Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: ghCSls2UaBK592yY1xfI2cqPtDMgLfjTxNwwOg2wRl8=
Subject key identifier: 43:EB:6A:F1:40:92:58:B2:B1:F1:A1:84:C8:B3:29:CB:B3:15:33:3B
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 01A11485DBD0F419E5866AA09ABEE85D540A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 1216
Signing time: Wed 07 Oct 2026 04:01:19 +0000
Manifest this update: Wed 07 Oct 2026 04:01:19 +0000
Manifest next update: Thu 08 Oct 2026 04:01:19 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: pzHiq8xyY9j3gHVqZuCMOVLUfBMLnPkE2yYCfYX9bcQ=)
2: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (hash: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ=)
3: agPmj-1yZOqdW-zJe9GpIqUN03w.roa (hash: ToCg4vQlYxypC6RWyLP+F3bLTdA7lp0Hnkzv9RyJf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:85:db:d0:f4:19:e5:86:6a:a0:9a:be:e8:5d:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Oct 7 04:01:19 2026 GMT
Not After : Oct 8 04:01:19 2026 GMT
Subject: CN=43eb6af1409258b2b1f1a184c8b329cbb315333b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:fa:2e:0e:7f:48:31:ba:c3:d6:03:6c:00:
37:aa:41:c7:8e:22:85:28:cb:57:2c:ee:4d:27:e2:
69:cb:9f:33:65:9b:1b:f1:0e:a5:e2:79:76:0f:d8:
b6:44:29:ec:b1:a9:ca:1e:7c:5b:8e:9f:ef:5a:5a:
1c:34:2b:32:52:a3:ae:2d:6f:81:43:75:b6:9f:e5:
fe:e6:e8:0f:49:98:6b:0d:7d:38:c2:dc:15:34:5f:
b8:54:07:9a:11:4b:1d:b7:0d:96:d2:c0:44:52:fa:
2b:11:c1:da:d5:11:fd:2e:65:31:d8:12:a5:47:45:
03:c0:04:0e:2b:89:58:41:aa:e5:26:ba:57:05:47:
8b:b5:cb:b2:94:01:9c:d5:83:82:de:a7:8c:13:ac:
42:c9:66:ad:ad:b1:0b:6a:a6:43:c1:58:fe:ea:d9:
10:9e:dc:02:86:87:c6:9c:84:b6:15:9c:22:8b:0f:
fa:ae:e1:7f:07:f6:c8:5b:13:f1:ab:f1:c2:ef:6e:
4b:83:90:9a:07:38:bd:c1:01:9e:34:5f:de:02:38:
5d:b9:00:3f:13:8f:d5:eb:b3:1b:ee:fd:3b:93:be:
8d:08:0a:d7:0e:ef:0b:9e:0a:f1:5f:a9:71:57:45:
21:d7:5a:ab:45:ca:39:f1:cc:ad:53:b5:e5:93:d0:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:6A:F1:40:92:58:B2:B1:F1:A1:84:C8:B3:29:CB:B3:15:33:3B
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:66:5d:11:b1:ea:a3:8d:f7:d5:bf:8c:09:62:fa:3c:ed:
ce:15:d3:43:e7:71:d3:c1:e7:07:e3:e8:60:66:7e:b5:87:e2:
71:f7:7c:f6:54:8c:47:98:67:f9:3a:e5:46:c3:4d:22:fa:95:
a5:80:3e:b5:6d:f9:07:57:41:e0:0b:f4:d5:46:d2:22:d5:53:
70:6f:e6:81:58:03:ae:29:46:b4:ee:b1:7f:3d:84:a6:2a:4a:
1f:72:66:11:c9:7d:f2:51:93:fe:82:b5:cd:c3:2e:4d:d3:d8:
ff:22:fb:f6:6d:30:15:4f:9a:56:04:76:de:38:a1:94:81:b4:
d8:42:0d:28:07:0c:71:36:2c:a6:64:df:76:a3:c8:1d:fe:96:
d7:08:91:d6:69:81:44:70:17:12:ff:2f:e7:67:32:c6:29:ac:
92:45:b2:0d:dc:b8:53:58:50:92:58:40:22:79:a0:7e:48:ab:
46:95:19:92:4d:18:7d:b3:24:ee:69:e1:ee:a3:7f:4d:a3:49:
39:dc:b3:bc:bd:68:ab:20:f5:66:19:1c:8c:a1:e6:63:f7:f3:
8d:b4:50:f0:6f:1f:64:85:e4:92:2d:4b:bc:53:bd:0c:db:33:
99:46:ef:eb:81:ba:b4:7b:6a:34:fc:34:b7:e5:ff:35:a0:7f:
59:15:90:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:39:14 2026 by rpki-client