Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: 8a20juNrywvTMrAP+bf/JEaD7S00InF9zgG0ToSGrD8=
Subject key identifier: 2B:2A:B4:71:6E:B5:C2:A0:06:E2:C7:DD:FC:3C:4A:25:CE:75:F3:91
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 019FA07298EAFB60EE3E471EE95025E3FC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 0B40
Signing time: Sun 26 Jul 2026 22:01:32 +0000
Manifest this update: Sun 26 Jul 2026 22:01:32 +0000
Manifest next update: Mon 27 Jul 2026 22:01:32 +0000
Files and hashes: 1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: mlpJGJjPOgb/eOOzBhyMIuTANfc50DA8uwMmPmhmyws=)
2: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (hash: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:98:ea:fb:60:ee:3e:47:1e:e9:50:25:e3:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Jul 26 22:01:32 2026 GMT
Not After : Jul 27 22:01:32 2026 GMT
Subject: CN=2b2ab4716eb5c2a006e2c7ddfc3c4a25ce75f391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:5f:da:e9:2e:e8:5c:74:e5:c3:1c:ff:01:
98:18:18:ed:b8:e1:61:f8:c6:e9:ce:27:6e:9d:31:
0f:22:ba:24:fb:93:92:ba:a9:8d:65:49:95:71:06:
e8:9a:dd:ec:55:8a:41:08:b8:e4:02:52:6a:e3:7e:
b7:35:3c:7b:c1:d0:df:25:2f:6e:37:09:82:94:ba:
fe:6f:40:f3:af:20:6c:b4:fd:4b:03:9e:b3:7b:80:
37:ef:f1:f4:0b:cc:74:54:79:bd:71:52:dd:ed:b5:
c9:76:b0:3f:4d:9c:78:13:5b:18:86:8c:9b:13:97:
e6:71:e4:15:37:bb:10:e4:37:49:be:ff:a1:57:55:
56:7c:ef:a4:13:73:33:65:3d:ed:53:51:ac:44:19:
43:91:3e:b3:09:7c:0c:8a:e4:98:9c:72:76:80:db:
73:c6:70:b5:f7:96:eb:e4:10:db:64:e4:99:24:54:
78:ce:3b:71:49:f7:d2:bf:1b:b5:91:c7:bd:28:88:
bd:c5:cd:fc:1d:3d:bc:62:29:4d:35:5f:94:55:bb:
84:69:5c:8c:a8:29:4b:0e:d0:07:de:99:b1:d7:a9:
20:36:7b:90:c1:92:03:73:dc:5a:6b:3e:9f:60:2b:
b0:d7:fd:37:52:70:74:41:5c:ed:cb:f6:ff:fc:b4:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:B4:71:6E:B5:C2:A0:06:E2:C7:DD:FC:3C:4A:25:CE:75:F3:91
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fc:2f:21:f7:5a:07:ac:5a:4d:ac:c8:cd:7a:61:c2:cd:30:
ba:55:73:87:51:fc:16:9b:db:da:bc:59:1e:5b:5a:51:7f:7b:
30:50:ea:f1:08:6d:b2:40:3d:26:16:2f:76:0d:11:cc:96:35:
0e:c3:c7:cc:e2:43:65:60:b6:27:5f:17:06:39:20:36:f1:d8:
be:d2:3c:7a:0a:25:45:2a:a1:46:b3:ca:92:47:ae:00:ec:bb:
95:e2:5b:78:bd:69:6c:2a:aa:f3:34:c5:f0:60:52:2e:7c:d0:
ea:0d:4d:6c:84:d5:16:32:81:50:3d:f5:ac:d7:a2:7b:02:25:
4e:94:be:3d:2b:e6:ac:d1:b2:22:d9:3c:f8:a7:a5:b5:6e:b8:
95:66:55:74:24:d6:cb:f6:ea:e5:4e:a6:58:16:52:81:cd:9b:
51:31:d6:d3:02:e3:17:63:30:84:41:30:9c:87:11:35:15:ca:
94:ef:1d:ad:5f:f0:87:c6:a5:23:66:e7:f7:22:a7:7c:e5:25:
0f:fe:fc:10:31:05:c7:76:c7:f3:fb:13:4b:70:a2:58:85:ab:
04:d7:a3:b4:e2:d6:4f:c5:cd:de:78:50:bf:a2:a4:4d:96:04:
8f:5e:a3:b0:fb:ee:8c:7e:aa:15:a6:53:bf:46:76:cc:73:7f:
67:82:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:08 2026 by rpki-client