Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: qe6/hLHQrHnxi+PCwBzSOqIWipQnfM66jYxH0631GmQ=
Subject key identifier: E1:F4:43:79:57:74:2C:85:D2:07:C8:9F:DC:7F:1D:5B:D6:9F:41:0D
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01A105128737148A3B9695270F878E444E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 04:01:02 +0000
Manifest this update: Sun 04 Oct 2026 04:01:02 +0000
Manifest next update: Mon 05 Oct 2026 04:01:02 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: JwKKr/kS+b/TTI9EbyNh20tooiPtP22HW6I2jiX/4yo=)
2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:12:87:37:14:8a:3b:96:95:27:0f:87:8e:44:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Oct 4 04:01:02 2026 GMT
Not After : Oct 5 04:01:02 2026 GMT
Subject: CN=e1f4437957742c85d207c89fdc7f1d5bd69f410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:58:f0:52:15:cc:30:d5:d0:45:33:ab:3a:
08:01:56:bd:ec:62:e1:c4:ac:ef:95:26:7d:5c:08:
f6:55:35:4d:4b:71:83:8b:6b:ce:ff:99:f7:b5:b9:
60:81:df:2a:ba:a3:eb:d2:fc:e2:d2:60:a4:3a:25:
bc:a6:7d:14:7b:2d:d0:7d:21:c5:49:26:78:2b:01:
92:e9:3a:b1:e4:73:f2:26:db:d2:ae:fb:b2:46:03:
44:0f:c8:d6:47:8e:c7:39:df:ea:62:b2:10:e4:49:
cb:23:65:c0:e0:9a:52:9d:e7:39:dc:38:fb:62:eb:
89:ef:31:51:5c:89:64:51:6c:b8:5d:b6:2b:b1:60:
d2:2f:5a:be:8a:a3:f1:b7:c6:fc:2a:24:29:ff:f6:
90:17:04:36:4b:dc:20:69:25:b1:6f:c9:97:e4:99:
9c:bb:1e:6c:40:c8:8a:50:a7:7a:c5:79:33:37:2f:
22:27:c8:75:c8:fe:03:74:40:ec:9a:04:b8:cb:f2:
4e:22:a4:9f:1a:c5:2d:23:42:c1:50:cc:61:fd:7d:
87:90:e8:7b:ac:4f:50:b8:1b:2d:71:36:25:7e:fd:
1d:d5:c4:cc:69:44:b5:68:c6:3a:76:86:2d:45:27:
c2:a7:79:c2:8b:45:fe:8b:34:e8:6a:b1:e8:7e:0f:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:43:79:57:74:2C:85:D2:07:C8:9F:DC:7F:1D:5B:D6:9F:41:0D
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:79:b0:45:a5:24:9a:b9:62:12:78:42:ca:57:f3:46:f1:
e7:ec:f0:af:f0:2f:a5:78:f7:17:1e:fa:f3:6f:f7:53:bb:bf:
02:a5:da:30:8b:64:09:4f:a5:2c:44:93:b5:e5:3e:a0:70:87:
cb:5c:b5:6b:50:fb:ab:40:ae:a5:9e:d3:a1:b0:aa:33:5e:0b:
ad:27:81:b4:de:5b:fa:1a:19:e5:19:46:23:ed:90:ea:ba:84:
05:05:b8:51:d5:d9:4e:b8:a5:5b:a0:71:9e:b2:6d:87:b2:83:
ea:50:42:9b:95:6f:f6:47:d6:9e:e8:c0:52:71:df:2c:79:31:
5d:c7:ff:39:ab:6a:f1:b7:b5:17:30:08:c3:59:f1:49:18:88:
25:b6:ea:59:d7:8f:5a:dc:a1:45:27:aa:21:b5:28:c0:ac:7c:
71:85:77:8b:36:02:79:85:fb:ae:3a:41:3b:0c:a8:e2:11:a5:
cd:b8:e6:64:f6:9e:e1:f3:d4:0c:cb:9b:65:bc:43:f4:c6:5a:
4b:57:6c:ac:5f:35:7e:9c:05:c1:a4:b4:6c:ad:19:55:17:d5:
af:28:5e:89:58:5b:c0:d9:cb:1a:17:d7:93:41:cd:29:5e:9c:
f2:2e:94:88:e0:cf:51:14:04:7f:b4:2b:24:79:7e:85:d8:e5:
0c:87:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:48:05 2026 by rpki-client