Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: 4/aIsKxniIglU/aDaR226odSXFsAjnmdvk1Fo2hvXLI=
Subject key identifier: C0:5F:D6:09:E6:10:C2:21:D9:42:C5:97:1E:B9:49:53:F9:8A:85:0C
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01A0C858C7E2362248C2A792F7D7125D655D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 110A
Signing time: Tue 22 Sep 2026 09:00:56 +0000
Manifest this update: Tue 22 Sep 2026 09:00:56 +0000
Manifest next update: Wed 23 Sep 2026 09:00:56 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 1BFGSYlsrRNVqP1lzvgbwcxrEUL8uPs3Jo/fmhEU0s8=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:c7:e2:36:22:48:c2:a7:92:f7:d7:12:5d:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Sep 22 09:00:56 2026 GMT
Not After : Sep 23 09:00:56 2026 GMT
Subject: CN=c05fd609e610c221d942c5971eb94953f98a850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:f8:dc:1d:e0:99:b7:e8:ad:4d:b7:cd:0d:
aa:70:14:87:12:f6:99:57:78:f0:b9:20:fd:b5:3c:
2d:9c:63:f1:b5:14:02:54:2c:15:0a:ed:3b:df:7a:
f0:23:e0:40:c3:9c:42:f2:a3:3e:50:52:56:01:fb:
23:77:55:3b:c2:25:9e:02:83:d6:ee:2e:32:10:30:
41:82:54:e5:9b:60:d4:76:56:40:a3:c3:24:17:02:
00:85:32:78:81:33:90:1f:4b:1e:5a:b5:e9:46:cf:
bf:d2:17:62:6f:24:e5:06:97:ba:a4:ed:27:52:7d:
fe:5b:9f:eb:0a:69:55:ed:19:5e:b6:ca:9b:64:ed:
bf:14:1c:9d:6a:b7:a8:6e:70:fe:ab:7a:39:ad:9f:
6e:a4:3f:b6:99:8c:d3:18:a6:32:02:1f:29:1c:40:
59:7e:ab:7d:66:52:3c:0e:ee:a5:96:d5:a6:e7:b3:
e6:b6:69:a7:b7:66:4d:73:c7:9b:4f:46:38:c9:52:
26:ee:20:0e:f6:73:e4:9f:e5:a1:1a:59:18:91:95:
83:f2:ff:84:41:ac:e6:72:ca:43:3e:97:cb:70:55:
7c:32:64:41:0a:88:5f:55:97:65:91:e4:d9:79:15:
4c:da:a4:0f:f2:2e:f6:6f:55:3d:6c:16:9c:11:f3:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5F:D6:09:E6:10:C2:21:D9:42:C5:97:1E:B9:49:53:F9:8A:85:0C
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3b:67:18:dd:ac:d9:03:79:78:0e:3c:64:ff:48:c5:21:f7:
13:d9:70:cc:e4:90:26:0a:5a:bc:89:57:a2:62:d6:0a:13:e1:
63:76:5f:80:58:01:da:48:ec:b1:2c:fb:0e:52:e6:bd:09:6a:
12:82:f2:b0:99:d6:19:b8:60:60:fc:9a:8e:48:15:dd:2a:bb:
e7:6b:f3:35:06:60:b4:19:e5:0a:d5:d7:7d:d1:43:b2:32:5a:
6c:b0:df:df:73:54:6a:98:ea:7f:36:7c:09:51:24:a9:e6:ef:
67:d6:76:f6:25:e0:aa:fd:70:68:20:98:01:ec:da:79:cf:7c:
d9:4d:dd:e1:3f:5e:eb:8e:ca:25:b1:eb:23:55:51:3a:a0:a1:
25:e8:d2:b4:66:0a:30:41:4a:e7:b1:25:9b:59:4f:a1:33:26:
22:ba:4e:e1:37:27:fa:f9:3d:f1:0f:0f:96:55:a1:01:97:3c:
e4:12:c8:d9:70:74:4c:b2:73:c5:2f:6e:fb:d2:31:d4:15:db:
64:4e:6d:a0:b8:b0:4c:b3:cb:93:a4:39:75:d3:70:85:fe:1d:
37:9f:e5:75:7e:52:cd:e2:30:5a:fe:f2:b6:bc:f7:f5:85:00:
65:2a:7c:11:66:fc:f5:84:b8:63:eb:16:02:1e:25:8c:0f:7c:
44:cc:77:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWMfiNiJIwqeS99cSXWVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm
YzY4YjgwHhcNMjYwOTIyMDkwMDU2WhcNMjYwOTIzMDkwMDU2WjAzMTEwLwYDVQQD
EyhjMDVmZDYwOWU2MTBjMjIxZDk0MmM1OTcxZWI5NDk1M2Y5OGE4NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkX43B3gmbforU23zQ2qcBSHEvaZ
V3jwuSD9tTwtnGPxtRQCVCwVCu0733rwI+BAw5xC8qM+UFJWAfsjd1U7wiWeAoPW
7i4yEDBBglTlm2DUdlZAo8MkFwIAhTJ4gTOQH0seWrXpRs+/0hdibyTlBpe6pO0n
Un3+W5/rCmlV7RletsqbZO2/FBydareobnD+q3o5rZ9upD+2mYzTGKYyAh8pHEBZ
fqt9ZlI8Du6lltWm57Pmtmmnt2ZNc8ebT0Y4yVIm7iAO9nPkn+WhGlkYkZWD8v+E
QazmcspDPpfLcFV8MmRBCohfVZdlkeTZeRVM2qQP8i72b1U9bBacEfNl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBf1gnmEMIh2ULFlx65SVP5ioUMMB8GA1UdIwQY
MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt
MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk
LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjztnGN2s
2QN5eA48ZP9IxSH3E9lwzOSQJgpavIlXomLWChPhY3ZfgFgB2kjssSz7DlLmvQlq
EoLysJnWGbhgYPyajkgV3Sq752vzNQZgtBnlCtXXfdFDsjJabLDf33NUapjqfzZ8
CVEkqebvZ9Z29iXgqv1waCCYAezaec982U3d4T9e647KJbHrI1VROqChJejStGYK
MEFK57Elm1lPoTMmIrpO4Tcn+vk98Q8PllWhAZc85BLI2XB0TLJzxS9u+9Ix1BXb
ZE5toLiwTLPLk6Q5ddNwhf4dN5/ldX5SzeIwWv7ytrz39YUAZSp8EWb89YS4Y+sW
Ah4ljA98RMx3vQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:29 2026 by rpki-client