Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: wRT5cphCnMQD9PUZdd57EjqgmX3hNjII8Z+EjW3Al00=
Subject key identifier: B7:B0:BE:3C:FC:40:A8:90:02:A5:5C:77:F8:C0:0E:58:50:FE:E8:0D
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 01A13E94FB41B841750D07BC822E430411CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 08:01:53 +0000
Manifest this update: Thu 15 Oct 2026 08:01:53 +0000
Manifest next update: Fri 16 Oct 2026 08:01:53 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: zcXzdT/4ljSwX2nKWNqfs40Bmben/xNVYNmJScwO39Y=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:fb:41:b8:41:75:0d:07:bc:82:2e:43:04:11:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Oct 15 08:01:53 2026 GMT
Not After : Oct 16 08:01:53 2026 GMT
Subject: CN=b7b0be3cfc40a89002a55c77f8c00e5850fee80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:3d:4f:05:61:24:24:75:07:e4:1f:c3:66:
06:7b:98:97:4a:f5:2e:59:f9:5a:83:93:f8:8f:b9:
1a:c9:f3:d6:86:23:3c:3b:d1:e1:6c:f0:9e:55:d8:
3f:43:40:55:38:52:e1:6d:12:a5:c9:8c:0f:0c:8b:
0c:9b:b4:a2:7a:a6:5c:da:c6:aa:a7:c7:38:69:3f:
ee:77:05:72:bd:69:f7:b8:f1:eb:8f:f7:7c:29:bb:
c5:89:6b:eb:af:1b:d9:63:d9:e4:ed:ed:4d:ff:a6:
e6:3b:fb:19:3f:c8:9a:44:ad:02:b3:a1:27:b7:5e:
d6:a2:76:05:8c:49:a7:3c:53:2e:62:a1:2c:b5:f9:
72:2e:be:c0:a7:61:74:c2:54:eb:bb:f6:d8:03:fd:
4a:bb:41:8f:2d:2a:eb:58:6c:54:d0:3a:b1:c2:de:
06:80:2f:45:9e:06:81:36:30:c1:37:15:88:39:2c:
e8:6d:3a:79:e8:46:c2:00:38:df:ba:0f:04:ef:1d:
73:3f:2f:3c:39:27:0f:52:c4:c6:be:13:93:97:fa:
6f:b7:af:9c:3c:20:27:c4:fc:f1:92:1b:b9:24:81:
6d:37:c0:80:24:e5:7f:a3:d5:90:73:2c:9a:41:82:
3a:69:96:ca:f3:16:b1:43:b3:b5:1d:1d:2b:ce:3b:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:BE:3C:FC:40:A8:90:02:A5:5C:77:F8:C0:0E:58:50:FE:E8:0D
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:f7:a4:27:1a:f4:d9:db:9a:d9:31:0b:a5:aa:4e:5a:fb:
6a:08:ba:e9:b6:a7:4f:4b:c6:e1:f6:70:25:f5:4d:46:f0:8e:
8f:84:58:1b:0d:0d:6f:db:0d:34:e1:71:bc:40:3b:08:9c:1f:
a7:87:2f:fa:00:f3:36:ca:dd:9d:82:00:05:b9:a2:03:02:b3:
aa:64:8b:36:c8:0e:cf:b3:eb:2b:4f:4f:09:c6:c1:e8:53:1e:
3c:17:9c:a6:57:95:37:0b:de:6c:fe:0c:37:b1:69:26:12:20:
b6:ab:cc:03:8c:4f:fe:7a:61:07:ec:74:64:6c:82:28:e8:3e:
a0:ff:db:c7:72:ad:3e:97:30:e3:37:df:1f:30:cc:ad:ec:59:
f5:49:aa:c2:dd:95:d0:60:91:68:d7:f6:d9:2a:20:2e:2a:f8:
b7:d7:41:e2:30:7d:d3:5f:6c:0c:3d:5f:c9:47:d3:91:87:b9:
d6:5b:86:e8:90:6a:85:8d:ff:0d:5e:b1:ba:8f:e1:f0:b4:4b:
f5:95:bb:56:20:ee:0b:c0:b2:f5:3b:f2:8b:61:c3:89:f5:35:
cb:ad:4b:18:28:3d:d4:37:88:7b:94:2d:56:dd:67:eb:09:b5:
32:3a:99:e8:e7:71:11:cb:c5:ce:73:b8:78:67:50:6a:27:c9:
d6:eb:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:21:00 2026 by rpki-client