Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: mjtT9w9MpAB724AaqkF0Xhl8vOsQWcJPEeu/I5X6Qc4=
Subject key identifier: 02:F3:DC:4A:87:44:0E:AD:A5:24:81:48:8A:8B:65:F2:16:68:2E:8A
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 01A137119C52A003958B069188496A4D667E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 05EF
Signing time: Tue 13 Oct 2026 21:01:03 +0000
Manifest this update: Tue 13 Oct 2026 21:01:03 +0000
Manifest next update: Wed 14 Oct 2026 21:01:03 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: YYcv2XWRWN4Y+NR7aZBeEuxDXiz/QbWWOfsJZ9uiYOQ=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:11:9c:52:a0:03:95:8b:06:91:88:49:6a:4d:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Oct 13 21:01:03 2026 GMT
Not After : Oct 14 21:01:03 2026 GMT
Subject: CN=02f3dc4a87440eada52481488a8b65f216682e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:05:9a:05:c6:22:45:59:73:28:71:a5:4a:
86:c5:26:b2:62:73:5a:68:f7:43:a0:9c:b3:cc:a2:
6b:f8:9f:28:27:17:51:18:d2:21:66:a8:a4:e2:b9:
ba:05:0a:6d:16:b1:68:5d:3e:48:51:36:77:50:9a:
0c:ae:b5:3f:56:7f:fe:6f:60:aa:cc:25:c0:2c:ca:
11:b4:2e:c4:27:79:4c:7c:b8:1f:01:06:9e:54:7d:
4a:05:17:98:9c:6d:ab:e0:ef:52:7a:75:c0:61:d6:
0e:6f:fd:a3:84:ce:4c:41:68:d6:53:33:df:45:c4:
c6:ad:b3:f4:6e:d3:8e:f6:ad:5e:4f:a8:0a:15:55:
c7:b3:b3:9c:66:b5:fe:b9:eb:80:8c:d0:58:ea:14:
6a:d8:c1:1d:77:31:c8:d7:cf:53:c5:e5:45:86:34:
68:bf:dc:d6:aa:84:c4:ed:b9:aa:cc:ca:50:c9:6e:
72:c8:cd:c5:55:b7:9d:9f:9a:18:30:e0:0b:a9:26:
c8:74:a1:e0:6e:e5:ea:fe:62:d7:6e:20:aa:88:12:
57:03:0b:75:5b:c3:e9:b1:02:42:5b:07:62:75:37:
e3:6e:f2:f3:1d:95:2d:46:96:bd:31:cf:b1:ce:c0:
b5:23:d6:9d:18:ab:db:97:cd:e5:f4:03:5b:8e:6b:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:DC:4A:87:44:0E:AD:A5:24:81:48:8A:8B:65:F2:16:68:2E:8A
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7a:6d:ac:7c:38:91:1f:b4:26:e3:40:42:dd:6b:f3:78:2c:
0f:a9:e8:93:63:bc:98:69:17:93:fc:35:49:b1:fc:68:a4:b1:
6b:68:10:c1:c7:91:17:b2:d8:69:5d:f8:f0:8e:2b:93:9a:05:
23:d4:63:5f:88:19:7f:4b:57:95:05:77:9d:75:2f:3c:3c:fd:
13:15:97:ed:cd:36:a9:dc:0b:1e:fa:62:6c:b7:2a:42:89:c2:
a5:c7:31:48:a7:bc:70:17:0a:56:9f:6d:9b:df:26:43:0a:a5:
a9:23:98:cb:68:e9:86:6a:6c:32:09:90:bb:52:94:94:73:4a:
52:66:2d:eb:7b:30:99:fd:b1:bb:ef:38:1f:58:8a:95:2b:98:
54:dd:cd:11:16:e9:b9:a2:e4:a4:8f:8d:a4:86:e1:15:60:ce:
84:ea:23:33:fd:79:0d:32:46:12:d8:9e:32:a3:74:58:3a:cb:
08:42:3e:ae:64:2e:cb:bf:f9:68:cf:0f:59:b7:d4:b6:90:83:
cb:d8:27:06:72:b6:34:62:fb:29:c5:35:30:fb:18:e5:a6:4a:
d5:0b:fb:8a:49:00:91:45:ea:17:2e:a5:81:57:05:76:ac:c6:
87:d4:d9:de:d1:f4:0e:2c:6a:17:06:fb:e5:6e:9a:c4:32:6e:
09:38:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:31:25 2026 by rpki-client