Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: pLU0W9IPGF+wrbO6wXZEXDQk/842s4H6g3D70Z8ttr8=
Subject key identifier: B8:A4:B0:61:0D:4F:F9:95:44:21:7C:56:47:A0:92:A8:B9:84:A9:B5
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01A0CEC896711EA220337D7986F5289E76C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 15:00:47 +0000
Manifest this update: Wed 23 Sep 2026 15:00:47 +0000
Manifest next update: Thu 24 Sep 2026 15:00:47 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: /CWlSgMr+BzHJmCeldd5ZvmnydPNETHo3KTgreeD+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:96:71:1e:a2:20:33:7d:79:86:f5:28:9e:76:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Sep 23 15:00:47 2026 GMT
Not After : Sep 24 15:00:47 2026 GMT
Subject: CN=b8a4b0610d4ff99544217c5647a092a8b984a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:ec:cf:ac:f2:b1:3d:d1:02:fb:cc:90:47:
a9:0a:cb:3e:c0:b3:a6:ff:06:96:b7:2c:20:dd:0b:
39:9a:ba:42:20:4f:93:3e:73:23:b5:98:81:1d:99:
9c:c3:e6:a0:8c:ff:86:14:d8:17:b6:58:2b:b5:54:
97:c4:b6:f0:da:48:17:7b:27:ed:c3:8f:a0:cf:26:
a6:96:c6:3a:a5:d3:73:23:78:09:04:48:e1:13:84:
90:54:58:d9:49:bb:9b:e0:a2:70:50:18:84:21:b9:
94:b7:8b:c2:0b:61:43:6f:70:b1:5d:d8:76:93:79:
58:87:25:11:08:ed:97:4e:da:89:f2:ef:5e:54:62:
01:71:c4:b9:e9:96:8d:f4:a2:f3:10:a2:9e:19:0a:
59:ab:a4:28:34:87:66:54:dc:2b:18:ec:2c:bc:92:
4a:0f:c8:37:41:dc:88:28:d0:4a:d7:46:7a:94:60:
54:b1:c3:7d:9c:9a:a9:39:df:9e:13:83:8f:25:0f:
95:0e:8c:bf:ba:7f:20:4f:3f:7b:40:2e:c2:90:20:
a1:d7:e6:32:e4:49:8b:fc:14:5a:52:b3:27:fb:4c:
ae:07:8d:e0:51:ae:45:63:3c:d8:0c:78:ad:84:e6:
b9:e0:98:b4:c0:2b:9d:6c:eb:de:c2:ac:3c:e0:6c:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A4:B0:61:0D:4F:F9:95:44:21:7C:56:47:A0:92:A8:B9:84:A9:B5
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:83:91:cb:51:ae:12:49:75:2b:7f:62:9a:0f:49:a4:9b:49:
68:3e:2d:98:9c:0d:f8:f4:f3:76:06:f8:d7:d4:25:a9:18:0f:
1c:83:50:77:b1:1f:c4:9c:54:f4:d7:70:f2:14:e7:c4:c0:cb:
61:b5:52:22:64:71:ea:42:cc:0a:94:9e:a5:a0:eb:dc:72:dc:
24:04:ad:e7:27:f9:73:ab:d3:1b:0f:6b:8f:b9:6b:a5:65:7e:
a3:c7:6a:f9:fd:bf:4e:98:85:01:94:cd:40:4c:f8:ab:b0:37:
16:a9:5a:89:1a:7e:db:95:33:37:0d:ba:26:64:8a:b0:35:4d:
6c:82:73:64:ba:04:d0:67:d6:f4:67:56:6e:80:97:34:04:15:
9c:28:cc:9f:4c:1c:93:71:48:a6:20:7e:75:9c:87:42:21:f3:
b9:07:9b:9b:b8:22:9a:ab:5b:54:eb:b7:be:fa:49:12:2f:3e:
30:b4:34:73:b4:fe:00:4c:84:0e:59:b4:50:6a:56:81:e1:99:
94:9a:97:5d:fa:94:1f:65:c6:da:5e:4b:de:69:0e:fd:9a:1a:
b9:bc:c1:f8:b8:1a:5e:f3:f7:be:04:fe:ed:21:ac:e3:86:73:
1b:60:ea:d4:59:3e:58:4d:4c:16:74:b0:6c:51:0e:23:75:8c:
31:a4:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:27:58 2026 by rpki-client