Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: L5dtHlUD8SFkFS+UtTyHWDE1Iui4lPAaH8BhKOuk5o8=
Subject key identifier: 3F:12:43:28:27:B5:6D:82:DF:24:1C:BD:80:94:17:09:16:EF:11:39
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01A116062D3DBA1CF61CC86898A17376C9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1A94
Signing time: Wed 07 Oct 2026 11:01:05 +0000
Manifest this update: Wed 07 Oct 2026 11:01:05 +0000
Manifest next update: Thu 08 Oct 2026 11:01:05 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: 9VCazaY5vdOorgYkVZx2x+lVmgAqymJ8GfWJhnLKdRw=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:06:2d:3d:ba:1c:f6:1c:c8:68:98:a1:73:76:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Oct 7 11:01:05 2026 GMT
Not After : Oct 8 11:01:05 2026 GMT
Subject: CN=3f12432827b56d82df241cbd8094170916ef1139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:41:de:b5:1e:f7:cf:d0:a5:a0:9c:35:58:
e4:ef:f0:76:81:b2:3a:65:56:0f:74:e4:82:04:75:
ba:2b:77:1a:fe:76:2b:d0:f9:03:27:0b:5a:cc:74:
fa:12:d5:75:ec:6e:9f:97:cd:cd:2f:24:a1:e3:4a:
61:08:7c:fc:2b:d3:48:3a:a5:c3:f2:19:7f:1d:b2:
9b:e1:d0:62:70:51:af:81:98:64:80:64:76:d9:47:
9f:9b:3b:cb:40:87:32:ff:f0:49:ac:1d:ef:9f:25:
61:37:e8:9c:21:37:79:f9:14:a6:24:4f:ef:2e:08:
1a:dc:8c:14:46:71:6b:a9:ed:aa:a1:34:8c:a4:9b:
cb:f5:be:35:e5:2b:ee:d0:20:a8:44:9d:fd:84:54:
da:ed:69:0b:fd:2d:3e:34:7d:77:ce:c6:3b:4e:04:
90:b6:aa:a5:11:55:bc:c8:df:9f:f2:33:e5:eb:11:
62:51:8a:b3:0a:d0:04:bc:24:26:69:6d:16:1e:be:
f6:1a:e6:12:bc:1b:74:4d:89:da:cf:53:a2:e9:82:
e1:d1:24:fc:e1:3f:c7:e5:1b:cd:ee:a4:81:ae:6b:
05:a1:82:b0:1f:2e:ae:f1:8c:21:e3:d8:cc:08:fd:
31:7b:5b:e6:d2:e3:38:b5:1d:44:02:4c:ce:fe:c0:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:43:28:27:B5:6D:82:DF:24:1C:BD:80:94:17:09:16:EF:11:39
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:42:30:88:56:e7:2a:e6:19:b8:f2:17:74:aa:58:5a:5a:1f:
a8:d9:95:86:5c:01:85:82:8e:5f:07:73:c1:d7:dd:86:16:eb:
58:32:c0:72:cd:2b:c2:cb:fa:03:eb:30:5e:d8:27:cf:30:e3:
08:ca:9b:03:23:2d:34:7a:34:18:00:73:08:23:d0:0f:1b:b9:
0b:aa:a2:6d:61:0b:12:f9:ab:1f:23:7d:56:81:32:42:10:4b:
db:54:14:ee:06:03:42:6d:d3:00:e8:a7:06:69:d0:78:fd:be:
f5:1f:76:7b:05:e8:0f:73:82:56:20:0f:a0:d8:fe:52:fd:75:
35:3f:55:2b:d6:cd:89:73:4c:10:52:ac:b4:fe:08:1e:1b:a1:
25:ce:4f:48:de:8b:f8:4c:9c:8b:58:82:9d:24:0c:57:eb:68:
30:49:1b:6c:bf:94:95:90:5b:62:02:7f:db:22:64:57:a4:b3:
d8:26:b3:12:d8:33:72:96:59:4c:09:41:14:06:ab:3c:f1:db:
4b:b4:dd:4a:72:e9:3d:c2:18:41:44:03:9e:31:b0:90:0d:9c:
41:5f:c9:31:ed:f9:c9:df:3d:ee:fb:1b:08:15:77:04:be:1f:
5c:00:b8:88:66:6c:5f:ed:69:7a:9e:47:81:0e:47:30:8c:5b:
27:8b:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:33:42 2026 by rpki-client