Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: jHjoCSvUDqjU1/X4j0WZep1EZaJov8J+z/I3fiqkqnk=
Subject key identifier: C4:77:41:E3:7F:9E:D6:A1:A1:7B:AA:5C:63:36:5D:84:26:63:AC:2C
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 01A0D8DED4A8DB8602D4043A457861358139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 06F4
Signing time: Fri 25 Sep 2026 14:01:16 +0000
Manifest this update: Fri 25 Sep 2026 14:01:16 +0000
Manifest next update: Sat 26 Sep 2026 14:01:16 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: bCR/jKdMDRyNdARbYS8IbxOLq0+XtxJljg2zebqIhw8=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:d4:a8:db:86:02:d4:04:3a:45:78:61:35:81:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Sep 25 14:01:16 2026 GMT
Not After : Sep 26 14:01:16 2026 GMT
Subject: CN=c47741e37f9ed6a1a17baa5c63365d842663ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:f2:95:8d:1b:e6:0b:7e:f3:36:57:fe:31:
f4:df:86:bf:3b:54:1e:b1:a7:80:43:c2:8b:3b:f1:
df:6f:22:75:5c:aa:aa:ec:b1:3e:c2:b4:b5:a9:0b:
2e:21:c0:d4:c1:db:21:7e:1a:6f:ae:19:5c:7b:7d:
ef:3a:ec:0f:fb:1d:19:a7:2d:18:32:40:38:21:46:
9e:e5:ea:08:a9:1c:d6:bc:91:80:e8:9e:43:bc:63:
f6:58:f6:3a:0a:c9:56:1e:a1:a4:e7:1d:f8:2f:ed:
50:76:87:81:01:15:e3:ea:46:04:5a:c2:12:ff:76:
d5:55:32:86:bb:69:0d:da:26:c2:ba:35:5f:81:2a:
15:54:c7:c8:0d:c0:66:a9:53:90:88:cb:dd:5f:72:
88:4b:ea:83:3a:62:ca:db:5d:9b:81:51:4f:f4:f3:
8b:83:bd:27:cd:26:0b:9b:db:e5:b3:fb:a9:ac:56:
db:14:60:02:24:f6:47:7a:73:7b:a6:7b:20:52:99:
e2:cf:9a:9a:e9:de:02:4a:05:38:80:8e:1b:af:01:
0f:73:08:af:c7:65:21:56:9a:8d:f3:0c:9f:86:52:
49:41:89:8a:0c:bf:2a:b4:d7:e7:49:66:19:68:9b:
a1:6f:07:49:a8:b1:a3:98:46:79:4e:99:cb:07:b0:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:41:E3:7F:9E:D6:A1:A1:7B:AA:5C:63:36:5D:84:26:63:AC:2C
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:b8:f1:0c:ad:9d:2f:1d:ed:b1:d5:cc:d4:41:10:36:d5:
25:a9:e3:7a:bd:ad:d3:28:a8:d2:10:ce:82:5d:0a:47:61:a2:
f7:a6:12:9c:b0:7e:b7:5e:e8:86:95:6f:17:c7:18:e4:cc:ce:
36:0d:60:db:01:d8:32:2d:0d:17:44:88:37:e9:8c:60:1c:4b:
75:4d:36:0a:32:17:0b:0c:14:35:d7:b1:a9:7f:fa:01:79:df:
ae:8a:6d:2f:f7:fc:6c:a3:46:a8:c7:7d:15:0f:8e:f1:8f:ee:
39:13:f7:15:47:3c:e4:fe:6f:14:39:38:5a:1e:0b:b8:d0:0b:
df:15:49:23:75:2a:fb:18:cd:22:55:56:95:40:44:e9:47:5b:
f9:d8:fe:14:20:f6:c8:39:17:e5:8c:50:14:2f:02:7c:6d:78:
b4:cd:17:71:b3:e9:b6:20:c5:24:c4:89:15:5c:45:ba:ae:88:
8a:a2:f2:52:5b:2b:31:85:ab:be:15:09:0e:16:43:e3:cb:24:
a9:fc:46:18:f4:2e:53:74:9c:c4:18:e5:dd:da:bd:56:70:64:
49:bd:cb:37:97:81:65:13:f8:70:b1:6c:d7:2f:87:28:2e:d2:
56:96:b8:6d:5f:d0:3c:53:4e:bd:48:82:60:23:5d:83:f6:ad:
28:e8:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:22 2026 by rpki-client