Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
File: A2loTGfKqZ_8AYS-rMrw6oipISk.mft (raw, json)
Hash identifier: m/izAHlpKhpuQ/nH9W4S3dTPEk3g15JtkvIynD3hJoQ=
Subject key identifier: 1E:C1:40:E0:1C:CF:DB:02:29:4E:CD:11:4F:24:9D:C3:56:4D:14:F4
Authority key identifier: 03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
Certificate issuer: /CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Certificate serial: 01A130A2475AAEC3C9BE3F98B0D5CA475BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
Manifest number: 0D74
Signing time: Mon 12 Oct 2026 15:01:43 +0000
Manifest this update: Mon 12 Oct 2026 15:01:43 +0000
Manifest next update: Tue 13 Oct 2026 15:01:43 +0000
Files and hashes: 1: A2loTGfKqZ_8AYS-rMrw6oipISk.crl (hash: rGDBKDz+Dt2xbAa8tonQ+cT8jgl8u4/oGcVdTYGIFcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:47:5a:ae:c3:c9:be:3f:98:b0:d5:ca:47:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Validity
Not Before: Oct 12 15:01:43 2026 GMT
Not After : Oct 13 15:01:43 2026 GMT
Subject: CN=1ec140e01ccfdb02294ecd114f249dc3564d14f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:75:fd:a3:44:45:8e:12:87:3b:77:c1:af:
09:37:6b:a8:e1:9b:dd:fd:74:02:a5:94:ab:3a:f6:
1f:70:58:fa:2c:ba:1b:4c:a6:4e:fc:6b:12:9e:12:
e1:98:6d:10:14:9a:23:40:29:0b:a3:36:e7:f9:4e:
7a:7c:a5:a6:b1:85:88:01:d7:9f:9c:0c:c3:c3:87:
e4:9f:be:e5:e5:39:c7:16:74:8e:72:b2:9b:13:29:
88:8c:16:db:23:f0:24:ef:95:8a:79:25:39:94:db:
06:31:a0:34:71:33:fc:27:25:67:a8:4a:31:35:f8:
d6:a7:04:5b:db:73:3b:94:8f:0a:2f:f9:e3:64:8f:
f7:c7:3a:66:1d:2e:64:02:60:28:82:9b:8e:fd:09:
dd:8c:f4:50:bd:57:ab:77:7c:25:65:fc:40:55:ee:
e9:10:8d:6f:fa:4f:49:88:aa:0a:54:fd:34:51:4f:
b7:8c:7a:1d:1c:af:f4:9f:4e:24:c3:f8:04:26:af:
6a:42:e0:05:f1:92:c4:9c:01:3f:2c:09:bc:05:04:
2f:7b:c3:06:55:c6:9a:e9:e4:82:8f:8f:21:f3:92:
e7:ea:38:59:dd:a2:f6:44:10:3a:18:07:4e:18:09:
c5:53:78:e2:8d:29:3d:01:05:fb:5b:6c:ac:f1:d6:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:40:E0:1C:CF:DB:02:29:4E:CD:11:4F:24:9D:C3:56:4D:14:F4
X509v3 Authority Key Identifier:
keyid:03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:33:f6:84:b0:5a:96:9b:6e:c2:9c:37:b9:09:e1:02:5a:
cf:54:98:30:4d:50:1a:8e:fc:6c:29:3d:6e:1b:a9:0d:6d:d4:
bc:9a:30:82:ba:fd:4f:9c:c5:52:34:d5:58:16:c3:46:c5:fc:
24:61:c0:63:33:05:bf:b5:cb:47:de:a1:42:32:e5:66:fe:83:
3a:b8:22:a6:54:59:d1:30:f8:63:78:f6:b0:3b:2a:ce:b6:df:
75:a9:7f:f4:99:6d:02:88:c1:1f:ea:3a:b2:20:94:09:fc:8e:
4c:98:21:62:87:23:68:bc:3a:e3:c6:59:03:73:70:07:e8:c1:
fa:ad:dc:36:1d:70:50:c9:73:b7:e0:02:77:b0:28:e8:62:4e:
cb:a3:a5:b3:30:4a:7b:f8:42:dd:00:e5:28:f6:c5:8f:8d:f6:
93:bc:69:7a:8f:79:5e:c9:75:51:4a:f8:43:fa:05:07:fb:25:
10:11:5e:01:5e:6a:0a:da:f7:03:62:4e:68:e9:89:a6:0f:c5:
91:c1:eb:97:21:7a:1e:36:4c:28:fd:6d:ce:bd:1a:86:a3:90:
0a:14:78:34:df:ba:0d:ec:b8:3b:76:f1:28:e6:eb:dd:78:76:
3e:6d:c7:68:1f:cf:32:24:a3:49:a9:ea:45:36:f6:eb:9d:99:
ec:92:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:45:30 2026 by rpki-client