Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: bymNsxFPuCmRukHWW8cgw0KDSZvPY2+EjgwGNKN4rXc=
Subject key identifier: 7F:F6:1D:0E:A2:44:F5:7E:BA:97:89:8D:98:CD:84:3D:5B:F7:A4:93
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 01A0C9D8B9D7D2240F34BA3CCDA59ECFED02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 16F8
Signing time: Tue 22 Sep 2026 16:00:18 +0000
Manifest this update: Tue 22 Sep 2026 16:00:18 +0000
Manifest next update: Wed 23 Sep 2026 16:00:18 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: bn3j61GlHqAO1U2W4DeRFJKfJO7LD04nXxuJliQcG0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:b9:d7:d2:24:0f:34:ba:3c:cd:a5:9e:cf:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Sep 22 16:00:18 2026 GMT
Not After : Sep 23 16:00:18 2026 GMT
Subject: CN=7ff61d0ea244f57eba97898d98cd843d5bf7a493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:af:97:ee:89:8d:86:ae:64:ac:58:fc:07:
45:fd:23:98:4d:35:d1:46:da:1a:87:1e:d1:ca:4b:
d8:e7:26:14:7f:43:a1:50:fe:20:75:03:6d:14:c6:
86:a3:1c:9d:a9:cc:80:38:81:95:e9:a7:eb:cf:68:
e7:f6:43:c4:a9:4f:32:c0:0e:83:74:ba:a6:6c:d9:
c7:22:d0:b6:c4:47:a8:ba:2a:50:fd:2b:9b:a4:f2:
d0:c9:fe:2f:bd:f7:a9:fb:2f:c7:e3:5e:dd:82:57:
7f:cf:91:6f:43:8b:cd:d6:7c:f4:67:19:20:52:20:
52:83:e3:73:15:32:71:78:b3:12:91:de:9b:1d:49:
21:d0:72:79:c2:b5:7e:9d:5e:e2:71:10:46:53:1c:
f9:32:b2:b3:62:52:ee:49:fe:08:d8:16:9a:56:1f:
87:0f:7a:b9:32:8d:14:04:9c:e7:1f:14:d9:ea:ed:
df:a3:e5:16:69:50:d0:68:5c:4c:db:7b:69:20:dd:
88:31:49:1e:34:b4:08:39:a4:e1:fb:57:bf:c6:62:
8d:1d:b9:b5:b7:2b:fb:0e:c2:da:ec:39:f3:9d:70:
f3:75:30:e0:2d:60:10:f0:cf:c4:7a:ee:3d:b4:b6:
5d:17:f8:83:5d:c6:dd:26:08:9a:9d:0b:06:f0:6a:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:1D:0E:A2:44:F5:7E:BA:97:89:8D:98:CD:84:3D:5B:F7:A4:93
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:65:19:5d:d0:29:d7:08:20:86:c7:08:3d:de:21:5c:32:
05:24:37:99:16:c6:14:64:59:4c:07:6f:02:9a:51:06:a2:95:
f0:b6:02:4d:9f:d1:92:6a:16:fa:c7:28:16:d7:35:dc:5e:f3:
4c:65:e6:91:fb:1c:a6:01:46:92:81:40:71:bd:14:ec:19:f9:
8c:bf:5c:ea:09:02:0d:fc:e5:75:1a:9b:2c:32:9f:93:d7:9a:
bd:3e:3d:46:3d:39:04:24:56:36:ba:c9:7b:76:28:9c:4d:5f:
eb:d2:31:a1:b4:0a:e2:84:3e:06:ab:52:91:a4:47:3e:ed:e8:
d1:35:03:ab:96:14:a7:b8:8d:8e:95:14:d6:e5:02:31:ef:b4:
e3:9b:cc:fb:5d:6e:82:47:ba:de:a5:be:bd:b3:8e:9d:56:18:
cb:29:03:47:20:a6:a9:65:0a:cd:38:05:ad:53:3b:68:ee:84:
90:2a:fd:7b:33:7e:a5:9c:6a:33:c7:9d:88:9c:a4:51:43:f9:
a9:b8:f1:f2:f0:32:69:aa:2a:3f:03:02:7b:11:5c:97:36:4d:
3b:50:41:9f:5a:8c:ed:c1:6c:63:d5:04:16:06:b9:30:96:b4:
21:01:e5:fa:53:ae:4c:9e:68:fc:e1:b9:03:49:e3:61:53:08:
00:d5:8a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2LnX0iQPNLo8zaWez+0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjg0N2IyOTcyMzVmYWYwNzE2ODZmZWQyYzFlOTEwYmY2
MDA0ODYwHhcNMjYwOTIyMTYwMDE4WhcNMjYwOTIzMTYwMDE4WjAzMTEwLwYDVQQD
Eyg3ZmY2MWQwZWEyNDRmNTdlYmE5Nzg5OGQ5OGNkODQzZDViZjdhNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbKvl+6JjYauZKxY/AdF/SOYTTXR
Rtoahx7RykvY5yYUf0OhUP4gdQNtFMaGoxydqcyAOIGV6afrz2jn9kPEqU8ywA6D
dLqmbNnHItC2xEeouipQ/SubpPLQyf4vvfep+y/H417dgld/z5FvQ4vN1nz0Zxkg
UiBSg+NzFTJxeLMSkd6bHUkh0HJ5wrV+nV7icRBGUxz5MrKzYlLuSf4I2BaaVh+H
D3q5Mo0UBJznHxTZ6u3fo+UWaVDQaFxM23tpIN2IMUkeNLQIOaTh+1e/xmKNHbm1
tyv7DsLa7DnznXDzdTDgLWAQ8M/Eeu49tLZdF/iDXcbdJgianQsG8GrFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/2HQ6iRPV+upeJjZjNhD1b96STMB8GA1UdIwQY
MBaAFANoR7KXI1+vBxaG/tLB6RC/YASGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80NGI3OTctY2Q1Yi00ZGVkLWE1NjIt
YmRkNzMyOGU5NGNiLzEvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80NGI3OTctY2Q1Yi00ZGVkLWE1NjItYmRkNzMyOGU5NGNi
LzEvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcZlGV3Q
KdcIIIbHCD3eIVwyBSQ3mRbGFGRZTAdvAppRBqKV8LYCTZ/RkmoW+scoFtc13F7z
TGXmkfscpgFGkoFAcb0U7Bn5jL9c6gkCDfzldRqbLDKfk9eavT49Rj05BCRWNrrJ
e3YonE1f69IxobQK4oQ+BqtSkaRHPu3o0TUDq5YUp7iNjpUU1uUCMe+045vM+11u
gke63qW+vbOOnVYYyykDRyCmqWUKzTgFrVM7aO6EkCr9ezN+pZxqM8ediJykUUP5
qbjx8vAyaaoqPwMCexFclzZNO1BBn1qM7cFsY9UEFga5MJa0IQHl+lOuTJ5o/OG5
A0njYVMIANWK0A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:35:33 2026 by rpki-client