Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: nKmBs/aFMfTVtObU1zX7R6ASd++isc6JPLjG42YgK7k=
Subject key identifier: D3:44:A6:6B:16:DB:D7:C4:B5:7B:69:E8:0D:C9:79:B6:63:A5:A9:6A
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 01A1562F80B627C40D4EBBD391DE2D340961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1AB3
Signing time: Mon 19 Oct 2026 22:01:55 +0000
Manifest this update: Mon 19 Oct 2026 22:01:55 +0000
Manifest next update: Tue 20 Oct 2026 22:01:55 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: /5CgHtrvk2viA3Hcbvs8utFBq36BWs7gQle8acoU/ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:2f:80:b6:27:c4:0d:4e:bb:d3:91:de:2d:34:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Oct 19 22:01:55 2026 GMT
Not After : Oct 20 22:01:55 2026 GMT
Subject: CN=d344a66b16dbd7c4b57b69e80dc979b663a5a96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:2c:68:8a:b6:4d:ae:43:07:35:c1:90:2a:
af:5a:f5:7c:4e:13:bf:ab:8a:98:e9:6f:96:55:5e:
60:7f:d3:5d:83:0c:44:84:92:36:f0:10:fa:0f:b1:
78:31:54:7f:cc:d1:28:88:13:7b:63:e9:16:98:41:
d9:58:8d:c4:86:e4:5a:2f:f3:31:97:55:c3:17:a5:
36:b3:58:ff:ef:68:83:d3:0c:42:93:e8:f2:e1:d9:
2e:72:a4:e1:8e:c7:fe:e2:79:55:52:5c:89:1b:00:
80:64:e8:da:23:7d:24:94:c8:e5:8b:b6:6b:42:00:
7d:14:7b:c2:9b:a0:44:06:92:b5:f3:ee:05:98:dd:
f2:7c:83:e1:3c:3e:ae:2c:29:55:ec:19:bc:0c:88:
98:ec:b2:fc:62:1c:63:9b:06:47:0d:a3:a1:76:75:
aa:0d:3e:e8:a6:0c:f8:84:3d:af:de:99:c1:0a:56:
e7:d4:46:29:98:04:74:a5:f9:44:76:17:5d:f4:44:
fc:c0:a2:b9:41:2e:82:58:0c:20:52:b2:a0:bf:34:
2d:e7:0a:60:43:7d:48:64:07:13:ed:6e:eb:0e:78:
f2:91:aa:b9:75:f3:73:6d:7a:74:bb:16:38:c8:33:
3d:39:ea:cb:91:c1:c9:cd:10:2d:c1:d1:ef:cf:4f:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:A6:6B:16:DB:D7:C4:B5:7B:69:E8:0D:C9:79:B6:63:A5:A9:6A
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5f:f0:3f:90:fc:22:0c:b4:1e:ed:5c:4a:42:e2:c3:4e:08:
12:bd:ab:85:a6:31:c9:41:8a:ee:ff:6e:06:09:e6:cd:50:e7:
5e:61:a9:96:c4:34:3c:5e:d2:1a:03:9f:67:9e:a1:03:96:16:
d5:bf:c7:b0:b5:3c:ea:b2:c4:fb:27:89:49:f1:b4:90:f4:20:
20:18:6b:97:90:a9:f7:b9:99:91:4d:a5:ed:bc:1a:27:3d:a5:
0d:45:13:44:e6:11:d8:58:0d:34:7e:d4:88:f7:55:a1:f7:b3:
8a:32:06:de:5e:46:a1:a2:cf:45:42:d0:2a:0e:f1:2f:d5:c9:
f3:c8:16:8d:74:86:e1:4b:f8:cc:14:b3:93:34:83:de:a7:c1:
87:95:63:2e:0b:e2:52:f2:54:36:57:cb:51:ff:f7:a6:5d:6b:
af:59:21:43:5d:03:8c:c6:73:59:ff:9d:b9:48:11:be:47:e5:
22:04:c4:07:96:a6:8a:37:aa:df:bd:ba:68:db:d7:28:1e:8e:
de:37:22:03:45:49:0c:de:6b:29:08:cc:54:0e:6d:f2:79:59:
39:b7:8d:7a:b1:28:23:05:15:23:d3:20:ff:9e:1f:cb:1d:4b:
a4:b9:c7:37:af:a6:62:dc:6d:d5:d0:0d:f9:d2:cd:bb:0a:9b:
44:05:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:35 2026 by rpki-client