Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: qARGixQZH+rdCSOXfozgsREQF9CS+SHVISH+2wwQyes=
Subject key identifier: 25:CF:D8:0B:61:BC:A6:98:B6:C3:5D:D2:67:4C:28:78:08:49:69:B7
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 01A08C0CDFEB76B36FCF2424B60B5FDED93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 0BBA
Signing time: Thu 10 Sep 2026 16:00:49 +0000
Manifest this update: Thu 10 Sep 2026 16:00:49 +0000
Manifest next update: Fri 11 Sep 2026 16:00:49 +0000
Files and hashes: 1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: NUussXNG3Y+em68l3BDsiy9xrK+RmRKryWlrMCVsSPU=)
2: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (hash: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:df:eb:76:b3:6f:cf:24:24:b6:0b:5f:de:d9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Sep 10 16:00:49 2026 GMT
Not After : Sep 11 16:00:49 2026 GMT
Subject: CN=25cfd80b61bca698b6c35dd2674c2878084969b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:b7:1b:9c:84:b4:ca:f5:98:16:06:3a:49:
e3:50:a6:23:05:b1:4a:93:9a:86:8a:ba:ae:98:24:
58:6c:91:f4:7c:db:a8:74:16:d4:a4:e5:53:b2:d7:
3c:81:74:75:ae:f6:7c:ab:f8:4b:b2:ae:bd:09:c2:
e1:47:4b:a7:f8:4d:84:8e:b7:ad:26:51:9e:8c:4a:
d1:bf:36:79:90:fd:43:bc:1c:cf:c6:27:95:6b:03:
71:80:12:66:0d:ef:75:8f:5c:3e:8e:9b:8e:17:70:
b3:6b:06:8b:ef:c1:70:97:57:cc:a3:d5:dc:25:e1:
e1:95:4b:8e:c4:54:dd:52:40:2d:4c:d5:23:e7:e3:
9f:61:47:3f:13:f9:b0:b2:9b:f1:81:6f:21:a3:8e:
a5:58:0e:ee:61:36:df:e8:9b:cd:5e:90:fe:90:57:
d3:a8:f1:83:cb:d8:52:8f:48:63:c4:d9:00:3e:15:
81:33:d9:26:db:d2:ff:eb:85:72:29:33:f6:ee:b1:
b0:ea:8c:7e:e3:03:39:09:e2:7c:21:87:06:93:fb:
0f:a5:50:e3:b8:70:45:58:ab:58:11:84:b6:d3:5e:
eb:6a:e9:53:24:d0:9a:47:96:b4:9d:60:70:8d:0e:
11:a7:63:db:68:9f:26:f0:eb:e1:99:ad:99:18:ca:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:D8:0B:61:BC:A6:98:B6:C3:5D:D2:67:4C:28:78:08:49:69:B7
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:42:65:83:45:af:cf:75:8c:3f:c1:08:df:7e:6a:01:71:
8e:24:21:cc:fb:ea:1c:45:22:ce:a4:9c:aa:89:73:f3:24:19:
09:19:67:ac:fe:d8:0e:f1:b5:7d:eb:1d:c6:f1:45:d6:16:de:
69:3f:ec:5c:32:5d:6d:92:a5:c6:86:67:82:3d:a8:f4:54:79:
ed:07:92:80:66:2a:37:90:89:3f:99:89:18:fe:7f:6a:1b:6a:
0f:c9:e3:50:5b:d8:04:d4:df:2d:bb:a2:23:cb:46:4e:21:2a:
4a:3a:6d:f3:58:6e:5f:25:b4:1e:bc:fb:51:87:cd:c1:f2:51:
30:d0:4e:47:71:fa:82:e3:0f:45:a6:cc:a2:00:80:ab:0b:1b:
b9:78:ca:90:f0:ba:f5:ba:10:c8:e2:0b:d3:e7:72:31:c6:85:
23:1e:5b:50:8c:17:7d:ed:a4:06:d3:5a:a8:eb:92:06:af:83:
3b:c3:01:08:18:56:92:23:00:b2:f2:66:20:03:55:17:1e:44:
8d:08:f7:52:51:65:dc:08:1a:c7:81:b7:58:bb:bc:34:5b:44:
6d:ec:a0:dc:72:6f:e1:81:2d:1a:c8:ea:d4:c3:b6:8b:ce:5c:
de:a3:3f:1b:a6:80:cb:db:d6:f8:6c:11:b4:5d:31:c0:bf:84:
f1:cf:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:58 2026 by rpki-client