Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: BHU3vBlAtDN4EDCFjHgJheAj3SiRv/90kg5zE1b89ZI=
Subject key identifier: 0B:33:1A:1D:BC:6D:B2:00:A2:65:7A:81:BF:C5:EE:2F:DD:48:E0:A8
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01A0CCA2BB8A48FFDBA6EBFEF6FBE1381D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 05:00:11 +0000
Manifest this update: Wed 23 Sep 2026 05:00:11 +0000
Manifest next update: Thu 24 Sep 2026 05:00:11 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: W88ie4IMgPL9/B/HTs9kvFSFr8ooiHSj15ulvvEjmow=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a2:bb:8a:48:ff:db:a6:eb:fe:f6:fb:e1:38:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Sep 23 05:00:11 2026 GMT
Not After : Sep 24 05:00:11 2026 GMT
Subject: CN=0b331a1dbc6db200a2657a81bfc5ee2fdd48e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:75:df:31:c9:13:09:c0:8c:f8:6d:51:24:
3b:e5:3e:2b:54:6c:0c:c9:63:dc:fb:8c:64:48:65:
ac:8b:d8:f6:8b:fc:fd:09:1b:03:b3:34:37:8b:27:
2a:9a:35:8b:f4:4b:f1:cc:9d:08:41:99:fc:ac:05:
db:be:80:10:0a:08:e5:2a:24:12:90:38:18:c9:be:
6f:f8:e6:63:4d:c1:39:4b:68:58:90:9d:1c:7e:0d:
c4:67:af:40:6c:b2:7c:80:e9:e3:dc:68:ab:22:1e:
fb:5f:c5:26:18:aa:d4:64:1e:cd:36:8a:83:fd:a0:
9f:88:ab:4e:c5:68:46:1b:aa:ed:d2:20:73:2f:58:
1b:63:b6:cd:08:72:1a:ff:f7:9f:e8:b8:66:28:6f:
0e:62:36:b2:ba:8f:52:a6:18:e2:e7:0b:c4:85:a8:
6e:89:6f:63:9f:74:c5:30:dd:a3:6a:d1:12:86:37:
f2:3e:f0:ee:58:54:a1:8f:03:f0:56:7f:2c:24:99:
ce:94:36:dc:2c:ce:3c:b4:be:bd:4f:06:85:b5:07:
cf:70:4a:a3:6f:73:c7:54:af:87:80:b6:e7:57:1f:
3e:81:1a:f2:40:79:d6:7a:09:1b:b3:c4:b6:e4:ac:
8a:b9:5a:bc:c4:cd:e5:b0:52:b7:84:13:64:7f:7e:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:33:1A:1D:BC:6D:B2:00:A2:65:7A:81:BF:C5:EE:2F:DD:48:E0:A8
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:67:21:2d:87:dc:b0:9b:42:90:c2:5f:a3:e1:5f:f3:7d:c4:
49:6f:7a:a8:f8:6e:3c:5a:8f:d1:02:e3:e6:97:5f:bf:ab:03:
ed:3f:0e:4d:0f:bd:63:e3:6c:b1:a1:a6:1d:46:1c:ac:6d:18:
92:dc:da:bb:a1:67:8b:20:f9:7e:9f:e0:7f:73:9e:50:18:73:
2d:e5:94:b7:c4:53:8e:e7:8f:cb:27:70:82:f4:87:ed:e8:fc:
18:88:7a:ca:5c:67:88:8b:e2:07:69:47:c6:ff:64:cc:4c:b6:
f1:13:6b:7a:c1:81:cf:f1:9d:e3:a6:1e:15:44:42:27:7e:16:
d1:8e:bc:2a:7c:ba:ba:81:ba:d5:45:16:34:eb:18:e6:a7:20:
c8:70:7f:83:19:23:df:72:f9:3b:cb:c1:4f:b6:ce:a3:27:3d:
03:a4:2a:07:3d:b2:e5:c6:e0:b7:1d:b6:9d:51:b1:70:71:23:
3c:cc:c1:15:89:ee:69:cb:82:5c:b4:2b:8a:b7:c3:4f:89:f5:
50:4e:13:75:a3:ba:34:e3:1c:c6:72:c7:16:e6:e6:21:93:3c:
8c:01:5f:e0:b3:72:77:56:1c:4f:d9:d4:42:b1:25:96:09:55:
51:bb:8e:81:3d:40:cf:68:08:f2:22:6b:c5:9b:22:bf:d6:60:
cb:62:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:10 2026 by rpki-client