Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: FHWRQCbBlYEWIut0QdFh1Za+1j/TPTYwUn8CmNqf850=
Subject key identifier: D5:61:AF:EE:20:05:4D:BA:D1:52:82:76:BB:05:77:4B:64:22:E3:DD
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 01A0D192D16BB53A40F51C4694DCA13FEDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 16FC
Signing time: Thu 24 Sep 2026 04:00:54 +0000
Manifest this update: Thu 24 Sep 2026 04:00:54 +0000
Manifest next update: Fri 25 Sep 2026 04:00:54 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: dVoFkv1Uyaa5jAqRslJb9P/Mx2YH2lNKKLEPVkc34yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:d1:6b:b5:3a:40:f5:1c:46:94:dc:a1:3f:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Sep 24 04:00:54 2026 GMT
Not After : Sep 25 04:00:54 2026 GMT
Subject: CN=d561afee20054dbad1528276bb05774b6422e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:dd:88:d7:03:a2:70:77:35:8e:8f:79:bd:
d0:46:54:cb:93:fb:4f:56:0d:72:9a:4d:d0:d9:d7:
fd:36:9f:6e:bb:f3:12:d9:93:3c:82:c4:42:d6:6e:
90:4e:6d:b6:eb:2b:71:5a:3b:73:ac:3f:d3:bb:57:
37:31:d7:29:17:a4:99:18:f6:9c:9d:f5:5b:55:d5:
14:97:e5:26:11:10:52:d4:8d:3e:56:bd:b1:e0:73:
87:4f:40:0b:37:76:1c:d9:6a:d8:8a:52:9b:2d:0b:
34:65:3e:94:97:2d:a9:7f:c3:2f:2c:88:ca:1a:39:
08:2a:b9:71:96:37:af:00:ad:46:ff:ec:06:e9:c7:
84:e1:38:56:4c:7a:92:fb:cb:39:29:86:59:78:d4:
fd:2f:df:50:e7:82:18:16:25:7b:a7:fe:f3:6c:fe:
6f:b2:f6:f1:e5:21:fa:15:da:a3:60:e6:eb:b4:04:
2c:d7:2e:08:53:44:d2:c2:73:29:9d:aa:32:a6:79:
78:65:12:a0:4a:f2:63:58:f6:f8:e8:67:a8:f8:1f:
12:c5:3f:5d:65:2c:31:dc:ef:df:f2:93:e3:c5:29:
a0:37:4f:bf:f1:51:56:63:1e:d4:86:42:ff:8e:b7:
16:44:38:5a:09:1f:21:5b:b9:07:fd:a1:98:53:ff:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:AF:EE:20:05:4D:BA:D1:52:82:76:BB:05:77:4B:64:22:E3:DD
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:11:a1:f9:82:64:c3:c4:7a:18:d0:65:a5:d7:7a:94:b1:b3:
ef:b7:db:9d:e2:68:4e:66:f0:d9:06:77:a3:9f:9b:f4:38:e0:
39:5f:25:09:bf:03:4e:d6:b6:45:2f:27:1a:06:c6:b5:65:90:
6a:b8:ea:13:65:30:35:03:ca:5b:df:ad:f6:d2:98:0d:11:e9:
3a:88:fd:c9:49:1a:ea:4c:ff:3f:4e:51:5b:c6:6b:78:20:23:
13:b0:cb:b9:20:2d:e5:c8:b2:2a:07:b2:c5:f2:3f:75:0e:89:
28:c4:ef:3d:a8:1b:7f:37:c5:a0:db:2a:97:97:f5:dc:6d:31:
56:5d:37:66:2d:50:4e:ce:b0:f1:55:33:a9:24:43:c4:eb:02:
b9:25:85:45:a0:d2:91:1d:88:64:86:a1:bd:0a:6a:30:0e:94:
01:d8:69:f1:c1:f6:ed:5b:8c:50:46:57:a9:7a:f7:98:28:80:
0b:a7:31:fb:ea:e2:09:c1:7a:6a:1b:ad:10:aa:de:60:da:fb:
db:50:b3:ba:2a:f1:92:f0:b3:cc:0c:54:12:07:33:70:17:09:
c1:c7:46:95:92:33:53:48:76:d3:4f:62:92:90:4d:13:91:a1:
b9:7d:9e:b8:f7:ab:13:cb:50:40:40:72:0e:d3:79:22:62:6a:
e4:9e:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:55 2026 by rpki-client