Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
File: A86wnV7qahjljf3v6_KbQQXgJnw.mft (raw, json)
Hash identifier: a1zG+ZzbZCaYdBqgBLE9kGXhg66LEUsmDDogmbo8w6c=
Subject key identifier: 28:A1:62:FE:45:BB:57:D7:49:F2:01:B9:48:EE:BC:93:D0:41:EA:39
Authority key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Certificate issuer: /CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Certificate serial: 01A12542B71EAA4E62AF8DACDC768391FC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
Manifest number: 095E
Signing time: Sat 10 Oct 2026 10:01:31 +0000
Manifest this update: Sat 10 Oct 2026 10:01:31 +0000
Manifest next update: Sun 11 Oct 2026 10:01:31 +0000
Files and hashes: 1: A86wnV7qahjljf3v6_KbQQXgJnw.crl (hash: GerLdMWy2YJOY0qztNIn0tSnDgT8FeUglaHWfzGIyHs=)
2: JimNs2i_obmdv5Qfa9sJ0WhnO_Y.roa (hash: khtm5pt40oNa8FPq78IsRE7crtD9nigpDInHqNXz/Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:b7:1e:aa:4e:62:af:8d:ac:dc:76:83:91:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Validity
Not Before: Oct 10 10:01:31 2026 GMT
Not After : Oct 11 10:01:31 2026 GMT
Subject: CN=28a162fe45bb57d749f201b948eebc93d041ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:68:18:48:88:e9:1b:80:15:fb:52:7c:55:
7f:e0:8c:da:50:2e:91:6e:ba:b2:d3:00:47:3a:bf:
a6:45:6f:fa:34:36:72:a6:a4:37:2a:2f:38:1e:9a:
1b:0a:99:2a:f3:cf:f3:85:ea:4f:fe:0b:60:75:da:
61:c4:68:49:00:7b:7f:30:58:97:76:44:e7:aa:7c:
cb:b6:ee:2a:71:c0:42:38:db:a5:69:29:69:3f:cd:
6a:11:9b:e4:b1:53:eb:b6:cf:3b:b0:e7:36:8d:ba:
e9:20:17:fa:44:f5:01:03:7a:8b:4c:15:1a:7d:2d:
4e:45:29:93:e3:45:ee:1b:67:26:a1:d3:66:da:fb:
75:d5:dc:f6:6d:16:99:32:ef:2e:bd:ab:24:ad:8c:
90:ec:00:d2:8c:aa:ac:a3:9c:ff:d0:54:7a:f4:40:
33:8f:2f:b0:1f:89:76:3b:d3:5e:39:71:4c:14:fa:
ef:28:af:eb:0e:e8:20:3c:90:6a:54:b0:6c:18:01:
02:c5:80:d5:53:d9:c5:b3:45:c2:06:26:b9:d1:33:
b8:66:97:ca:35:5b:c9:a1:e1:fd:3f:ba:b6:db:aa:
f4:00:92:0e:af:70:81:fd:35:6b:6b:78:ce:86:1a:
73:cf:3e:1a:3c:03:62:58:1a:d1:3b:69:e4:e5:6c:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:62:FE:45:BB:57:D7:49:F2:01:B9:48:EE:BC:93:D0:41:EA:39
X509v3 Authority Key Identifier:
keyid:03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:05:eb:89:cb:e1:de:0c:c9:fb:b6:3c:e1:e3:05:89:a9:
fa:12:e2:58:f7:48:96:88:bd:cf:85:1f:c4:81:4a:44:77:44:
8b:6b:e9:bc:35:2d:54:5e:98:af:07:4f:db:96:25:f0:1a:42:
fc:33:23:65:0f:2b:36:b7:48:a7:78:85:48:bb:f1:20:b1:11:
00:1d:92:01:d8:5f:32:df:99:83:9b:58:33:9c:e3:df:15:25:
65:32:39:33:c8:8e:bc:f8:07:b9:bb:9c:c5:bb:0e:6d:40:2d:
5a:5c:1d:4c:9f:03:9a:a6:83:71:9a:2f:40:b1:db:f1:94:a7:
03:33:ad:b8:7c:b4:02:22:51:1b:fe:06:d3:31:49:58:3d:8c:
59:da:90:61:8d:ca:62:44:da:7d:25:a3:1a:6f:9c:27:2e:d0:
04:34:d1:77:3d:a3:fc:f9:5b:30:b1:fb:06:7b:90:1a:2f:80:
d7:f8:ac:c3:7f:05:a6:f3:75:b5:ee:a9:45:dc:13:e5:11:8a:
7e:cc:f4:46:2e:3f:78:22:d8:3c:5e:59:29:dd:93:9e:20:5c:
8d:18:f4:bb:93:66:0b:e9:2a:c8:a4:f1:09:6b:1f:6d:77:a2:
2d:ac:55:ac:11:d4:73:e6:cf:68:eb:83:52:0b:61:23:fd:3c:
91:d7:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:46:50 2026 by rpki-client