Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: VWhsrVAmULosHHYKKpoo/T2kMp91SOw7I5WmDQGb/Y8=
Subject key identifier: 01:0E:76:3D:8B:DA:F9:89:5A:73:95:20:CE:24:BA:9B:BB:D7:FF:0C
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019E1F7F5D9F09AC49ECE1C9888F0A2D6F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0DF5
Signing time: Wed 13 May 2026 04:01:41 +0000
Manifest this update: Wed 13 May 2026 04:01:41 +0000
Manifest next update: Thu 14 May 2026 04:01:41 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: NUW9UwDjkobSAskotSsHlzzJHqd7cj1mPjUGqdF63W4=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:5d:9f:09:ac:49:ec:e1:c9:88:8f:0a:2d:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: May 13 04:01:41 2026 GMT
Not After : May 14 04:01:41 2026 GMT
Subject: CN=010e763d8bdaf9895a739520ce24ba9bbbd7ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:4c:73:79:3f:40:4d:61:16:56:86:09:cb:
4f:78:5e:ae:c1:ae:12:9d:74:65:a7:3e:c4:49:51:
5b:9b:d9:87:fa:50:04:c2:88:65:03:75:55:1a:85:
e3:02:7f:aa:3b:ff:d1:ed:2c:00:2c:f0:c0:cb:dd:
d9:ae:89:bf:97:db:b2:42:3e:64:59:f9:b3:0f:a1:
d7:32:e4:ec:72:98:cd:ba:24:91:52:da:6b:6e:10:
92:35:ac:28:eb:7c:31:30:8b:6d:5e:bf:99:e2:11:
71:77:da:9a:fb:12:92:71:9f:f8:ec:6a:3a:24:15:
45:fe:79:ca:d3:16:f8:ea:8f:6f:a2:f1:12:71:9e:
cd:54:cc:d5:1c:12:20:9c:bf:8f:8c:36:f5:79:ae:
c1:0b:9e:41:a1:d8:eb:f2:9f:bf:11:a2:8b:1b:d5:
63:04:4b:8c:f4:47:0b:2e:c0:22:56:9f:20:8e:b5:
b1:61:53:37:2e:8e:2f:87:86:52:d7:9e:7e:2f:20:
a1:f8:e8:50:ab:a3:21:f9:d3:97:cb:8e:d3:e4:fe:
df:02:1a:55:f4:83:ef:0a:9c:bb:00:49:c6:4e:05:
8b:df:f3:23:6a:a6:19:8a:68:5b:35:2b:93:56:51:
07:96:a7:b1:81:0d:c4:1b:99:39:4d:7a:09:ed:8f:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0E:76:3D:8B:DA:F9:89:5A:73:95:20:CE:24:BA:9B:BB:D7:FF:0C
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:41:51:df:df:fc:94:44:08:be:d9:39:4e:7d:bb:e0:29:
5e:e3:24:2b:b3:27:58:b6:3b:55:b5:59:6c:8e:a0:cd:56:63:
24:47:95:62:d9:c9:ae:4d:52:8c:55:da:81:ec:c5:11:ec:d3:
27:30:b2:8a:9a:3a:f9:ea:7e:9b:5c:c4:37:a5:26:05:55:9b:
87:0c:6e:e7:2b:4d:41:dd:f7:7d:3d:69:e3:b2:0a:63:e8:dc:
48:83:3f:85:3f:6b:54:e5:69:03:68:44:f7:e3:10:88:f0:5b:
06:a9:3a:0c:61:a0:91:07:1a:fd:68:3d:3e:6c:fc:5e:a7:b5:
b0:b6:13:cf:c7:64:6a:96:ae:bb:7a:48:8f:c0:1a:8f:46:b7:
7e:84:38:9e:f3:c7:a2:2a:40:6e:92:b2:28:f1:93:46:07:3f:
c1:ec:e3:f1:95:7e:ce:02:7a:fc:2e:f0:46:44:42:f5:f6:12:
44:2b:86:c2:3e:01:2c:74:a8:d7:ea:af:c7:54:90:ff:59:0e:
ad:cf:e3:28:40:ef:29:b7:21:4d:a6:ac:24:13:9b:42:75:32:
b3:a2:e0:cc:95:a7:15:aa:2d:1f:3b:bc:10:21:14:a3:13:0f:
d9:27:f8:43:4c:78:92:40:86:8b:0d:6a:83:2d:28:47:36:46:
bb:34:ac:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:22 2026 by rpki-client