
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: ffktrIYAmKtXrwe2OIVqZT0ztz2uCHd+mFRdn2UAkZo=
Subject key identifier: EB:04:CD:2F:1F:C3:37:B5:A2:8E:BA:8B:30:89:EF:6A:90:32:52:CA
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 01A06F83D7B004DF871A6A8B43074F1AC435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1646
Signing time: Sat 05 Sep 2026 03:01:46 +0000
Manifest this update: Sat 05 Sep 2026 03:01:46 +0000
Manifest next update: Sun 06 Sep 2026 03:01:46 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: xWa6iWUqfiu9lElOSfMns47dYpkrPwcHByHDmVNE3z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:d7:b0:04:df:87:1a:6a:8b:43:07:4f:1a:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Sep 5 03:01:46 2026 GMT
Not After : Sep 6 03:01:46 2026 GMT
Subject: CN=eb04cd2f1fc337b5a28eba8b3089ef6a903252ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:ec:3f:1a:2c:b7:d6:96:c1:00:5e:1f:ed:
40:eb:e6:60:9e:88:ac:01:3e:93:03:00:6a:e0:b1:
fa:36:4f:dc:61:54:21:05:fb:75:5b:40:cb:dd:e3:
2a:ad:df:1b:c2:1a:a0:41:04:f3:86:9e:b4:19:b9:
01:29:50:e1:ab:c9:a4:c7:b4:1a:f3:06:b5:be:f9:
cb:04:01:dd:2a:b9:6a:e1:4f:75:bc:a0:be:d1:41:
2a:5d:36:16:d5:15:14:97:f3:aa:d8:a1:31:80:27:
11:0e:b8:78:c5:15:a3:89:af:c6:bf:99:9c:48:4c:
6d:26:34:e7:71:00:f0:2f:ab:7a:f7:2e:8a:7e:d8:
c2:1e:cb:c5:62:0e:f0:c0:ce:f9:e5:46:32:6a:ce:
84:dd:66:4c:f5:84:35:2e:0b:92:8c:75:f2:b5:a5:
3e:d8:1d:cc:d6:11:0e:48:1e:cb:88:b9:78:83:91:
1c:8a:5c:dc:69:04:57:e8:0f:22:1d:bc:a3:a3:e0:
96:4c:fe:ef:50:06:32:57:49:f8:ad:10:a2:f3:53:
e7:37:45:36:99:a5:03:2d:c2:9d:c5:2b:88:b2:f6:
6c:d2:16:f1:6e:be:9d:a1:eb:2b:af:96:d8:11:00:
43:e0:c0:3d:0e:1b:a4:a2:ba:c3:6a:2f:db:ff:ff:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:04:CD:2F:1F:C3:37:B5:A2:8E:BA:8B:30:89:EF:6A:90:32:52:CA
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:24:6d:24:0e:ae:a9:e3:47:07:73:e2:31:37:f3:b0:5d:26:
e4:d9:d5:95:23:48:17:ba:13:e8:6d:ba:06:af:0b:91:24:e8:
d0:bc:7a:87:ea:d2:20:f9:4b:1c:9c:d5:90:db:85:3a:ed:50:
c9:f5:cd:22:35:01:5a:f2:eb:2c:df:ce:45:ae:34:43:33:ff:
77:e1:13:f3:36:59:c1:60:c9:15:b6:18:79:b4:04:fc:67:5c:
2b:6c:22:15:c5:36:a2:74:56:bc:0b:12:ac:60:57:65:96:9c:
11:e8:40:1d:d4:5b:26:04:3a:0e:29:6a:33:9f:59:08:b0:10:
63:fa:5c:90:ee:4f:2d:a1:30:52:31:4b:e5:61:6e:76:46:12:
5d:5e:9f:db:7f:a2:3f:5c:79:56:8d:75:b5:ed:fa:09:25:a5:
c3:a7:7c:46:db:48:68:81:1f:5b:c2:82:f6:5b:b7:aa:c9:8b:
62:c1:63:15:ce:85:6a:1e:71:e0:1e:bf:19:15:7a:cd:31:c3:
f6:40:3c:9d:e2:a0:d7:25:ff:f4:cf:09:1a:d3:b0:a7:74:02:
da:dc:af:73:95:fe:d1:6e:a1:b0:81:ee:2b:78:b9:9e:49:71:
44:60:2b:13:3d:0e:02:67:b1:81:29:1c:67:f0:9f:f8:e4:2e:
85:ae:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:35:17 2026 by rpki-client