Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: NXfce99+0bat+Zb5hzbabvfyysx+BQ82oPeZ/wrDUQU=
Subject key identifier: 12:6C:59:C5:66:A6:10:31:DA:1B:16:52:01:40:E9:DF:AF:31:B2:4C
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 01A0BD9DF02223590599132178058DB5F11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0ACD
Signing time: Sun 20 Sep 2026 07:00:39 +0000
Manifest this update: Sun 20 Sep 2026 07:00:39 +0000
Manifest next update: Mon 21 Sep 2026 07:00:39 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: /TkRB/B//p0wzxELTdUbXUfEN5Qtbp5+7Dv6azCscQg=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:f0:22:23:59:05:99:13:21:78:05:8d:b5:f1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Sep 20 07:00:39 2026 GMT
Not After : Sep 21 07:00:39 2026 GMT
Subject: CN=126c59c566a61031da1b16520140e9dfaf31b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:f9:51:27:9c:ce:7b:6c:14:70:7e:9d:36:
18:5d:ef:76:69:f0:5f:cc:e8:b6:fe:3d:34:d5:65:
1e:28:fb:fa:85:81:d7:ea:e4:90:3d:de:dc:7e:7e:
e6:58:be:65:91:f6:de:b7:ef:4d:1d:83:b3:14:11:
d4:f2:51:6b:94:69:9a:d7:3d:db:38:57:bd:bf:de:
4f:86:5b:5c:d5:be:6b:42:28:ff:28:a2:68:40:13:
4e:a8:99:1f:65:fa:fc:0e:56:8a:f7:dc:78:18:96:
a1:86:b4:60:95:93:29:01:57:bb:39:f8:45:8c:1c:
52:b4:61:a6:9a:ce:7f:a4:8b:4b:b4:6c:82:49:9a:
e1:33:a6:a2:e4:76:92:ab:95:0d:f3:61:28:19:54:
4e:ed:9f:9b:52:ba:0f:0d:b4:6b:12:c5:35:81:b9:
eb:bb:0e:dc:eb:cf:89:2e:ba:cf:4b:fe:8f:76:9a:
b3:80:51:23:62:c8:ed:f7:c8:22:bb:8f:63:0f:0e:
43:97:32:7f:cd:f0:4c:63:16:32:96:a6:4b:5e:0c:
74:58:d4:09:70:c7:9f:a9:f3:56:92:a4:a3:8d:eb:
80:1d:4e:f4:32:2f:df:4f:a9:24:e0:c1:bd:c0:a6:
80:aa:73:e8:dd:8e:11:2d:c2:1b:60:fd:00:9c:96:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:59:C5:66:A6:10:31:DA:1B:16:52:01:40:E9:DF:AF:31:B2:4C
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b6:e7:2e:3c:ad:0b:6d:b7:a7:27:f8:c4:aa:97:10:53:7b:
4a:9e:e3:12:2b:62:8a:b3:1f:f9:11:d4:c3:f8:ec:7e:4a:06:
29:df:6c:53:a6:a4:ae:46:d5:d7:fe:28:87:60:28:10:60:c3:
fd:3c:91:a7:c4:4d:b4:69:dd:41:7a:be:00:8e:3a:cf:56:95:
79:8f:70:a4:28:be:61:b6:08:fc:d3:85:0f:67:98:c0:c3:0d:
5c:d8:ad:68:a6:b9:ea:cb:7e:3f:47:7f:f8:23:ae:34:3d:0c:
56:a4:1a:22:9c:76:cc:05:03:24:7e:31:2a:a2:ed:9d:32:4b:
ea:5b:34:4d:74:c3:f4:22:28:82:39:37:0d:73:a0:bf:71:73:
13:76:b3:42:3a:4c:b2:27:0e:8e:af:76:ea:44:75:52:a4:32:
fa:0e:a9:d3:8b:c9:77:af:f5:73:cb:e7:f1:27:ea:a8:59:06:
1b:8b:14:74:8b:9d:26:ac:b7:dd:a4:ed:7c:36:b4:59:8e:ea:
0e:36:78:f6:c6:dc:e1:b3:03:d8:09:4c:ba:40:9b:05:3d:ff:
66:5a:1c:f5:9c:b3:bc:2e:90:31:29:75:44:18:17:89:fa:c5:
7e:19:c5:66:87:0b:ca:a2:8c:6d:d2:c4:3d:15:39:0c:bd:c3:
93:e5:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:24:03 2026 by rpki-client