Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: x8zHMI64IGVFyJRpnXounrtiDDJ6P7g/1O7/f3YCG2s=
Subject key identifier: 83:F4:EA:00:57:65:EA:DD:7C:D7:67:23:1A:AF:04:C4:38:36:E8:E0
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01A1DEA7C4CBC2E2E034837891EC2E463865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 10:01:39 +0000
Manifest this update: Sun 15 Nov 2026 10:01:39 +0000
Manifest next update: Mon 16 Nov 2026 10:01:39 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: /XfqwWCtbHD7+ThqaDuPHhEU2B6Txl+p2t13DM0rzCw=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:c4:cb:c2:e2:e0:34:83:78:91:ec:2e:46:38:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Nov 15 10:01:39 2026 GMT
Not After : Nov 16 10:01:39 2026 GMT
Subject: CN=83f4ea005765eadd7cd767231aaf04c43836e8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:d1:dc:d4:26:77:9b:c3:ee:6f:82:95:8f:
26:56:cf:5a:a2:ae:85:df:e0:75:84:a6:b0:44:59:
fb:2b:4e:e0:74:a0:c6:a5:e4:85:88:d7:74:c3:d2:
8e:d1:f1:1f:1f:18:eb:b2:d5:29:e7:30:63:d0:ca:
42:d9:22:62:3e:23:35:d9:b8:ab:5e:5f:6a:9b:ca:
4a:df:c6:4a:56:09:70:66:85:06:be:6d:5b:50:53:
c7:71:35:9e:4b:5f:14:bb:bc:95:e4:2b:59:79:ef:
35:cf:51:15:e4:51:fe:9b:dd:62:a2:26:1d:2e:e1:
aa:03:91:8f:72:d0:c4:cc:51:ad:d9:9c:11:c2:ae:
ef:4a:0d:2e:45:c2:48:d7:31:c0:d7:f9:79:8c:c0:
5d:51:51:bb:48:5d:3f:d9:84:49:57:44:45:b4:b6:
42:72:45:81:5f:15:b0:25:e5:2c:a9:df:8a:ca:b1:
a4:d6:59:d2:8a:a1:4d:b3:ed:56:ec:9b:db:f2:4a:
4a:1d:99:00:2f:97:66:81:f0:c5:14:30:04:10:a2:
2d:a4:0c:aa:75:b8:e7:ce:54:00:37:9b:2d:cf:1c:
91:c6:b2:d4:fe:94:c4:19:c6:7c:db:18:da:25:15:
11:9c:78:19:5f:90:25:43:13:73:31:f6:ad:c9:53:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:EA:00:57:65:EA:DD:7C:D7:67:23:1A:AF:04:C4:38:36:E8:E0
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6d:ff:d0:f8:8a:17:60:e4:e0:59:e6:cd:47:b8:8c:25:de:
30:a8:26:8f:e1:82:61:68:c3:b4:4e:80:e1:f3:b1:de:93:03:
9e:53:59:93:b0:a7:1f:1a:23:84:a6:bb:45:5c:c4:c4:19:15:
2f:d6:50:10:1b:5b:87:0b:e1:ca:90:9f:7e:dd:60:a8:07:79:
77:28:ad:7a:7e:26:e7:48:77:04:63:d3:fb:13:d7:49:16:ac:
09:ee:a9:6e:70:b0:7b:ce:cf:88:6b:02:9e:5b:d3:11:3d:df:
ca:4c:a8:5c:fd:15:06:e6:03:29:9e:3b:1e:15:39:96:51:3d:
f4:7b:18:e8:c7:f7:ec:d3:6e:0b:23:43:cb:3b:e4:cc:b9:39:
e8:b0:3d:7c:de:39:d9:96:1f:49:25:18:2b:f5:c2:59:68:51:
c8:6b:75:1d:a3:4f:1e:e0:80:c2:f6:0b:a4:6d:48:74:64:77:
b6:27:f6:75:6f:86:30:12:fc:7f:8a:e6:75:27:e8:4c:ea:36:
2b:0e:53:87:54:ea:f0:67:82:22:60:95:86:c0:42:c0:b4:36:
2d:a2:33:91:7d:63:9e:e7:45:b7:3d:b0:88:a8:e8:ca:de:8f:
f4:8f:f4:3a:01:74:6b:7e:bf:1d:ab:d4:6e:07:2f:bb:90:48:
2e:0c:c1:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep8TLwuLgNIN4kewuRjhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm
NDlkNGMwHhcNMjYxMTE1MTAwMTM5WhcNMjYxMTE2MTAwMTM5WjAzMTEwLwYDVQQD
Eyg4M2Y0ZWEwMDU3NjVlYWRkN2NkNzY3MjMxYWFmMDRjNDM4MzZlOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm97R3NQmd5vD7m+ClY8mVs9aoq6F
3+B1hKawRFn7K07gdKDGpeSFiNd0w9KO0fEfHxjrstUp5zBj0MpC2SJiPiM12bir
Xl9qm8pK38ZKVglwZoUGvm1bUFPHcTWeS18Uu7yV5CtZee81z1EV5FH+m91ioiYd
LuGqA5GPctDEzFGt2ZwRwq7vSg0uRcJI1zHA1/l5jMBdUVG7SF0/2YRJV0RFtLZC
ckWBXxWwJeUsqd+KyrGk1lnSiqFNs+1W7Jvb8kpKHZkAL5dmgfDFFDAEEKItpAyq
dbjnzlQAN5stzxyRxrLU/pTEGcZ82xjaJRURnHgZX5AlQxNzMfatyVP3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP06gBXZerdfNdnIxqvBMQ4NujgMB8GA1UdIwQY
MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt
ZTA4NTI3NWFhMzY0LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0
LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG3/0PiK
F2Dk4FnmzUe4jCXeMKgmj+GCYWjDtE6A4fOx3pMDnlNZk7CnHxojhKa7RVzExBkV
L9ZQEBtbhwvhypCfft1gqAd5dyiten4m50h3BGPT+xPXSRasCe6pbnCwe87PiGsC
nlvTET3fykyoXP0VBuYDKZ47HhU5llE99HsY6Mf37NNuCyNDyzvkzLk56LA9fN45
2ZYfSSUYK/XCWWhRyGt1HaNPHuCAwvYLpG1IdGR3tif2dW+GMBL8f4rmdSfoTOo2
Kw5Th1Tq8GeCImCVhsBCwLQ2LaIzkX1jnudFtz2wiKjoyt6P9I/0OgF0a36/HavU
bgcvu5BILgzBLw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:35 2026 by rpki-client