Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: IUpFZa6U52omlXvLbOINWe+rbNKuhBr00HPxkl1BB44=
Subject key identifier: C4:54:84:B7:E7:78:85:69:FD:57:B0:FD:F1:D1:03:46:81:21:CE:71
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01A0C70F12181412BDF4EFA9A2DF782C84C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 03:00:48 +0000
Manifest this update: Tue 22 Sep 2026 03:00:48 +0000
Manifest next update: Wed 23 Sep 2026 03:00:48 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: BHz3STK8LhoiIz7KU3dMV1B95V/9EYMJJyTyC00Siyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:12:18:14:12:bd:f4:ef:a9:a2:df:78:2c:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Sep 22 03:00:48 2026 GMT
Not After : Sep 23 03:00:48 2026 GMT
Subject: CN=c45484b7e7788569fd57b0fdf1d103468121ce71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:f6:33:3c:78:44:7b:a4:e7:6c:4b:eb:90:
76:e2:eb:c2:68:c1:63:94:ff:d4:0f:86:91:0f:73:
e4:71:70:d9:f1:32:b0:34:b6:b9:f6:5e:c6:96:2e:
df:23:2e:fd:e0:fb:fe:0b:9e:f2:9e:6a:c2:6e:75:
6b:c7:a7:8c:96:21:60:02:2f:59:5e:c0:b0:8a:86:
49:44:14:42:4d:fa:5e:0a:d0:ce:54:46:36:6d:10:
f7:11:b6:aa:d1:9b:9f:04:e9:1f:11:d9:59:58:a2:
40:dc:b6:2e:aa:b6:fd:76:7c:18:01:d1:18:2e:6b:
1b:00:65:93:08:09:2e:74:db:be:50:09:d1:46:9a:
10:07:9b:28:df:cc:82:0a:13:cd:7d:1f:67:b5:d7:
83:39:03:72:17:af:58:2d:d8:14:26:48:b9:50:f5:
5f:95:68:99:34:fd:29:2d:61:43:b0:f2:c4:13:d4:
60:77:57:ea:33:65:dd:5f:49:d5:4c:1e:68:c9:1c:
c1:c3:8c:3d:3c:4f:ce:1b:4b:be:b8:e6:bb:bd:cd:
22:23:11:d4:70:16:61:aa:3f:ad:ee:69:f2:d9:a4:
7b:04:fa:ef:d3:2f:83:aa:f5:e0:6f:a9:dc:f1:9c:
ff:6b:06:0f:6b:a7:25:74:2a:f8:26:c4:0e:08:44:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:84:B7:E7:78:85:69:FD:57:B0:FD:F1:D1:03:46:81:21:CE:71
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:53:42:81:8d:f1:a8:11:9f:d8:3e:dd:e9:80:70:c2:f2:3b:
69:dd:66:a0:0e:b4:0a:87:89:8a:a7:46:c8:5f:ba:b0:8f:b3:
0d:56:64:f9:6c:d2:ca:7b:f9:b9:bd:cc:26:88:7e:cc:d4:59:
47:71:4d:69:6f:d2:80:c3:cf:f4:ca:25:87:90:46:63:57:54:
15:85:70:73:4f:db:4b:d0:4a:45:53:76:d4:60:49:d4:b3:08:
19:b8:4c:2a:e9:45:7c:86:1a:c3:95:0c:05:b9:8d:75:86:9f:
d5:ab:a8:65:e0:76:81:1b:a9:e8:bc:fb:c2:e2:fc:00:1c:67:
71:9c:c6:7f:ef:00:39:1a:67:45:2e:e6:57:12:93:b3:6c:cb:
79:37:fb:96:fc:6a:88:79:7b:71:35:20:fc:e3:81:d5:82:08:
63:15:f7:f4:82:a7:dc:4a:9a:3c:bd:30:d2:e4:eb:c4:e9:a8:
68:03:79:be:64:ba:96:fc:65:66:3e:63:1a:0e:d0:b4:6f:98:
8d:e8:2c:af:17:af:e3:f7:9a:16:67:75:e2:16:85:5d:03:c5:
92:fb:ff:31:9f:f2:0f:d4:9f:9d:23:35:4b:4f:5f:7f:43:d3:
80:f7:06:b9:9e:f5:09:27:6e:14:86:f6:3f:8d:0b:03:86:cf:
ce:e2:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:52 2026 by rpki-client