Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: VdKhyyAGCo6wUN4RZHl0DEUJ2ACdwYYOHS3QRABHxL4=
Subject key identifier: 10:E4:3E:F0:91:2E:4C:C8:DC:06:6D:2F:A1:94:88:07:7C:3F:6F:E0
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 01A0C3D73A59C65E1B0BB84D2546FF4D3555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 166A
Signing time: Mon 21 Sep 2026 12:00:57 +0000
Manifest this update: Mon 21 Sep 2026 12:00:57 +0000
Manifest next update: Tue 22 Sep 2026 12:00:57 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 2tBsHiKYwrr0xavgCZBAEs+MbZkfCqi38NTbrejj+Zc=)
2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:3a:59:c6:5e:1b:0b:b8:4d:25:46:ff:4d:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Sep 21 12:00:57 2026 GMT
Not After : Sep 22 12:00:57 2026 GMT
Subject: CN=10e43ef0912e4cc8dc066d2fa19488077c3f6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:9f:9b:af:0d:83:02:f8:f9:a3:57:79:d3:
22:20:a6:d4:87:2c:2f:9c:9a:cb:3a:73:c6:a7:af:
9e:72:82:ed:22:2a:1d:f2:39:ed:f8:e6:cb:57:cd:
df:f4:08:76:6a:ef:e1:0a:57:5c:0b:d1:79:36:59:
be:6d:8e:ec:e2:c5:4d:33:01:bc:5f:57:98:97:5c:
28:f7:6b:7c:31:37:af:b0:d3:3a:71:e8:31:f1:28:
b4:ac:44:40:08:46:f1:ca:3e:38:fe:06:db:6f:f7:
61:13:e0:95:fb:9d:cd:30:80:5c:65:65:d8:b7:f1:
b6:d2:aa:d3:8a:1e:85:65:5f:8a:16:0a:ef:7d:76:
e7:8c:6a:10:c3:80:d1:77:da:4c:26:58:3a:62:1c:
87:26:25:cb:ab:a0:c1:f5:f6:92:b5:bf:30:da:d1:
95:1d:cb:11:4a:7d:28:00:d1:48:ca:6c:cc:c1:ab:
51:9f:47:61:ad:b9:64:38:bd:37:71:07:89:88:36:
1c:5c:2a:23:7b:ab:ca:0a:d5:06:70:8e:45:b0:7e:
11:c0:49:a5:21:47:9c:a4:f0:f7:de:cb:56:52:fa:
a8:79:75:51:60:75:87:fe:dc:02:38:c9:5c:4a:b1:
74:e4:af:ec:04:94:0e:90:9a:a8:c6:62:67:b7:b0:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:3E:F0:91:2E:4C:C8:DC:06:6D:2F:A1:94:88:07:7C:3F:6F:E0
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:32:d8:b2:4b:a5:4c:cd:c8:93:a8:fa:cc:16:dc:25:d2:
cc:29:50:ba:16:1f:21:af:85:ae:a9:65:bf:5e:84:1b:d0:b8:
4d:16:a2:03:31:33:66:1a:ca:47:8b:7e:ba:99:32:b7:91:b9:
27:0f:1e:34:08:0b:e0:cc:1c:85:2b:33:00:85:be:cd:99:c8:
e9:f5:1e:66:db:e2:6a:7e:7e:37:49:7c:ff:70:4f:a9:cd:a0:
d5:73:29:47:35:49:6b:e3:a9:65:40:85:1b:aa:1d:37:63:83:
48:a0:2f:3f:12:a6:ca:47:8e:28:2b:26:a4:8c:62:84:32:6e:
da:95:c3:f3:01:93:b8:f3:b9:d6:10:f0:41:4a:bb:6f:67:9c:
63:f2:37:cd:02:eb:97:a5:bc:43:4e:be:23:ec:a8:ed:62:64:
be:7c:ef:3e:1e:69:79:c7:bc:18:9b:b7:5e:7d:9c:ea:30:92:
8a:45:d6:05:bf:68:e0:b2:7b:ea:0e:d3:6b:d8:02:1f:4e:f5:
d8:0a:26:c5:ec:d2:46:bf:16:03:56:3e:8e:e4:8d:c8:c6:80:
eb:86:e6:57:a9:5e:b5:e5:a2:88:34:85:bc:20:1d:fa:a4:58:
e3:38:d2:31:e1:28:f2:86:f2:16:e0:5b:e2:5b:b0:ff:cb:83:
2d:f7:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:43:47 2026 by rpki-client