Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
File: A2buGcyLQ0A-42qUouguQBnjUdE.mft (raw, json)
Hash identifier: dUNSkrX310wBomRWS7eywR1j+KOzbGq9v0S7e2/iz8Q=
Subject key identifier: CD:86:DC:62:1F:CF:F7:73:62:C1:02:95:16:0A:07:4A:47:28:C4:AC
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Certificate issuer: /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial: 01A1784C930859FF70496C3E85B77EA23801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
Manifest number: 0122
Signing time: Mon 26 Oct 2026 13:00:46 +0000
Manifest this update: Mon 26 Oct 2026 13:00:46 +0000
Manifest next update: Tue 27 Oct 2026 13:00:46 +0000
Files and hashes: 1: A2buGcyLQ0A-42qUouguQBnjUdE.crl (hash: DfpiFriaWISQ30X6Nmk8EEgRAkCKpNkjBlrxqUtvXyk=)
2: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (hash: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:4c:93:08:59:ff:70:49:6c:3e:85:b7:7e:a2:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Validity
Not Before: Oct 26 13:00:46 2026 GMT
Not After : Oct 27 13:00:46 2026 GMT
Subject: CN=cd86dc621fcff77362c10295160a074a4728c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:22:9e:7e:58:9a:b8:5e:dc:f4:63:49:9d:
02:60:7d:a3:7e:b1:b5:34:ca:b1:5c:d9:e7:93:8b:
8c:d5:2a:2b:85:cf:8c:ac:30:cc:c6:95:1a:c3:99:
2b:57:69:ec:1b:66:32:92:e6:55:08:a9:ba:62:b0:
e5:08:f0:74:85:f4:e7:5c:fb:af:d4:58:96:22:4f:
3c:55:7b:85:15:a5:4b:f4:35:c7:dc:7f:e2:a8:7d:
b8:92:b4:0b:04:dd:79:cd:fb:eb:c9:97:a8:07:9e:
a8:4d:24:9b:d2:d3:98:1f:bc:b6:a6:5a:1f:e4:cc:
a8:f2:81:5b:69:e2:b3:5f:1d:f0:bf:33:17:16:db:
8c:ae:ac:ad:1f:a0:12:6c:58:a0:a5:a1:eb:04:99:
a3:70:f8:86:8d:13:79:31:0e:b0:3e:d7:ac:4c:12:
f0:ac:a8:a6:34:ad:25:87:d4:31:b1:fb:dd:86:7c:
13:db:e8:03:88:45:81:7d:3b:68:32:4c:b3:5d:f8:
f8:8b:9b:28:34:3a:17:0c:e8:53:39:81:d8:a1:73:
03:94:a6:af:fd:7c:aa:ce:a2:6c:3f:35:81:e2:87:
35:21:46:b3:c3:56:09:94:6c:a8:db:05:25:8b:cf:
8e:b6:57:b0:9b:19:ab:ef:fc:b4:92:24:99:ed:13:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:DC:62:1F:CF:F7:73:62:C1:02:95:16:0A:07:4A:47:28:C4:AC
X509v3 Authority Key Identifier:
keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:44:13:36:d6:77:2f:1e:a8:6b:36:06:ce:97:94:93:54:66:
32:d6:73:8d:f0:79:b8:15:27:8b:6e:89:4c:22:49:96:e7:ac:
a1:26:d2:6a:7f:f4:6e:7a:7f:5f:fe:bd:c0:e6:cf:dd:e4:6b:
9b:5f:34:a8:3c:c0:df:5e:82:74:a4:59:57:1b:9c:3d:15:a8:
f8:66:3a:e3:e0:4e:df:45:17:85:2c:5b:f3:86:7d:df:22:5a:
36:45:9e:93:11:ff:0c:23:8b:52:a9:46:63:89:9a:6c:ef:d8:
84:86:c2:36:6b:61:6e:96:4d:a1:a9:ee:27:f8:af:08:76:48:
19:86:f0:d4:f1:91:d5:fb:16:e0:8d:e2:4a:45:1c:90:83:f7:
11:20:55:69:f5:56:35:27:cb:36:b3:7f:8d:a9:5c:d3:1c:1d:
47:9e:58:ad:04:e1:c3:35:72:85:7b:48:a1:28:a0:cb:ee:c6:
3f:01:69:fc:9e:c0:79:f3:98:fb:13:41:cf:38:bf:dc:b1:d0:
74:1e:38:cc:9d:c6:78:40:df:ca:27:f9:80:d5:01:0c:9e:29:
17:c4:55:84:c7:53:77:c1:a5:d6:d5:9b:9c:ed:88:81:c5:b5:
ff:1a:e5:cf:80:67:2f:f4:d1:5e:dc:b8:d2:b6:89:94:fb:6b:
4e:cf:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:28 2026 by rpki-client