Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: f9m5i6ELn/ko49ADM9i9LSjPO8J6iHXQ2inUNPwUpc8=
Subject key identifier: A0:28:06:EF:DC:3E:0D:76:A7:BB:57:78:C3:AB:13:E1:5A:EF:36:A0
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 01A1114DE4E46B12B2318F66993C070172A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 0BFF
Signing time: Tue 06 Oct 2026 13:01:19 +0000
Manifest this update: Tue 06 Oct 2026 13:01:19 +0000
Manifest next update: Wed 07 Oct 2026 13:01:19 +0000
Files and hashes: 1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: J/if2nvoSB4ctJ85q4m4UwIyrrfoJxTyC4FWhDH+Pus=)
2: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (hash: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:e4:e4:6b:12:b2:31:8f:66:99:3c:07:01:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Oct 6 13:01:19 2026 GMT
Not After : Oct 7 13:01:19 2026 GMT
Subject: CN=a02806efdc3e0d76a7bb5778c3ab13e15aef36a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:8c:bf:59:96:bd:76:fe:22:75:bd:42:51:
e6:26:00:e1:23:cb:64:01:a3:9c:29:5d:d0:0c:21:
7f:db:dc:4a:c7:52:22:6c:ad:b0:c3:8c:1f:a9:1c:
89:4d:e4:b3:39:db:4b:54:f6:ad:8b:41:90:58:00:
eb:c1:27:2c:8e:03:3d:92:65:92:65:d5:fe:8b:6f:
cd:c4:8c:ef:9b:e2:0e:28:c5:1a:a3:cf:bc:ae:2d:
71:2b:b6:e3:e5:86:4f:32:e2:a9:3c:0f:26:84:f5:
98:f8:03:21:c8:07:9e:b0:ea:d0:55:93:3c:03:8d:
88:5f:ae:f2:40:9c:23:1c:cd:12:4e:7e:8a:69:dd:
ec:1a:76:d6:59:ab:63:fd:7d:28:ab:4e:17:9a:62:
05:ff:8f:29:d7:c1:8a:b1:7e:70:3f:ca:d2:3f:b5:
d8:85:78:f5:54:e4:3e:8c:d5:55:f8:e5:cf:c1:2d:
97:2b:bf:31:c2:51:ef:12:97:ea:41:08:bd:a3:11:
fd:2f:a6:18:9b:fd:55:aa:a9:50:0d:59:4f:fa:79:
f9:4f:fb:48:6b:6a:18:89:de:76:17:b6:57:ec:f6:
ea:c6:af:63:a2:84:a1:08:92:0e:91:99:e6:a1:7a:
93:14:ba:55:df:70:a2:c2:53:12:2f:92:09:64:a9:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:06:EF:DC:3E:0D:76:A7:BB:57:78:C3:AB:13:E1:5A:EF:36:A0
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:38:1b:3b:d5:f8:6f:a6:63:2b:74:c2:77:73:75:4a:f7:
74:6a:a6:e7:90:46:db:be:48:8f:e8:7e:7f:78:5e:d8:8d:bb:
52:59:28:7b:19:8b:1f:c2:6d:7e:69:33:c4:e0:7b:26:15:f8:
97:09:3a:f2:65:6c:10:5e:68:c9:b9:14:00:19:fe:bd:a4:b3:
82:0a:45:df:1e:df:97:b7:f5:e8:2f:4b:fb:13:6d:36:73:44:
5a:95:da:44:50:f1:3c:95:00:d7:1b:36:31:93:59:36:f3:4e:
12:83:7f:6f:18:92:ec:00:e7:0b:c0:f7:e7:e9:c3:db:c4:0a:
3c:5b:13:fe:7f:90:46:36:b9:fd:c8:fc:f6:07:aa:75:82:df:
1c:d2:c9:ed:95:a5:8a:bd:65:41:60:a6:2a:2e:89:41:98:c3:
fe:af:fd:28:5f:c6:fb:6d:32:e3:4f:83:f2:4a:c5:9f:e5:75:
3c:69:ca:aa:b8:64:af:e1:8c:2c:33:cf:85:9e:af:20:3a:80:
92:d6:5c:87:0d:30:45:3d:87:d9:79:a4:df:7b:b1:8e:74:d3:
f5:63:e9:ee:3a:56:4a:f0:33:df:d1:f9:80:0d:8b:cc:76:88:
c0:b6:85:bb:48:e6:4e:ad:e3:ec:a2:e4:63:02:67:97:0a:33:
96:df:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:02:54 2026 by rpki-client