51:a3:ee:9d:f6:2f:b8:d1:7a:59:4e:05:28:
6b:11:f9:bf:02:90:41:fb:3a:6b:6c:42:60:2f:ac:
4b:72:ab:70:4b:5d:c5:9d:30:85:4f:5e:cd:26:6b:
78:ba:00:e0:18:94:18:c9:59:04:c0:85:19:5c:4c:
08:5d:f5:45:3a:37:29:cb:fd:10:66:85:3e:30:12:
4c:76:67:10:2a:79:99:26:d5:38:a1:ec:88:d4:95:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:85:07:8C:2D:A6:F5:C0:99:3F:72:77:30:80:B9:B5:F8:33:06:FC
X509v3 Authority Key Identifier:
keyid:D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a7:85:95:7e:46:13:09:d2:d4:cd:b5:c4:b5:32:cd:5a:2a:
99:d9:a9:a7:dc:11:10:5b:cb:d2:52:64:4e:a2:ad:54:bb:66:
5f:ab:82:6a:a3:d1:8b:74:fd:de:ca:54:5c:d9:cf:65:4a:4f:
ed:67:e0:c5:35:55:33:40:89:1f:ef:fb:57:13:df:62:c5:55:
97:54:15:63:0e:b7:36:c4:de:73:f1:c6:c8:56:39:eb:a9:c8:
ec:3e:5a:bd:96:d3:41:3b:a7:92:3c:f0:dc:76:e0:4b:3e:c7:
70:7f:28:ae:d5:7b:b7:c1:9f:a2:f7:a5:45:92:a8:bd:58:e0:
8e:32:39:31:f9:f3:f3:a9:06:5b:23:c9:be:c5:a9:d9:3e:56:
66:b2:57:19:31:bd:6a:03:94:6f:03:b7:72:bf:f6:c2:cf:8d:
39:fd:b2:ca:f7:35:3e:34:ac:fe:f5:ae:a1:35:4a:0c:e2:66:
f7:45:93:31:e4:25:30:12:1a:82:cb:b6:d1:57:26:f5:53:e1:
17:94:9e:23:4c:db:7f:42:1a:2c:59:40:85:9d:6d:76:a9:11:
eb:7c:a7:33:bc:27:01:53:96:1f:c0:5b:c3:9f:f4:54:b4:c7:
08:30:3a:31:08:a8:64:23:33:64:0d:5d:3a:31:c5:e9:24:a2:
59:25:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:20:17 2026 by rpki-client