Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: 6D7LVTbtkveXXcPpcSUzpvxO5/xz74BIHi+6bwq7Ugs=
Subject key identifier: 3D:3C:4D:C1:4B:04:50:AC:0C:A5:C4:E7:7E:15:ED:64:A9:7D:EB:23
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 01A1076F1F777B321FE20FA07248C28F42F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 15:01:25 +0000
Manifest this update: Sun 04 Oct 2026 15:01:25 +0000
Manifest next update: Mon 05 Oct 2026 15:01:25 +0000
Files and hashes: 1: MuWBM4y_8sU7g6FEyEJdZpch7MA.roa (hash: polciHBhuEIudcpVsohkilsNPMnWK3IMSBDrJXYyToE=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: F3DB6e+HFn7laAdXV/ApFQkIWc8YIHM9lV5AUxaPAHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:1f:77:7b:32:1f:e2:0f:a0:72:48:c2:8f:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Oct 4 15:01:25 2026 GMT
Not After : Oct 5 15:01:25 2026 GMT
Subject: CN=3d3c4dc14b0450ac0ca5c4e77e15ed64a97deb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:26:42:08:1d:74:cf:f5:1d:be:9b:ba:75:
13:b0:79:1b:85:f6:61:35:43:96:72:80:ee:85:e5:
80:51:06:4e:37:5d:b3:ef:68:bf:78:fd:a6:07:27:
06:58:c5:f9:91:91:a9:88:bd:bd:98:30:c2:b9:e5:
fc:2c:9b:98:d9:36:38:25:9d:e2:b0:1a:cf:f3:e1:
4b:0f:e6:e7:47:d3:d1:c0:29:98:d4:10:f4:88:ff:
15:8b:02:72:e2:e8:4b:f5:97:37:49:a5:19:36:9d:
a1:07:9d:c1:42:22:61:87:2b:04:98:7f:fc:bb:aa:
12:9a:96:02:4b:da:9a:cd:55:1b:fb:82:d6:02:33:
fa:f3:23:92:24:a0:6b:6f:76:af:17:0e:87:58:19:
ad:59:3f:c9:09:fd:ae:fb:1a:30:be:35:ef:78:46:
63:63:70:ea:73:83:a1:5e:c1:2c:07:08:dc:d0:c8:
1e:8c:f4:8c:48:15:c9:37:b8:07:60:a1:70:c5:ea:
47:c8:52:46:2b:fb:fb:8d:c0:81:37:00:a4:de:fd:
5f:5d:78:05:08:1b:3e:d5:ca:36:e9:15:c1:e1:73:
41:d6:82:0c:c5:eb:91:85:cb:21:9a:96:89:1b:f3:
ad:d1:4a:a3:58:e2:58:e5:25:f7:4c:20:d4:df:87:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:4D:C1:4B:04:50:AC:0C:A5:C4:E7:7E:15:ED:64:A9:7D:EB:23
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:96:bc:9e:95:57:3f:cf:31:c3:52:91:ce:0f:0f:14:cf:
0c:b3:8b:e5:91:70:e7:c4:07:54:4d:68:3e:b9:40:f3:18:81:
46:7c:c0:a1:84:97:bb:28:e9:a1:eb:96:43:94:50:d2:a2:33:
01:f5:84:0b:06:d2:a0:15:5a:ee:40:cc:51:4f:04:10:b1:7f:
8a:2c:41:b8:c4:cc:9a:93:4c:62:4d:1c:3a:cc:b4:fc:1b:36:
25:4a:03:03:93:e5:3d:2b:e7:6d:3e:e9:bb:f3:01:6c:74:62:
c2:7c:4b:33:da:96:02:2c:a4:58:6e:63:cb:b5:1e:6c:c6:ad:
4a:2f:92:2f:e0:f0:f4:11:95:fc:0e:9f:d7:bc:2d:77:5e:7d:
52:3a:dc:be:f9:77:d2:2e:98:d8:cc:dc:c9:d0:73:59:58:5e:
5a:6b:7a:e7:1e:fd:99:56:ab:e3:ce:83:7e:f9:39:55:2f:30:
7a:cf:2b:6a:70:d9:a1:a4:7b:bd:40:f7:fa:12:08:fa:05:2b:
11:24:b3:81:46:a8:b6:ca:3e:0a:7c:79:4d:8f:c8:d0:7c:c5:
05:4b:c1:ea:9c:0c:8d:14:0d:92:78:37:a0:a5:cf:27:cb:17:
40:5d:98:28:bc:c9:a4:8e:2f:40:42:12:23:cd:5c:f2:17:dd:
6b:06:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:57:31 2026 by rpki-client