Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: xj1cawkRhXUiP1b0oIHKfLEhDGhyRCKPbXmgQ31DJNQ=
Subject key identifier: 03:49:2C:94:D7:1F:22:F8:02:24:84:C5:8E:E8:49:F4:B6:40:D4:F0
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 01A17770BBEF7F1FB8C4F836C186038D75FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 09:00:39 +0000
Manifest this update: Mon 26 Oct 2026 09:00:39 +0000
Manifest next update: Tue 27 Oct 2026 09:00:39 +0000
Files and hashes: 1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: buQ/0iEhDFoxeVNx0xPIX7uSbcj++L6GQhm7AnpaXUQ=)
4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:bb:ef:7f:1f:b8:c4:f8:36:c1:86:03:8d:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Oct 26 09:00:39 2026 GMT
Not After : Oct 27 09:00:39 2026 GMT
Subject: CN=03492c94d71f22f8022484c58ee849f4b640d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:15:ee:42:16:55:1b:7f:44:ce:c9:4c:af:
e2:e7:bc:2d:73:35:ca:c6:ab:46:2e:89:df:59:f6:
73:4a:8b:c1:06:69:c3:fb:0f:67:47:57:25:ab:67:
68:db:48:6f:8f:8b:a7:d5:8d:79:ac:1f:fe:ce:89:
56:1a:af:f3:ad:a8:dd:13:7d:71:b7:5b:83:80:02:
54:3d:44:df:d6:78:02:87:f6:19:1d:de:93:13:ee:
b1:a2:9c:25:ed:a8:d6:76:0f:cc:77:96:a2:16:42:
1d:e7:28:7d:06:9f:2a:53:d9:ad:ee:75:14:2a:72:
2c:38:f6:1d:09:87:a2:86:dc:8a:34:a3:7c:9d:a9:
57:22:da:a6:81:7d:42:fa:c3:95:d3:7f:42:39:67:
4e:21:d1:a8:00:97:d1:42:a2:f4:72:31:23:f0:d3:
52:36:d4:46:97:1c:59:59:c3:a7:34:5e:fc:2b:e3:
87:4c:f7:d6:3b:70:42:f4:e1:00:f7:81:e6:36:aa:
12:07:83:2a:ef:a5:3f:96:ef:4d:ee:ea:c7:17:f2:
f1:82:a5:d0:d0:89:39:5c:04:4a:a5:b2:e0:fb:3b:
8d:cd:dd:f6:fb:9c:62:16:12:59:b2:58:67:9e:2d:
b8:50:68:c6:fb:62:17:92:72:df:a4:9b:81:bc:a6:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:2C:94:D7:1F:22:F8:02:24:84:C5:8E:E8:49:F4:B6:40:D4:F0
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:83:5d:b7:f3:02:8b:4e:85:63:73:ae:5e:c3:e4:fe:0f:
c0:35:37:4a:c4:ae:7c:21:2e:46:23:50:3c:ef:50:3e:b9:30:
b9:dc:f3:89:37:fb:34:3b:6a:cd:d2:58:07:5d:86:5e:77:d9:
eb:0b:bc:23:b5:e6:f2:c5:8f:e8:d3:cc:03:30:df:61:ab:b8:
83:82:93:dd:d3:09:41:65:41:91:1e:fc:d4:7d:69:ab:15:f6:
ad:e4:cf:c2:be:cb:fe:98:98:59:11:69:c0:bf:9e:ac:d1:9b:
3e:d4:2d:cf:c8:aa:c0:f5:f0:ad:25:22:bf:3d:6d:3b:b6:cb:
44:9a:5d:79:b1:5d:df:61:73:3b:de:75:c3:78:a5:f5:79:3b:
f3:71:9d:6a:32:07:df:09:19:ac:f2:63:11:7c:e5:f6:07:20:
d6:a0:e3:c1:45:4c:8d:3a:75:f0:f5:26:3d:10:bb:f0:20:70:
58:6e:c8:de:e8:06:93:8a:f4:5a:da:63:53:81:ab:6e:a5:fe:
c2:a8:c6:6e:20:c2:cb:33:bb:ea:fb:96:05:1c:c7:5b:e1:1c:
7e:d3:0c:72:49:27:a5:f2:8d:d5:64:82:98:64:ca:0c:b0:f5:
54:d9:e3:1f:16:e0:15:ed:07:24:cc:c4:11:85:3f:b7:f9:93:
d9:82:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:02:11 2026 by rpki-client