
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: vFYsydR6+WbLc5J9QPNZNpGUB4MdlyCytA88p6gEbYA=
Subject key identifier: A6:CE:47:2A:FE:BB:0F:5D:D2:0E:97:17:42:95:38:86:00:60:F3:CB
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 01A0C6331AA99C0210B1EC577CD62C298BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 0722
Signing time: Mon 21 Sep 2026 23:00:32 +0000
Manifest this update: Mon 21 Sep 2026 23:00:32 +0000
Manifest next update: Tue 22 Sep 2026 23:00:32 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: 7UI93S+d0GaoW6UFEhwp+03K7QbNFdJsQTeP/HG5yic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:1a:a9:9c:02:10:b1:ec:57:7c:d6:2c:29:8b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Sep 21 23:00:32 2026 GMT
Not After : Sep 22 23:00:32 2026 GMT
Subject: CN=a6ce472afebb0f5dd20e9717429538860060f3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:f4:90:9d:24:b8:86:5c:14:d0:d0:79:ab:
fb:08:e3:07:f3:a2:43:e5:ba:38:b1:3d:39:8b:d4:
f4:69:e6:f5:fa:ba:62:0a:45:95:f9:fe:17:46:20:
2b:bb:69:a6:91:f6:37:9b:3a:b5:6c:a3:67:54:82:
4b:8d:6f:5e:30:a1:42:8d:6c:e5:7a:a4:6f:2d:06:
df:54:db:da:e9:01:dd:aa:14:76:06:f2:39:11:8f:
75:13:86:4e:78:91:31:5f:cb:bf:30:cd:f9:cb:21:
dc:5a:35:ac:82:fe:43:be:bc:ef:69:88:f1:d7:b9:
78:c5:0d:4e:6a:83:0e:7c:3e:70:cc:2a:ce:bb:e9:
10:13:0d:04:ed:dc:dc:e7:5c:4a:27:b0:22:68:f6:
a7:78:99:98:8c:8c:da:b8:2e:f9:b1:c9:47:43:a1:
df:64:1c:c0:d3:97:8d:63:58:3d:3c:89:25:e7:2e:
bf:45:9b:b2:64:50:f2:a0:a7:8e:d7:83:dd:65:18:
ac:4c:02:eb:7e:1a:b5:94:c6:1d:6f:a3:cf:2b:fe:
bd:18:7b:39:01:80:61:32:ac:c8:39:b7:bc:0b:e6:
7f:db:f3:3b:2f:a7:55:91:40:a3:a9:d3:46:9b:3f:
4e:5d:85:10:c6:4a:e9:b3:d2:fa:25:5b:37:79:f0:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:47:2A:FE:BB:0F:5D:D2:0E:97:17:42:95:38:86:00:60:F3:CB
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:10:b8:26:dd:8c:e1:60:c5:7d:c5:54:db:2c:b6:b8:a2:
08:45:dd:2b:af:20:ae:40:2b:ce:d6:92:8d:54:34:90:37:2f:
0d:62:f3:bc:b0:d3:52:76:4a:20:61:08:d3:4b:5b:7f:2c:93:
27:e1:92:96:93:ad:d7:52:3c:8a:2a:c4:ed:33:e5:d8:5b:29:
26:a8:9b:c4:f3:0b:1e:95:0b:f5:d6:8d:2b:09:b5:1c:72:43:
47:df:74:a9:ee:45:a9:63:b7:43:3d:e5:a7:8b:21:f9:39:57:
43:0a:75:86:d9:f1:b4:91:30:bc:20:f3:7a:58:cb:ab:a0:b6:
f4:5a:7d:b8:ac:b7:de:89:97:56:9b:7a:c3:e6:ec:a1:76:40:
7a:4f:47:e4:1a:76:ea:ba:cf:5c:1a:eb:f1:3e:53:b6:7f:e7:
7e:79:02:2b:a2:8d:3d:fb:1a:3b:1f:28:66:51:07:ec:3c:7e:
1e:27:16:6b:27:9a:36:7e:b2:75:cf:6a:0b:0f:39:b1:9d:26:
76:3e:cc:53:d2:81:01:84:b1:92:03:38:53:18:6a:04:6e:be:
04:87:21:78:c3:50:60:df:7a:d4:25:57:fb:70:e6:f4:f0:a1:
03:c6:af:0e:bf:81:74:13:17:f4:48:e9:e5:cc:df:61:29:f3:
ea:45:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:44:16 2026 by rpki-client