Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: ZbWf/ytYkfI3EMkUusL01jOMwDXFJ0um+Y2qTCyhpz0=
Subject key identifier: CE:59:84:21:05:EE:34:92:1A:2E:46:26:CE:3C:3A:B1:4C:91:F8:C4
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 01A15BF9A388AFE4CB0E19D781990C2BE705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 1AB4
Signing time: Wed 21 Oct 2026 01:00:49 +0000
Manifest this update: Wed 21 Oct 2026 01:00:49 +0000
Manifest next update: Thu 22 Oct 2026 01:00:49 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: OB8BNdY9CbU1dS7VadybYfgef8pPu2kOB6rI/VgQ0zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:f9:a3:88:af:e4:cb:0e:19:d7:81:99:0c:2b:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Oct 21 01:00:49 2026 GMT
Not After : Oct 22 01:00:49 2026 GMT
Subject: CN=ce59842105ee34921a2e4626ce3c3ab14c91f8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:56:5b:06:97:d0:d5:51:69:31:98:be:f9:
8a:f9:f7:01:ac:d6:6c:35:42:c6:bd:ed:0e:2f:f9:
0e:d2:b3:a8:c4:48:48:2d:39:c9:44:93:b1:e1:b2:
ca:40:65:61:3c:24:ad:de:fb:2d:42:56:be:da:8e:
a0:c3:7d:a1:36:56:8f:33:4b:f1:d4:8d:a0:7d:07:
2d:87:60:24:25:fb:d6:43:1e:7f:b2:e6:c5:5c:38:
59:02:ba:93:67:16:4a:5d:da:32:e7:a2:39:dc:3c:
80:69:de:f5:26:50:e7:44:e1:01:f6:06:2a:d2:83:
8f:26:ea:81:5b:8e:72:16:bc:5d:ac:9c:ae:8e:15:
e9:ac:c2:1b:87:1b:75:9f:3a:ea:f0:cc:76:36:a1:
be:9c:b5:99:a4:b3:c1:2c:dd:6f:d2:bc:6a:43:a2:
ca:e6:fd:5b:50:81:ce:ee:d8:5b:24:62:33:f6:83:
d7:bf:57:8c:2b:91:2f:f5:e1:a6:fd:4b:a5:96:9b:
25:cd:bd:2b:86:c9:3e:92:51:72:e1:0d:3c:91:46:
26:35:cb:7e:54:e5:ff:d7:59:48:66:47:0f:e1:09:
23:ba:51:c5:c4:cc:1c:a8:4a:b0:74:8a:12:cc:03:
de:19:71:99:14:9c:f8:8c:30:2a:13:4d:1d:f6:df:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:84:21:05:EE:34:92:1A:2E:46:26:CE:3C:3A:B1:4C:91:F8:C4
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:55:23:4c:d6:54:c9:8c:f8:26:5b:b0:d9:bc:2a:4f:da:
e5:45:f0:89:79:63:be:7f:2b:69:14:d6:77:8f:38:88:ec:15:
67:91:b9:6b:20:22:a1:9e:80:22:ca:f7:73:6d:8c:25:8c:13:
0d:8f:6f:19:64:89:b1:03:59:84:04:82:04:d3:7a:9e:c2:79:
d7:60:ac:93:dd:5c:e0:4d:f7:c8:32:0e:0e:c2:87:c2:85:37:
cd:13:93:60:fe:1f:b3:8e:00:32:e0:8b:dc:0e:ad:67:40:44:
d7:9f:3c:93:fa:6c:b6:8d:cc:c5:4e:ea:86:49:bb:4f:07:5a:
d9:ae:21:4d:3d:78:4f:80:dd:72:99:87:1b:84:9a:bd:c3:52:
6c:c8:63:d5:fb:a8:a0:1b:56:06:6c:82:7a:cb:ff:64:ec:66:
61:51:1d:df:c3:da:7e:81:c0:c2:73:76:f2:18:24:76:50:c5:
3a:14:aa:76:cc:9a:81:4d:f6:95:10:4e:3b:d8:05:9d:34:5d:
16:73:19:a9:2d:7c:35:49:e2:bb:6e:bd:8c:dc:a5:e0:4c:48:
8d:22:4e:b5:68:11:bf:73:04:4e:e5:d9:6f:f0:0d:b7:83:66:
f8:ae:54:eb:e2:83:e3:ab:80:a1:1e:4b:36:cc:c7:b6:82:f7:
e7:d4:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:21:23 2026 by rpki-client