Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: 2NltSrRISne+gGBTN0CS5+1MdYrEJFyhxQIFkUrG8nM=
Subject key identifier: 0A:9C:9A:55:F6:10:B9:E5:86:D8:A4:5B:73:C1:F1:3C:17:A4:A7:AB
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019D9818E65A9C2AB0442A66C7194C92708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: A0
Signing time: Thu 16 Apr 2026 21:01:01 +0000
Manifest this update: Thu 16 Apr 2026 21:01:01 +0000
Manifest next update: Fri 17 Apr 2026 21:01:01 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: 8ASrRvUk9Qzwz/1rz2tV9SploA1nWcLGGv6E3A60TFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:e6:5a:9c:2a:b0:44:2a:66:c7:19:4c:92:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Apr 16 21:01:01 2026 GMT
Not After : Apr 17 21:01:01 2026 GMT
Subject: CN=0a9c9a55f610b9e586d8a45b73c1f13c17a4a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:ab:2f:23:01:0b:2c:fc:42:9f:01:ab:c7:
7f:f8:e1:41:19:d7:3f:da:ea:76:fc:ec:04:b4:2d:
5a:62:17:be:bc:4d:2f:c6:24:d3:05:df:a6:7f:e0:
8b:4d:33:b1:78:79:59:28:b4:c8:c3:3c:09:82:ed:
96:65:75:f9:8d:c3:ea:27:2e:b1:01:ff:61:25:b7:
55:bf:50:16:37:17:80:9d:aa:81:41:a4:00:5d:5c:
5c:db:f8:b7:7e:28:ff:da:6c:45:4b:c5:b0:6f:11:
5c:c0:6a:4b:3f:ca:a7:36:a6:81:19:ba:00:b9:05:
2e:54:67:e6:28:93:92:e9:7e:18:55:a1:e6:ff:cb:
ce:63:52:77:28:e4:07:3b:f2:49:fe:88:2c:6d:63:
65:ae:cf:fa:c1:ab:58:3c:d5:af:f3:b5:98:33:30:
be:a6:43:fa:7d:6a:8f:89:51:25:03:40:a8:e5:52:
fa:6b:3f:be:85:a9:f1:55:5b:76:d6:8f:32:f0:38:
e2:10:70:e2:71:cb:d8:ab:ba:e9:6b:8e:2f:bd:69:
02:ad:ce:ea:59:25:51:35:af:58:a7:b0:31:ad:af:
ac:ee:57:9d:99:95:47:63:0e:38:5f:a9:f3:ef:3d:
51:f3:df:5f:a3:7f:2a:5c:e4:1c:be:ae:9e:ab:b2:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:9A:55:F6:10:B9:E5:86:D8:A4:5B:73:C1:F1:3C:17:A4:A7:AB
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:56:f0:83:5d:77:5c:b5:9f:95:1e:e5:02:4a:17:90:8a:
72:57:23:a1:36:55:b1:40:dd:0e:2d:98:11:53:12:54:1a:32:
14:46:d8:08:1f:e7:2f:73:e2:25:c4:8a:98:75:e3:fa:1a:f0:
20:9b:e9:67:cd:e5:1f:9b:52:d3:17:e2:ef:c1:f3:8f:74:29:
a4:1f:ea:f2:27:e9:b4:ad:dc:34:47:fa:8f:e8:28:3c:9a:c9:
50:a0:a2:85:53:ed:57:68:3b:ba:8d:d8:5a:a9:0b:c8:b8:76:
da:51:9d:51:d8:00:fb:1e:cc:31:40:1d:81:f7:5b:92:d1:7f:
dc:ac:74:4e:38:54:09:5e:ea:2c:45:4e:20:33:04:9a:28:3e:
d7:2d:de:f9:06:1c:3a:5f:84:a7:62:05:bd:93:28:a1:38:a2:
57:b1:a9:c8:2e:7b:6c:4d:95:61:02:3f:fb:1a:0a:39:7e:d4:
a4:1d:fb:9e:9a:79:19:e1:5f:50:ef:29:b7:50:88:71:20:ec:
6f:01:1d:a4:d9:af:9d:f3:9c:30:6b:49:75:30:79:e5:a1:ed:
e2:49:05:46:79:7d:a4:72:81:07:0f:75:2f:af:5f:51:07:42:
eb:c9:e0:df:9c:7b:fd:8f:13:d1:eb:67:c2:7b:c9:ac:3c:90:
ab:ba:fb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:25 2026 by rpki-client