Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: Ho0YZnI3vgEbyam4/eKm5hkuIxdwMmL8MoN2CIZZjMY=
Subject key identifier: 94:83:90:FD:29:F3:7F:75:22:E8:A1:8E:5F:B0:85:9E:73:3A:2D:CB
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 01A134EBCF187E747929BFCDD7F19925CE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 06AE
Signing time: Tue 13 Oct 2026 11:00:31 +0000
Manifest this update: Tue 13 Oct 2026 11:00:31 +0000
Manifest next update: Wed 14 Oct 2026 11:00:31 +0000
Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: A3+4kkH1Ij1qLic8QsOI7CN8mbn2lHnvzDNhVZ+Aws8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:cf:18:7e:74:79:29:bf:cd:d7:f1:99:25:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Oct 13 11:00:31 2026 GMT
Not After : Oct 14 11:00:31 2026 GMT
Subject: CN=948390fd29f37f7522e8a18e5fb0859e733a2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:07:68:aa:bb:14:85:39:95:1d:41:50:ed:
b1:d2:fe:50:42:0e:d3:93:ca:a7:8c:e7:1e:a0:b4:
14:e6:e0:01:56:c1:2d:d2:ee:20:54:b1:df:86:6f:
f5:51:e0:d4:d9:94:98:32:25:48:fa:41:65:4f:b3:
db:83:32:68:d4:6a:9a:b8:42:e1:86:b5:e4:d8:e8:
91:37:6a:de:03:2b:ad:c7:23:e5:6c:91:d3:30:f6:
a8:01:43:d5:3e:4f:48:dc:5a:db:6c:b5:73:bf:bc:
ee:3b:85:98:90:42:83:1a:00:9c:97:6a:40:f0:34:
0f:39:bf:69:cc:e5:5a:9b:0e:06:8f:c6:32:68:7b:
f7:02:25:e3:c0:30:e0:9d:d1:55:d0:12:3e:2c:9e:
33:1f:b4:32:93:6a:24:7c:be:48:da:84:d6:55:e9:
3e:65:b3:3b:68:fc:32:af:65:d1:a5:7c:78:da:60:
fa:be:ff:bd:cf:4c:3c:2d:45:5a:ab:62:79:a6:51:
6e:4a:5c:0a:f4:50:be:7a:4d:4d:e3:58:2a:99:f8:
ec:64:6a:79:b0:44:36:af:80:9c:51:a2:e7:68:0e:
a9:e3:86:86:0c:a0:23:6e:49:6b:45:c7:ff:51:d5:
1f:33:03:7c:0b:5f:3b:87:bd:ed:7c:f4:d7:4c:dd:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:90:FD:29:F3:7F:75:22:E8:A1:8E:5F:B0:85:9E:73:3A:2D:CB
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1e:3c:98:66:b1:25:29:b3:f8:23:d2:54:02:e4:21:2a:6e:
46:0f:a7:f5:34:91:01:84:c0:e5:6e:6f:65:6a:46:0b:9f:fe:
29:51:ed:29:2a:e5:71:5b:00:40:c6:a5:3b:a1:83:d8:d5:c5:
85:69:1d:57:21:d6:e8:b8:f3:3f:41:e1:4a:ae:17:0f:2e:db:
67:df:0f:ce:04:bc:c8:c2:c2:bb:a1:a3:84:5e:1c:35:52:ec:
32:24:ec:07:61:c2:18:1f:94:80:91:fd:ec:c8:a6:9f:dc:0e:
4e:21:bc:ef:88:22:58:f5:30:43:92:d1:f6:7c:3e:01:7b:3a:
33:6a:ca:86:85:86:bc:8b:e1:59:92:36:85:4e:76:ae:35:88:
ed:59:b9:4e:fa:84:90:4e:73:d9:23:44:70:39:a5:7b:a0:33:
88:50:7c:7a:90:73:2b:ea:a3:d8:ae:b9:e4:7e:82:15:d3:5e:
d0:26:ad:b9:8b:6e:94:70:c4:aa:6c:84:a1:93:b4:0b:86:2c:
94:db:b7:b8:3a:4a:19:36:da:ec:7e:2e:9f:ab:e2:6c:58:28:
1a:ec:e9:35:75:33:8b:a9:64:15:7e:17:89:28:cd:92:6f:5b:
0c:79:1b:ad:7a:d9:32:33:b2:99:a5:4f:57:39:de:ec:de:08:
2c:55:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:14:00 2026 by rpki-client