Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: GXxoB5y8b+ZVujxkqeACvZtBgBpE3fyv5aJTItHOdzI=
Subject key identifier: CB:6F:FF:A1:7A:FF:E2:D0:01:C1:41:50:AD:60:DE:A9:2A:BD:EE:3B
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 01A0C632BFB43A3FE640D42A5DBF40A1F277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1673
Signing time: Mon 21 Sep 2026 23:00:09 +0000
Manifest this update: Mon 21 Sep 2026 23:00:09 +0000
Manifest next update: Tue 22 Sep 2026 23:00:09 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: 400scd8n1eVkWraukbY8k4tNTLcQPn7Cvg8xbakPaOc=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:bf:b4:3a:3f:e6:40:d4:2a:5d:bf:40:a1:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Sep 21 23:00:09 2026 GMT
Not After : Sep 22 23:00:09 2026 GMT
Subject: CN=cb6fffa17affe2d001c14150ad60dea92abdee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:13:a4:93:4a:16:7c:88:fb:f9:0b:6f:ff:f3:
8b:f9:25:af:80:84:a4:a7:9a:83:06:d3:d6:00:69:
6d:d5:77:e7:bc:29:cc:98:26:09:42:31:6b:38:7e:
aa:6d:69:ab:57:03:a4:ea:df:c4:57:19:43:64:d2:
18:ec:c8:ec:a3:c2:38:ca:66:b4:65:96:12:cb:8f:
12:2c:78:41:83:cc:ee:56:9f:71:f3:5c:67:10:ff:
98:57:8c:50:79:48:3a:b1:31:89:65:18:57:82:e9:
76:ea:93:a7:75:6b:2b:4c:a3:60:42:57:b6:88:88:
64:06:79:75:e8:3a:e9:2e:f7:1d:fc:87:76:a8:97:
04:13:07:0b:47:ea:2b:2e:c4:92:37:ee:72:0e:75:
7a:cf:97:99:75:ea:3c:1d:16:e0:fb:46:32:cd:37:
e3:19:9b:51:86:74:5b:0a:85:0e:9b:0a:bc:da:a0:
5c:0b:68:41:73:32:67:53:30:98:ba:c6:df:10:98:
d8:93:a0:8a:c8:87:9b:da:8e:cf:a0:df:63:5c:a2:
69:bc:00:52:ba:6c:34:a3:99:ea:e3:cd:34:d2:46:
b9:20:e4:3c:f6:78:17:4c:55:e0:d3:2e:7d:99:cc:
5c:c1:14:bf:2c:77:1f:aa:51:e4:b6:8f:63:d6:d3:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:FF:A1:7A:FF:E2:D0:01:C1:41:50:AD:60:DE:A9:2A:BD:EE:3B
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:16:49:27:97:92:af:7c:9a:eb:b3:23:18:d4:14:cc:f8:
5b:5e:b8:1e:1b:ab:67:09:07:40:81:27:b6:4e:d7:ca:d9:53:
78:c5:f5:f8:c7:d4:c1:7f:a6:2e:46:4a:98:c8:ee:06:68:bc:
48:e5:0c:d6:5e:74:15:e0:3d:15:c7:c4:d9:11:c0:af:f8:dd:
24:86:ff:2d:82:e5:99:34:3a:07:93:39:02:17:39:34:60:46:
27:71:65:98:36:7b:4e:52:29:5f:b4:f5:4f:39:b1:d4:30:97:
8a:71:9e:b9:89:d5:d8:96:8f:af:8f:96:42:1b:4e:38:98:28:
7c:43:15:95:84:de:80:d5:99:ad:9a:da:01:e4:53:3f:c3:28:
2c:97:0c:20:af:54:c2:68:da:0d:05:32:9a:a7:e2:62:49:61:
c5:de:13:82:3e:b2:fe:05:f8:30:71:60:de:7a:36:f5:b2:be:
b4:1f:96:0c:f6:37:ae:59:a0:2c:c5:79:d9:68:66:9a:e8:8e:
e8:2e:08:3c:50:68:1a:e5:7e:94:a1:d5:91:24:ce:dd:2c:1c:
8d:f8:2b:36:e6:89:8f:36:b3:3e:0c:66:93:9d:14:b2:9c:1e:
54:c9:8e:72:bb:7d:28:f9:8a:58:42:0b:f6:cd:ce:a0:fb:88:
35:ab:c9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:00:18 2026 by rpki-client