Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
File: a09TDEYWY1E1ClclpwD7xdcchoA.mft (raw, json)
Hash identifier: 1Ie4Ln1JDm+c5sppNQTD+3C6INLQLe4H4RPGHpCDlZs=
Subject key identifier: A5:DE:96:97:BA:86:B6:B2:FD:FB:B8:BE:99:83:D7:40:4C:D6:DC:74
Authority key identifier: 6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
Certificate issuer: /CN=6b4f530c46166351350a5725a700fbc5d71c8680
Certificate serial: 01A13DB8CDDF9630482C735585FD48953979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
Manifest number: AC
Signing time: Thu 15 Oct 2026 04:01:23 +0000
Manifest this update: Thu 15 Oct 2026 04:01:23 +0000
Manifest next update: Fri 16 Oct 2026 04:01:23 +0000
Files and hashes: 1: XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa (hash: wwjL59OW3UC7V7CAOSmVDLYL1/AFybNZY6xPPQkXT94=)
2: a09TDEYWY1E1ClclpwD7xdcchoA.crl (hash: aL7bfB6ZYq3cyBE6KqV8LNaVBa3X5QzBi7r8dwlcbK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:cd:df:96:30:48:2c:73:55:85:fd:48:95:39:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f530c46166351350a5725a700fbc5d71c8680
Validity
Not Before: Oct 15 04:01:23 2026 GMT
Not After : Oct 16 04:01:23 2026 GMT
Subject: CN=a5de9697ba86b6b2fdfbb8be9983d7404cd6dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:bd:8c:a9:4d:57:7a:33:76:82:7d:b0:d5:
7e:b8:14:e1:36:43:ec:1f:75:30:2f:45:14:25:94:
af:d8:de:51:c4:1b:1f:1c:e3:0a:1a:6b:29:31:27:
2c:8e:ba:c6:3b:5a:c0:34:df:3d:b3:07:d8:88:b8:
91:bb:af:27:9e:d3:10:b6:d8:ed:f0:29:8a:c5:a1:
00:17:cb:c5:c7:dd:a3:c5:63:0c:ca:aa:d7:51:59:
da:8b:e1:af:97:3c:9b:93:90:4e:c7:1a:70:dc:96:
a2:39:c1:0c:bd:bb:a1:ba:5a:a0:ab:c0:9c:60:89:
f2:18:4e:83:c9:58:63:2a:40:cf:81:38:b7:e0:a4:
79:66:9b:ae:17:3d:4d:b0:ac:fa:32:6d:88:09:80:
d7:30:de:2a:ce:24:ec:bc:00:74:5f:de:0b:a7:b0:
7e:cf:3e:0f:50:7a:d8:e1:66:10:7b:2d:6f:b2:46:
51:a2:ad:19:29:3a:7e:ad:84:59:f3:88:6f:30:d7:
bc:8b:61:41:e8:a1:33:a6:8e:0a:e3:7c:06:6d:1a:
75:dd:ef:ac:9a:38:a0:c3:f4:a6:ec:a2:07:dc:b1:
4b:9a:15:23:b2:ee:4b:c9:a5:8a:52:20:51:24:c6:
d0:98:13:ef:0c:00:a4:1d:00:05:e3:6e:08:a9:33:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:96:97:BA:86:B6:B2:FD:FB:B8:BE:99:83:D7:40:4C:D6:DC:74
X509v3 Authority Key Identifier:
keyid:6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:85:a3:3c:ce:cc:88:39:61:45:78:4f:a7:9f:e9:14:5c:92:
3f:0e:15:ab:41:5f:6b:60:4f:c7:33:60:a0:89:a9:a3:82:7e:
51:9e:e9:50:ce:8f:7b:4a:24:32:a8:02:d1:08:14:b8:dc:1a:
ce:47:e9:5f:5f:b0:b1:fc:5e:00:87:50:67:95:94:32:ad:f1:
92:cd:31:e1:45:e5:d8:18:a8:dc:66:d2:38:ef:54:ac:89:ef:
3b:91:16:d3:70:24:64:69:78:b1:bd:01:d7:e7:29:76:e1:47:
38:7e:fc:77:54:1a:72:ed:61:4b:62:e1:dc:78:f9:93:04:98:
3d:2e:40:bd:98:31:70:cf:e3:6d:ca:f0:8e:da:f9:7d:b5:4d:
9d:f0:50:a2:e7:2f:79:aa:cd:ed:66:dc:dc:b6:c9:b0:2c:b9:
2d:26:88:fc:7e:f7:2b:bd:47:ad:e7:40:42:15:81:f2:76:43:
86:8c:fb:aa:36:8e:a7:a6:7d:91:fe:90:26:8f:6b:71:31:38:
18:49:81:6d:ae:7f:14:13:a5:21:96:67:08:f6:4f:12:b2:5e:
65:51:dd:34:d8:52:dc:be:25:4e:2c:5a:55:3d:9a:8e:14:e4:
58:93:f2:49:65:57:d4:53:d4:1d:ab:e4:c1:f4:99:40:e8:93:
fd:6f:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:38:32 2026 by rpki-client