Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File: a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier: yHq/UgAkamSiIM/3tErK9iBqz6zu7+h+8NI4iJRqswg=
Subject key identifier: EB:5E:DF:95:5E:70:CB:30:CA:B6:07:D2:99:5E:C6:66:F1:D6:38:53
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 01A0C7B36410DB2CBAA2B8A4F2C672D151DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 06:00:17 +0000
Manifest this update: Tue 22 Sep 2026 06:00:17 +0000
Manifest next update: Wed 23 Sep 2026 06:00:17 +0000
Files and hashes: 1: MuWBM4y_8sU7g6FEyEJdZpch7MA.roa (hash: polciHBhuEIudcpVsohkilsNPMnWK3IMSBDrJXYyToE=)
2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: IVcZB7GKxHBO2+1Pm8g8BiEuF1zZ9CZP1q3QyknUx8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:64:10:db:2c:ba:a2:b8:a4:f2:c6:72:d1:51:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Sep 22 06:00:17 2026 GMT
Not After : Sep 23 06:00:17 2026 GMT
Subject: CN=eb5edf955e70cb30cab607d2995ec666f1d63853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:d2:80:62:6c:31:f0:d3:ca:9b:ab:00:96:
9c:76:94:7c:41:7e:2a:c2:b8:8e:19:4e:0e:c0:e9:
59:85:12:f2:49:ed:0b:d1:0b:42:3e:bc:3d:8a:30:
ca:3f:43:1f:9c:99:e9:17:94:79:71:21:8a:6b:0f:
f2:15:19:ff:01:67:e3:29:e3:db:72:c3:20:85:e4:
77:d8:56:37:bb:bc:08:94:9e:e6:ec:6d:e4:d2:53:
0a:02:fd:62:ca:24:5f:c7:ef:46:de:0e:6d:27:dc:
a5:b1:5c:d9:2d:0f:eb:bf:8b:53:60:dc:81:3e:49:
65:bf:3e:42:85:d5:3e:d4:e3:69:ba:0a:fe:dc:44:
99:83:d3:db:5c:20:6b:f7:cf:b2:96:47:0f:30:da:
7c:99:13:fb:c6:f2:ac:94:ee:96:3c:b3:bf:6c:05:
34:8c:16:10:f1:e0:f8:14:59:87:77:0a:d7:b5:b7:
fd:a5:79:ab:47:e0:f4:95:a1:06:43:94:2c:d6:8a:
c3:4d:5d:f0:91:de:83:4f:dd:d4:48:b0:df:52:a5:
de:de:4a:36:8f:9f:bc:74:cb:0e:5c:a9:0d:5c:a0:
da:ae:7d:ca:9f:8f:1c:28:db:6d:2d:30:f7:ac:75:
1d:34:e5:61:6f:e9:32:68:21:96:04:10:14:ff:e4:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:DF:95:5E:70:CB:30:CA:B6:07:D2:99:5E:C6:66:F1:D6:38:53
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:84:e4:67:b4:bd:0c:40:97:1e:c5:51:3c:02:72:e6:58:ce:
ca:fc:08:5c:b1:10:68:93:cb:7e:09:48:f0:09:e1:1e:a6:54:
db:32:40:d2:57:09:fd:ee:50:ba:42:ec:af:c7:11:c2:6b:a9:
9e:fe:8d:97:cc:ef:5d:46:6a:05:2d:89:98:c5:4f:9e:c4:90:
48:36:07:aa:63:e8:44:17:16:a5:33:ad:45:8f:b0:02:5d:cc:
03:6e:80:c4:84:01:fb:6f:16:9a:0f:8a:22:f4:51:fc:91:f8:
91:3f:bb:0c:cd:ca:f8:9a:e3:35:b9:f7:25:49:ee:76:dc:bd:
89:41:08:f0:b6:9f:c5:d7:01:cc:0f:d1:77:8b:62:29:5e:3c:
fe:ce:6e:ee:6d:13:6c:bb:c2:7c:9c:ca:b9:a0:88:11:a0:74:
22:35:f4:25:af:2d:52:41:48:40:ec:9b:86:d1:44:7f:9e:9c:
22:18:1d:fa:ae:3c:94:4d:80:53:a2:f1:17:ac:96:42:f8:81:
2e:d0:16:d5:ea:b6:2f:aa:bb:b4:b7:a9:cc:0f:bc:4c:91:99:
f4:76:21:56:6d:43:e9:16:b5:c7:04:c3:b7:f1:e6:cb:c4:0d:
62:1d:34:56:13:2e:19:8f:6e:9f:61:66:95:af:af:51:52:13:
1b:21:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:21:21 2026 by rpki-client