Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: kCUqXKUVj7qmysOdyOPFwo4o71PRc3wiJkS5YWpeq10=
Subject key identifier: 0E:A8:90:49:5F:02:16:8A:B2:24:39:33:72:8E:E1:15:6A:61:0F:B4
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01A0E777E1220FD36ED29FE6EB7BE80658D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 10:03:08 +0000
Manifest this update: Mon 28 Sep 2026 10:03:08 +0000
Manifest next update: Tue 29 Sep 2026 10:03:08 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: 6OjL8vvatQ37z9Y3TB/WKfn4Tm/Dp93sDk4cs27wbRA=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:e1:22:0f:d3:6e:d2:9f:e6:eb:7b:e8:06:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Sep 28 10:03:08 2026 GMT
Not After : Sep 29 10:03:08 2026 GMT
Subject: CN=0ea890495f02168ab2243933728ee1156a610fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:15:44:23:23:79:07:65:af:20:85:94:2f:
ad:8e:d8:cf:ae:58:8e:d6:ab:cd:1d:d3:ef:d4:9a:
40:e3:38:8f:fe:84:3b:c2:27:a4:4b:f3:db:f5:82:
9b:71:c6:52:6d:e8:2c:09:a1:8f:fa:6e:3c:af:31:
10:9d:f9:b0:ca:c1:67:fb:ca:e0:14:78:f8:77:e7:
8d:a3:10:02:98:0d:d9:64:65:e7:df:8c:f7:c9:a1:
4d:b0:5a:70:28:0c:be:ab:51:44:99:41:19:ad:de:
fd:c5:36:53:00:2e:7e:2e:4b:fc:f8:59:ae:23:30:
9f:a5:ee:a5:48:3c:68:cb:07:20:00:17:4c:6e:fd:
07:4e:0f:fd:a8:28:b6:14:27:38:ee:71:d6:3c:04:
5f:9e:32:98:7c:80:8c:28:90:c9:e5:4e:32:f5:d8:
35:ca:0d:d8:3b:01:5a:f9:c3:fe:69:ae:77:85:54:
2f:53:02:3f:a0:e4:9c:2d:ef:31:71:c8:e7:3d:52:
c5:fe:7b:0f:ca:c8:09:b0:bf:14:51:43:b0:da:9e:
69:90:e1:41:8a:59:63:6d:43:3f:c5:4e:2b:43:03:
ce:1b:06:14:25:6e:67:86:97:81:be:ef:41:aa:0e:
e6:20:2d:49:16:3c:12:04:39:82:6c:db:3c:2c:9c:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A8:90:49:5F:02:16:8A:B2:24:39:33:72:8E:E1:15:6A:61:0F:B4
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:77:aa:82:f4:f4:21:65:ae:75:74:bd:f5:28:01:25:3e:09:
ef:b1:18:8a:2d:f0:ab:f3:74:df:53:ce:54:89:e8:1c:63:49:
1f:51:3e:4c:8c:99:6e:f6:d9:0c:08:3b:75:36:8a:6d:0d:eb:
45:34:e9:61:9e:25:43:74:b4:5a:97:bb:77:8d:72:fb:10:20:
e7:72:2f:b4:d9:48:93:ec:35:21:e4:da:b3:13:d3:f4:64:cf:
8f:9e:b8:9f:dc:da:e5:c6:5c:75:56:ab:65:2b:ad:28:99:2b:
f0:20:66:da:b6:79:00:cf:4e:ac:f5:fa:70:f7:0c:b1:b3:4d:
6c:3b:b7:95:00:c2:ce:5c:59:14:12:d7:d6:21:04:98:d0:2a:
24:d9:e2:57:06:17:ba:1b:ba:a6:d9:3f:38:dd:03:dc:44:b3:
40:4b:57:ec:a8:f6:a7:35:41:be:d4:a9:a7:9a:46:ff:9a:7d:
94:a6:bd:68:a7:b9:76:f4:b2:88:5c:dc:ac:0d:d1:cf:27:95:
39:66:d6:7d:44:0e:08:cd:73:7b:a2:d1:97:d6:28:53:53:12:
e6:25:c4:7d:3d:1f:48:44:cb:a1:f8:67:90:69:52:82:7c:69:
2f:04:d8:60:1e:83:83:92:11:cb:99:30:ba:a6:8f:a0:93:06:
55:c3:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:17:10 2026 by rpki-client