Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
File: A56X4z1nx-KVACipQeW9DbJmV_0.mft (raw, json)
Hash identifier: LsZhd5ooKcQdyuQ/J80FbF+QoTAqzqJpL9POjQz7EBs=
Subject key identifier: A0:D4:59:EB:FD:B4:6D:21:77:7B:C7:1B:81:EE:B1:75:69:1E:7A:93
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 01A0C557CD312837DFF91B15972BE79B0FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
Manifest number: E1
Signing time: Mon 21 Sep 2026 19:01:00 +0000
Manifest this update: Mon 21 Sep 2026 19:01:00 +0000
Manifest next update: Tue 22 Sep 2026 19:01:00 +0000
Files and hashes: 1: A56X4z1nx-KVACipQeW9DbJmV_0.crl (hash: D90IEV9zDgUsvi3VeHs6kyUOGkwU9ynIE3cVFp8ZZtI=)
2: h6DuUWmzZbBVJl1gmp2hlfcqO7g.roa (hash: UQw3UzGzjt+F9tMKj8CUe8EMOCgAJJylkc7Y7hD8Fy4=)
3: hvfAzCtoE0ORBMYjcGw8oigdKcw.asa (hash: 72h3L4hXBvMvuCPqYCl4ziMbL9JELyu/c1jTdEmyvUA=)
4: ojQylV1In9b_cmWbkErVQtX_c0g.roa (hash: yXdKShEv9gKUMmqT53345vY7rE9y/T/S4WodyMW0wT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:cd:31:28:37:df:f9:1b:15:97:2b:e7:9b:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Sep 21 19:01:00 2026 GMT
Not After : Sep 22 19:01:00 2026 GMT
Subject: CN=a0d459ebfdb46d21777bc71b81eeb175691e7a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:c0:52:71:2e:37:58:14:94:9d:7f:ed:6a:
3d:e4:c7:5c:9b:56:12:24:93:29:e0:3e:62:c7:1f:
7e:03:0c:7e:e5:90:9c:b1:14:98:94:4c:3e:07:0d:
13:7f:55:a5:2c:75:d0:53:57:3c:2f:5b:ba:b1:9a:
b7:39:29:e8:96:95:8d:1c:f1:e7:77:d1:80:93:08:
ec:f3:0a:aa:ee:c7:df:25:a2:62:9a:de:2b:82:ea:
1f:1d:e8:3f:7a:3f:7c:62:91:45:53:a4:b0:80:9a:
67:7e:d6:15:c3:4d:5c:3e:79:9c:81:95:54:92:3f:
21:1e:5d:3c:ee:06:b9:81:d6:e8:7e:64:4f:10:03:
ac:24:eb:04:78:ab:89:8e:bd:e7:a4:90:b0:16:65:
fa:21:32:b0:0a:77:7f:27:be:78:5f:26:b5:b3:2a:
92:d3:ed:32:1f:a9:20:9f:7c:e7:53:e5:f0:ad:32:
16:c0:4b:63:22:48:88:7f:a3:20:b2:e2:19:54:14:
69:4b:b2:a6:0d:5a:a9:01:61:b1:6a:f5:6b:dd:28:
10:ba:1d:36:a5:94:e8:3c:08:64:11:05:0b:cf:53:
42:81:18:3d:40:d3:4d:dc:39:5c:df:3c:c0:7a:65:
bf:3f:85:9f:f7:d3:3a:3e:49:2c:8e:7b:ae:09:12:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:59:EB:FD:B4:6D:21:77:7B:C7:1B:81:EE:B1:75:69:1E:7A:93
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:43:c6:95:6d:09:e0:fe:21:d0:d3:63:d5:94:1b:f6:3c:
bf:a2:06:23:b5:af:a6:96:07:48:5a:26:27:64:28:31:a2:7b:
fc:99:a7:44:d8:40:47:b9:dc:9e:21:10:f1:75:a6:2e:10:ef:
81:ff:bc:b4:7a:d1:44:98:e8:b8:13:b7:88:f4:35:ac:15:89:
6e:5d:da:ff:b0:8a:eb:21:25:e6:15:a3:1a:fa:73:45:09:e9:
5e:5a:f3:77:d7:6f:e2:9e:9f:f7:82:3a:9d:32:de:20:bc:e6:
97:70:5e:20:db:23:15:29:c4:88:bc:77:a0:f9:61:b6:a6:77:
03:a7:6b:ad:45:8e:71:5c:fe:05:21:d9:ce:51:4f:27:18:c2:
fa:e2:d1:f5:fc:d1:bb:27:e6:d9:3f:29:a2:dd:72:c5:99:e9:
dc:50:c3:e8:8e:aa:a3:d2:e6:9a:f7:08:57:eb:a6:c2:16:d5:
4c:9a:eb:4f:c9:f2:fd:03:0e:7d:61:d2:37:5a:84:a3:9e:4e:
44:51:fe:ff:63:47:2d:98:d7:5a:14:33:53:ba:2c:dc:fa:86:
c6:12:c7:9f:dc:bf:51:75:1c:79:df:df:c6:93:32:b2:66:9a:
a7:3c:62:d1:45:60:32:f8:69:45:59:ec:9b:de:69:c6:19:f5:
d2:15:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:10:14 2026 by rpki-client