Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: FydYnCpn5Pzm4136U105avlY6P3GR2emtrFbabck860=
Subject key identifier: F8:30:97:18:F5:5C:1C:61:F0:95:61:FC:5C:25:88:62:EA:FB:A4:B2
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 01A03FDFFDDEEFB1176AA74A32EBF3BC78A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 04AF
Signing time: Wed 26 Aug 2026 21:00:38 +0000
Manifest this update: Wed 26 Aug 2026 21:00:38 +0000
Manifest next update: Thu 27 Aug 2026 21:00:38 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: etHSN0nf7iZYpvu9S3x1HCvxN4wZuFt4pQStoNhWVqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:df:fd:de:ef:b1:17:6a:a7:4a:32:eb:f3:bc:78:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Aug 26 21:00:38 2026 GMT
Not After : Aug 27 21:00:38 2026 GMT
Subject: CN=f8309718f55c1c61f09561fc5c258862eafba4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:60:97:40:54:f1:f3:dc:12:2a:d2:40:e8:
7e:3c:b0:d9:be:9c:84:fe:e0:e8:29:5f:5c:a6:15:
a1:b8:79:03:ef:9e:63:97:c1:e4:54:89:aa:b4:38:
0c:10:67:74:f6:28:cf:57:37:5b:5f:f3:fa:0e:1d:
53:67:9f:94:9c:1e:74:de:10:12:13:ed:8a:c3:48:
a4:ec:aa:32:be:37:c6:1b:5a:b4:f4:fc:93:f3:1b:
13:92:c2:da:9f:a3:c1:ec:dc:d6:30:8a:24:f5:d6:
ed:5c:e2:15:4c:e3:f2:b2:bf:a5:4c:e8:df:e8:d5:
f2:8f:ed:7e:59:7d:8c:e1:f3:5f:67:24:67:96:34:
f4:fa:b5:e0:ce:87:43:2d:4f:bc:9e:52:88:7f:0f:
1d:4b:9f:24:1a:68:5c:57:4f:d2:51:47:ec:8f:08:
cc:c5:9f:68:69:30:8d:74:c3:ec:dc:e4:20:be:05:
88:dc:4b:a0:22:a7:a7:82:e3:b7:02:fb:a2:d7:fc:
64:ef:8b:02:e1:d0:98:96:88:41:22:ac:9b:43:7d:
e2:a7:6e:8b:91:53:86:5d:1d:6f:b4:83:51:1d:57:
c4:88:57:33:9b:d1:3c:86:9e:11:b8:4a:4a:db:ca:
fc:c3:55:1b:9a:b1:00:9d:94:d9:ff:1c:fd:18:70:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:97:18:F5:5C:1C:61:F0:95:61:FC:5C:25:88:62:EA:FB:A4:B2
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b7:c5:dc:14:1e:96:d9:d9:e3:93:03:bf:60:54:a0:f9:22:
bb:6e:0f:33:cb:f5:bf:d2:88:fa:bd:25:ac:3e:c7:a7:91:73:
30:54:cb:f4:21:78:f6:ec:c2:d1:cb:9a:bc:6f:61:12:2b:19:
23:1d:0d:a5:a9:2b:90:00:56:63:ac:28:0a:cd:64:70:91:8d:
84:e8:45:bc:31:18:85:a4:9f:be:56:a0:02:ee:ba:1d:46:97:
d1:0c:b3:02:c1:37:03:96:5c:fb:7d:f9:5f:bb:4c:83:8e:70:
07:61:4a:10:09:4d:5a:4e:bb:2e:ca:11:39:61:7c:37:4f:a7:
7a:84:22:27:ca:64:94:53:f2:bd:5b:bf:6e:0a:16:58:78:c6:
f5:ff:2c:8d:0c:ac:70:8f:3c:d6:e2:84:96:01:df:e6:47:59:
44:0c:e8:a6:2d:83:95:6d:8f:34:4f:47:29:1b:7b:c2:a7:7a:
76:67:22:39:e1:c9:e1:e3:b0:68:ca:3d:f1:75:6a:9c:fb:24:
ce:f4:57:52:e3:5e:ce:1b:72:a0:a0:8f:d2:8d:40:aa:61:5d:
21:49:89:b2:a5:7e:55:71:9a:72:33:1a:17:3a:c7:e6:4e:e7:
3b:c6:02:0f:45:9a:33:86:2b:c8:91:1a:51:fa:d4:7c:af:39:
c8:d3:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:07 2026 by rpki-client