Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: oCl4StJydZKFShlRTcB4DYQyWSddY3WwveYiQEquhQc=
Subject key identifier: 86:FC:51:C2:B0:43:1E:01:28:DD:B9:3C:6B:B8:D7:21:7C:8D:9D:B6
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 01A13ECBBCCD3E1E40596CB4C9EA8D3AF567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 09:01:41 +0000
Manifest this update: Thu 15 Oct 2026 09:01:41 +0000
Manifest next update: Fri 16 Oct 2026 09:01:41 +0000
Files and hashes: 1: 1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa (hash: MvfZK0vopuWN555bO977ZaPEKGpn35Tp4Z56kxBVG7U=)
2: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: uJcW+frNZOuMMn4DiclzIv0Ra4RvnXtGD5S1srrz8ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:bc:cd:3e:1e:40:59:6c:b4:c9:ea:8d:3a:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Oct 15 09:01:41 2026 GMT
Not After : Oct 16 09:01:41 2026 GMT
Subject: CN=86fc51c2b0431e0128ddb93c6bb8d7217c8d9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:16:c3:96:0f:7e:a0:f0:ed:93:87:0b:7a:
60:36:76:02:cb:ed:bd:2b:8f:67:12:5c:46:c9:6b:
65:5d:82:d7:50:0e:de:42:38:dc:b1:81:70:7d:95:
e0:cd:5b:93:27:f1:18:fc:fc:90:da:bd:a4:db:90:
f1:90:ec:c9:d1:64:4d:00:09:89:4d:df:a6:9a:93:
a5:f1:88:c7:40:a4:7d:27:21:d7:34:ce:46:2b:2d:
e8:d8:aa:ed:ec:54:91:ca:20:6a:8e:2f:5a:9b:a7:
d4:27:80:e8:0c:81:9c:e8:e3:0c:a9:f5:0c:d0:11:
ee:01:6c:09:ac:6e:eb:8a:e9:14:11:da:d1:8f:da:
60:ba:25:fa:f7:5c:bb:e5:06:62:bb:34:5a:b1:51:
d2:9c:62:06:c8:dc:99:9c:93:23:52:49:e2:e6:2f:
51:44:8f:c0:db:f9:fc:d8:8c:48:6f:f1:8c:61:1b:
40:50:63:4d:08:97:fd:a1:63:7f:a9:23:2a:fe:ee:
9c:b4:96:a2:51:c7:32:3a:43:4e:ef:26:c5:b1:7d:
0b:76:65:b9:53:7c:ca:c8:6b:81:dd:43:0c:c9:e7:
eb:1a:89:06:9d:cc:be:7d:ff:46:dc:1a:47:9c:bc:
f1:00:d5:b3:c0:cf:eb:3b:5c:d4:1f:0c:d8:4c:bf:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:51:C2:B0:43:1E:01:28:DD:B9:3C:6B:B8:D7:21:7C:8D:9D:B6
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ee:e1:bf:98:38:a4:7e:92:b4:a3:9d:21:a0:e5:7b:74:ee:
a3:b5:44:68:37:c4:bb:9f:77:c3:6a:c8:41:fd:bf:51:92:40:
29:81:2b:09:db:f2:37:31:c6:e0:c2:60:c5:80:95:ae:af:f0:
d1:0f:31:87:dc:54:94:2d:91:36:4e:31:f9:62:20:ca:51:b8:
c0:c3:78:db:d0:e3:52:5a:6a:6a:18:1d:1a:7e:4f:de:23:c8:
8d:3f:be:5f:61:ae:03:47:3b:a2:e4:41:a7:28:d6:a0:08:ef:
d7:c7:7a:52:1d:e1:4c:39:5e:19:d5:1f:54:a9:37:e5:92:ff:
bf:ba:89:3d:2e:d0:39:57:35:d0:02:31:4b:dc:1f:fd:93:49:
22:4e:6e:82:24:c6:fb:6b:41:58:e8:bb:05:07:86:22:71:69:
3e:d7:3a:b3:6a:10:74:d5:d5:ff:cd:e9:a1:8f:2a:75:fb:52:
44:96:d5:25:12:ef:55:14:d8:10:b0:ee:49:33:22:d9:93:f6:
1f:13:22:78:67:c2:44:4a:9a:53:91:fe:fd:bb:6e:61:fb:ef:
07:07:2b:be:ad:08:43:3b:33:57:d6:d8:32:cb:60:a7:a2:41:
17:a7:65:90:4b:73:0d:df:4b:cd:f0:d2:17:86:d6:d1:fc:44:
d9:cb:35:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:56 2026 by rpki-client