Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: dkO8WmG0L8KDgHI3DEHz5ibHh6IYLXsTh7wCCfOsXKE=
Subject key identifier: DA:BF:1A:C3:D2:8A:74:10:EF:E2:08:E0:BD:AC:5B:1C:0B:4D:65:BC
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 01A0D8A81B66343D9091239A87B697CA6BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0ADB
Signing time: Fri 25 Sep 2026 13:01:30 +0000
Manifest this update: Fri 25 Sep 2026 13:01:30 +0000
Manifest next update: Sat 26 Sep 2026 13:01:30 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: jcfYXhK2Gzuuakt/Pi1udi8dTA/3qWvpC7u1vpDZtyU=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:1b:66:34:3d:90:91:23:9a:87:b6:97:ca:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Sep 25 13:01:30 2026 GMT
Not After : Sep 26 13:01:30 2026 GMT
Subject: CN=dabf1ac3d28a7410efe208e0bdac5b1c0b4d65bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:53:98:88:0d:80:82:73:b9:49:c1:ba:17:
b7:3c:4f:00:95:c8:3e:89:16:66:8b:65:4e:17:99:
58:a0:27:07:bd:03:40:71:1d:25:10:f8:4c:0f:63:
a6:2b:89:91:fa:db:16:05:a8:70:e2:0d:fe:fd:a4:
41:3b:1e:b5:2d:ef:0a:0d:b2:ef:cc:9f:f7:ef:d3:
c6:d2:fb:21:c9:ce:1d:db:9c:3e:5a:c2:11:cb:0f:
2a:e6:b2:de:25:fd:3c:53:26:49:eb:be:d7:4a:dc:
80:1e:27:e0:21:2a:79:df:34:ed:b1:9d:f4:43:e4:
d8:25:a8:06:14:f8:6e:61:ae:77:c8:ea:24:4e:c3:
11:af:b9:96:e4:d3:bc:89:44:18:31:05:8b:c9:68:
12:ce:cc:c5:c4:f3:3e:15:65:82:6c:ee:c9:9f:b4:
f7:92:de:5e:dd:5c:4e:c4:90:a4:98:85:b8:58:f4:
55:74:c8:28:55:e8:e6:3c:a1:34:d6:07:5c:34:ac:
cd:00:f6:96:ad:21:42:16:0a:9f:7a:d8:9c:43:27:
01:36:22:0e:9c:6e:17:7d:d5:49:55:12:3e:6c:f3:
1c:a0:c0:d3:2e:02:28:89:d5:7f:e4:9f:4a:60:40:
a1:0a:59:45:ed:2c:b5:d5:d4:46:95:b9:b6:63:1f:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:1A:C3:D2:8A:74:10:EF:E2:08:E0:BD:AC:5B:1C:0B:4D:65:BC
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:76:c9:7f:d4:ce:eb:4d:f0:29:7e:62:48:a5:aa:77:fa:88:
15:17:81:83:80:9c:82:1e:c8:c0:e8:de:04:cf:fd:30:3c:8c:
ea:cf:73:a8:26:35:f6:cd:3b:98:f3:d8:c5:26:f0:66:e8:74:
cf:c1:af:6f:2d:1e:04:67:0a:82:03:51:9c:10:96:0b:72:66:
ae:48:c9:58:cc:be:cd:8f:35:1f:42:15:b9:a3:39:3c:1c:0b:
74:d7:e8:f5:ea:1e:f1:83:61:29:6f:7e:af:82:08:47:ce:5a:
44:6a:65:eb:58:45:de:ea:93:96:8e:d5:8c:9f:95:3a:09:48:
d8:cd:e6:15:02:45:f6:20:33:ae:f9:5b:ee:ce:e4:64:06:ea:
8a:e3:3c:af:52:87:af:91:56:e5:ee:60:37:3c:05:c4:72:aa:
86:9f:da:69:f5:f0:84:4e:12:94:1a:eb:44:bb:3f:c8:6c:5b:
cc:de:6d:82:32:74:d5:65:dc:0c:86:69:37:5b:36:38:32:a2:
bf:8c:2b:7d:32:0b:8b:04:0f:b9:c8:96:2a:00:b6:66:4e:26:
75:70:2e:c1:d6:bd:e3:57:3e:52:7c:1b:ad:55:a5:f8:4f:29:
bb:1f:83:df:b9:a5:56:60:00:ce:4c:34:26:f2:89:93:90:d6:
12:7d:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:54 2026 by rpki-client