Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
File: a54cPjlfdldRXQ6F-zxQ01HSACA.mft (raw, json)
Hash identifier: D35zccC3YZctiSdLeb9373+5kizzGdhlvBS/1J8ImfU=
Subject key identifier: A1:F0:9B:4A:C0:EB:21:ED:AD:7C:71:E3:53:E3:EE:FD:9B:97:73:CE
Authority key identifier: 6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
Certificate issuer: /CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Certificate serial: 01A1878900A1B94994D7ECBE64852119D12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:01:05 +0000
Manifest this update: Thu 29 Oct 2026 12:01:05 +0000
Manifest next update: Fri 30 Oct 2026 12:01:05 +0000
Files and hashes: 1: a54cPjlfdldRXQ6F-zxQ01HSACA.crl (hash: iW3Qsgq/nCqiqOZQSGGtZDEaDID+1sxDYAF6dNeWp0I=)
2: zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa (hash: Y/MZK+Lf6qkYapa6jxWN717KodB4qx6aFOutmlhqzfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:00:a1:b9:49:94:d7:ec:be:64:85:21:19:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Validity
Not Before: Oct 29 12:01:05 2026 GMT
Not After : Oct 30 12:01:05 2026 GMT
Subject: CN=a1f09b4ac0eb21edad7c71e353e3eefd9b9773ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:ff:e1:2c:e2:d9:95:7f:70:d4:cc:a8:45:
a5:c0:f1:5b:df:da:bd:06:3a:b7:59:59:b6:d3:5e:
ea:0d:7a:e6:9f:ba:45:a5:f3:22:31:eb:cf:d8:30:
11:2b:82:46:41:ab:12:08:5b:db:2f:55:f0:1b:f2:
4c:43:79:5d:9e:13:6b:22:93:d3:27:49:c6:59:2b:
b4:04:f4:55:47:b7:53:85:2c:12:c1:f7:aa:08:f5:
a4:b6:55:42:37:06:90:9c:e7:7e:84:0e:de:ab:0c:
bf:c9:98:e1:64:29:b9:1c:d9:dd:b3:dd:b7:7d:b9:
5e:24:d3:2f:31:20:2e:bc:ac:9b:a3:9c:23:cd:53:
55:31:75:31:2c:21:52:3d:35:b4:da:1d:3b:dd:02:
9b:f5:1d:16:06:a3:e6:5d:f8:86:7a:d1:53:b5:ff:
6d:fe:83:c8:15:20:70:c6:19:82:05:d9:6a:fa:0d:
c1:79:4e:f8:d0:14:e7:82:0f:60:9f:bb:de:e8:7c:
fd:65:89:c7:7b:c5:a1:2e:6f:50:0e:73:04:c6:03:
1f:e9:e8:c8:49:e7:40:ca:d7:ac:89:77:d1:c1:9c:
4e:17:9b:ff:82:d2:7c:8c:99:56:2c:5c:1c:f3:de:
32:77:11:87:d6:a6:9c:55:67:7f:9f:e7:66:4f:9a:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:9B:4A:C0:EB:21:ED:AD:7C:71:E3:53:E3:EE:FD:9B:97:73:CE
X509v3 Authority Key Identifier:
keyid:6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d3:cf:32:c2:e9:f7:09:49:04:2e:91:41:c1:37:a6:c2:75:
49:ea:7b:3e:ad:59:15:eb:8a:c6:f0:5e:c7:df:d9:a9:9a:b3:
cd:52:9f:e1:9a:df:6f:06:d9:c9:42:30:19:57:52:e0:a1:3c:
ed:5b:19:84:2d:24:a4:38:92:d9:0d:bb:0b:b0:7f:61:cf:d3:
f4:fd:bb:5b:6c:21:d5:25:71:44:c9:46:58:06:e5:67:ce:7f:
9f:6e:a1:50:21:3f:0f:6f:08:25:69:ce:49:fe:be:c8:f4:6d:
40:5e:dc:40:ef:71:a7:14:25:cc:b9:f5:95:3e:54:4e:78:98:
14:3f:67:39:5f:88:e7:48:1f:9c:66:54:4b:c0:13:37:a3:3d:
8b:3f:bd:a1:95:15:82:f6:97:c5:67:1f:4b:d0:1b:35:66:ed:
4a:0c:0e:28:6d:d2:72:9e:85:1f:ea:d0:36:a2:70:ff:7d:45:
72:f4:8e:da:63:09:2d:75:d7:71:b3:25:94:06:8d:17:39:8f:
cc:3c:d4:36:51:34:72:24:af:d1:10:17:fc:c4:18:b9:f8:a3:
fb:3b:b2:36:9c:f5:94:ec:17:2d:0a:c6:90:6b:0b:53:0a:24:
4d:c7:c4:f9:f2:6a:e1:99:5c:6b:19:00:09:62:2c:c4:fd:d9:
32:29:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:04:24 2026 by rpki-client