Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: rXQ9bvULMHLWBFdDgBaQbXGbhciCuZAyuEMmP3ISnAY=
Subject key identifier: B0:1F:4D:BD:87:95:39:1B:03:5D:E0:FE:07:9D:97:BD:27:76:70:BE
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 01A0C7EA7F3FA3BF18EB411C87D08AAD471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0FDC
Signing time: Tue 22 Sep 2026 07:00:28 +0000
Manifest this update: Tue 22 Sep 2026 07:00:28 +0000
Manifest next update: Wed 23 Sep 2026 07:00:28 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: 8Ol0ZH/ocUf+56sg2pCR5BFGnfIY8BAuNtVwyJkaEVo=)
2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:7f:3f:a3:bf:18:eb:41:1c:87:d0:8a:ad:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Sep 22 07:00:28 2026 GMT
Not After : Sep 23 07:00:28 2026 GMT
Subject: CN=b01f4dbd8795391b035de0fe079d97bd277670be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:9d:42:7c:b7:a9:38:39:ff:d9:8e:26:2d:
52:5f:c9:14:a3:87:84:2f:c8:69:14:74:9c:45:7f:
36:ba:f8:34:1e:65:49:b9:2a:f5:a4:6c:63:78:1b:
28:1f:27:2b:58:e1:ee:aa:bf:63:ac:d2:18:e7:7d:
0a:e1:56:bc:ea:47:21:67:bd:a5:01:e9:72:d8:a2:
bf:62:25:86:37:af:c1:3c:13:cd:c3:7e:2b:eb:cc:
55:c6:02:e9:d9:b8:eb:28:ed:fb:ad:f6:06:27:8c:
86:d3:59:64:5c:d8:95:b8:8c:3f:e4:a6:71:7a:54:
c4:79:50:5e:1a:b3:cd:d3:49:3a:20:2b:09:a4:71:
ba:9f:48:40:03:bf:cd:fa:ec:1f:ae:11:99:0e:d3:
17:7d:3f:a4:35:b1:a0:38:bb:8a:09:8c:de:c7:cc:
8e:22:fe:73:b2:a2:1e:25:74:c9:7e:84:a9:6b:81:
f8:fd:51:5f:4f:ca:8b:df:56:8c:6a:d2:f3:13:0f:
05:4e:08:ef:30:3c:14:0a:c1:7f:fd:cb:06:5a:2f:
4c:20:cb:48:e3:df:39:96:b0:bf:fc:00:42:bf:94:
59:90:89:08:aa:74:8f:41:81:d6:25:eb:88:de:07:
a8:0e:84:d9:9f:64:dd:c9:92:52:f2:81:77:b8:b9:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:4D:BD:87:95:39:1B:03:5D:E0:FE:07:9D:97:BD:27:76:70:BE
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:59:96:5d:4b:95:bd:64:ce:cd:2f:c1:72:f7:ce:57:c0:
3b:67:72:8d:60:4e:24:2e:d3:b5:8a:1f:04:f6:b9:2d:2e:1a:
0e:ce:8d:8b:e8:64:f4:5b:e3:c2:34:70:04:4b:82:e8:b7:55:
35:96:44:85:a3:48:96:3d:d3:0e:60:dc:71:18:fa:b2:22:65:
91:89:16:33:3c:e3:49:c0:1b:00:b3:42:db:d2:85:1d:09:8e:
b7:d2:24:6c:a6:df:e0:07:59:9a:0c:20:f1:ee:de:e8:d4:36:
4b:37:68:39:7d:63:a0:4c:6c:2e:78:47:8d:58:61:91:0b:fd:
85:73:6b:e4:92:c9:5f:de:8f:fa:40:25:87:91:a7:86:e7:e9:
9b:b5:17:8f:53:de:a5:dd:ba:a9:eb:6a:24:92:f7:24:50:e7:
73:03:21:57:e2:2a:95:5a:47:1b:ab:f3:92:0a:b8:b9:d5:40:
fc:d3:01:9a:a3:6f:75:c3:91:da:8e:53:8e:64:f5:34:52:1d:
72:2b:e7:6f:5a:7d:53:a6:0f:34:13:b5:ed:0f:fd:a4:7f:ae:
6a:03:52:80:09:4c:2f:e2:c3:7a:63:cc:3a:8b:15:fc:06:db:
d3:4c:66:87:b5:6e:f8:f3:e3:f7:f8:d0:f2:88:71:2d:93:57:
7d:f0:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:59 2026 by rpki-client