Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: GOgqs5FoJsIrL6PvS1O8qTwaUlQtmOXhXBDpr1SC23E=
Subject key identifier: DA:D6:A1:85:FE:13:0D:34:19:86:CE:EE:01:C8:D8:51:CF:61:34:F7
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019D29970B24D5EB365817EAA32ED1FC2984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1310
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: NC18mII6/WkscE6UqBYO99SCFxXf2ac5q1CPQrb0aQA=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0b:24:d5:eb:36:58:17:ea:a3:2e:d1:fc:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=dad6a185fe130d341986ceee01c8d851cf6134f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:ee:0d:cf:f8:17:ae:0b:9c:28:36:17:4b:
54:03:9d:e9:80:a3:28:98:d5:60:bb:03:e3:53:cf:
59:c3:27:04:dd:62:a8:80:a2:bd:79:91:2b:dc:48:
f5:66:b4:cf:8f:82:19:99:bc:b6:b0:85:41:c1:6b:
0b:09:35:34:b7:11:76:96:b2:76:55:c2:50:6f:34:
96:70:f0:1b:cb:03:f2:c9:f5:07:ab:9f:7b:ea:29:
e6:92:3d:72:fa:94:28:97:2d:c8:67:94:5b:66:fa:
0a:f1:ff:ab:ae:3e:a5:97:b1:fc:74:94:a9:19:57:
7b:0a:6d:60:45:22:e9:60:35:0e:13:ad:76:47:45:
ba:85:6a:96:c0:69:9f:2e:5a:87:d6:63:d8:e8:37:
3c:8a:01:6a:e2:04:83:4e:a1:ee:02:2d:58:77:f7:
25:4a:0d:6a:88:bb:58:43:28:90:1b:84:1d:43:1f:
bc:cd:e0:2b:df:89:27:ca:75:29:57:4c:66:92:23:
d3:12:5e:c1:c0:37:2c:b5:e5:1f:af:2e:46:bb:22:
55:dc:e9:b1:78:cf:64:e4:8e:1b:23:26:e6:60:d6:
2d:b0:e7:14:ea:81:cf:56:d4:38:ba:0f:3e:3c:a4:
e6:6c:5a:5c:ec:b1:f6:d6:c7:38:5b:c0:38:77:26:
32:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:A1:85:FE:13:0D:34:19:86:CE:EE:01:C8:D8:51:CF:61:34:F7
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1a:90:5e:ad:3f:59:a1:93:ee:e2:40:d2:8e:c3:49:5e:15:
4a:cd:98:df:d4:36:a8:ad:d2:8a:6b:4e:d7:3a:c3:20:9b:e4:
b4:6f:63:69:61:66:db:b4:b8:30:d8:3e:5b:f0:b5:69:2c:a9:
9b:81:06:90:84:52:bc:31:4d:d1:0f:b0:32:d5:9b:cc:42:aa:
b0:c4:32:73:b6:5b:ba:5e:59:b1:9a:a1:f2:b7:6b:66:23:9d:
31:bb:26:6b:54:09:ae:b4:6e:1d:c9:a2:96:f0:65:be:39:ba:
5d:f9:5f:6f:6b:5c:50:89:24:47:45:08:76:b6:15:80:75:c4:
41:8d:e4:0c:47:f4:0f:ff:f3:aa:24:b9:63:00:d5:cb:ff:60:
7b:7f:7d:56:ad:42:ed:b1:06:ec:4b:de:50:c3:6b:60:7e:bb:
1c:77:b2:df:22:b8:d4:30:0a:ed:c8:ee:d4:ac:47:e6:16:90:
5f:93:ce:13:26:a5:49:df:d0:f2:34:07:1a:e5:e0:a1:e9:16:
58:87:a0:21:a9:d8:0b:c2:5f:32:e1:48:ab:49:92:fc:a3:a9:
64:d6:8f:3d:74:38:e2:05:de:f9:4c:ee:db:28:35:b7:af:9a:
58:80:09:c4:fd:6f:44:5d:4a:5b:db:0a:97:b5:42:ee:66:a9:
a2:82:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:39 2026 by rpki-client