Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: WP8dUlrRY+rnR83L34UbL1+KpsKoGAKOkER31Eqe5Bc=
Subject key identifier: 4D:63:21:05:54:22:8F:14:CA:5F:7B:FB:83:21:AA:ED:2A:B7:09:8A
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01A0C2C41C147DF8D1F13211A4619EF0F0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 07:00:27 +0000
Manifest this update: Mon 21 Sep 2026 07:00:27 +0000
Manifest next update: Tue 22 Sep 2026 07:00:27 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: MQSZhaDxvzIVFXVkDK+ILdOfBYrBJ+mfPEHmPlWPAFQ=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:1c:14:7d:f8:d1:f1:32:11:a4:61:9e:f0:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Sep 21 07:00:27 2026 GMT
Not After : Sep 22 07:00:27 2026 GMT
Subject: CN=4d63210554228f14ca5f7bfb8321aaed2ab7098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:cd:87:c9:d5:9c:f8:dd:30:7a:7a:3e:b5:
c2:2c:fa:3c:c1:b2:dd:b7:45:6e:7c:1f:da:8e:37:
ae:d9:19:14:39:27:c6:cc:bd:1e:f8:6b:86:94:dc:
c0:35:6c:22:bc:69:80:6d:17:ec:4d:bc:ec:0e:67:
a5:77:68:68:6b:38:0f:74:ef:7d:09:ad:4a:a2:ab:
50:2d:23:a4:dd:b3:33:be:c6:4b:63:91:28:43:93:
4f:be:62:d3:10:43:10:c7:7c:5d:0c:92:e8:9d:b4:
f3:4a:61:46:7e:c7:d3:35:ee:ca:52:84:10:b3:14:
32:ba:42:1e:02:8c:68:7d:31:11:a2:0a:e6:d0:5a:
29:78:a7:fb:84:1d:5b:9e:b1:dc:87:b0:fc:6f:57:
36:b8:0e:f5:c3:7f:4c:97:71:32:69:d5:7e:34:28:
b0:95:01:a1:98:ee:6d:04:5d:3d:c7:56:f0:ac:ce:
eb:0c:11:58:2e:33:0c:a5:6e:c6:4d:6e:ea:1c:64:
11:fe:e3:5e:e6:dc:ac:04:19:76:26:22:bd:f4:00:
da:c4:7b:06:b7:84:c1:37:99:bb:b6:fd:4f:7f:68:
72:57:9e:33:fb:ba:7f:d3:39:b9:8e:a0:00:e9:4a:
38:41:45:6a:06:bd:97:a2:3f:84:52:36:f4:a3:7d:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:21:05:54:22:8F:14:CA:5F:7B:FB:83:21:AA:ED:2A:B7:09:8A
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ff:fb:18:c7:8c:02:20:a3:14:49:06:59:0d:41:97:a6:e4:
8f:82:f4:b9:cd:98:26:42:33:10:55:3e:dd:da:d7:e8:b1:85:
11:27:27:a2:24:44:8f:a4:d6:00:d8:0a:11:3d:06:cb:ad:37:
97:7a:66:69:38:40:29:86:07:74:3a:4f:ae:5f:8f:04:d3:fd:
84:22:e3:66:9e:35:26:1d:4e:c7:dc:a8:15:34:59:33:f4:38:
fc:39:f9:7f:0d:bb:a8:52:83:fc:04:45:28:b6:04:db:4d:3e:
a0:b4:e8:9e:a3:d0:b1:cd:75:cc:30:38:79:22:8e:d2:93:87:
b3:97:98:53:bd:2d:49:be:12:be:99:88:66:7d:e9:ef:54:d1:
1f:50:ba:12:02:14:37:29:99:64:95:aa:58:b4:e0:42:c8:86:
10:6c:5a:da:00:8a:01:2c:5a:6d:de:ec:d1:a2:c5:2e:72:b1:
69:90:df:a1:3b:1f:d4:4b:5a:ba:ff:31:6c:f1:6b:11:48:95:
ec:00:d5:e3:5a:07:f1:96:f4:4b:2a:98:41:21:bf:ce:88:ab:
12:27:ab:58:4e:ed:10:86:7d:35:92:39:47:19:19:10:4e:8b:
d5:5f:22:fa:93:39:6f:f5:03:69:d3:17:ca:7d:78:86:4b:95:
36:0a:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:37 2026 by rpki-client