Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File: A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier: zsP36trAXjHQ9aZ51I9Ez+kxiMjNaHZN7GE2MzjLoLY=
Subject key identifier: 07:AB:BE:EA:0D:42:6D:9B:1B:1F:80:9E:A9:1F:EB:85:8D:32:C1:B3
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer: /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial: 01A1DE39939FA9A397BF5D5A8FFAEB35E8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 08:01:17 +0000
Manifest this update: Sun 15 Nov 2026 08:01:17 +0000
Manifest next update: Mon 16 Nov 2026 08:01:17 +0000
Files and hashes: 1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: TkbBViTtieyEx8B7BhZ36t4g1roZYaAW7bgQ0ddMcnw=)
2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:93:9f:a9:a3:97:bf:5d:5a:8f:fa:eb:35:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Validity
Not Before: Nov 15 08:01:17 2026 GMT
Not After : Nov 16 08:01:17 2026 GMT
Subject: CN=07abbeea0d426d9b1b1f809ea91feb858d32c1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:b1:10:7c:27:26:0d:9e:bf:a6:7b:79:2d:
1e:42:c5:c8:5a:12:9b:2d:cc:00:43:57:a8:66:5a:
06:0a:b2:e0:07:62:d6:7c:48:09:d3:a6:6f:a7:be:
fa:bb:60:20:16:b2:2f:4f:45:d2:4b:ac:15:b9:e1:
60:b3:0e:ea:28:ed:ab:d3:3b:2a:a3:f7:8d:5b:dd:
30:91:ea:60:2e:48:4b:f5:d2:8b:76:3d:60:07:13:
79:bb:7f:b1:f0:eb:95:bf:77:05:a9:72:86:89:e0:
88:de:e2:f4:64:ab:1f:8e:6f:e4:87:75:f3:19:fe:
08:c0:fe:95:9e:a8:a3:c8:e7:7f:53:30:bc:a1:61:
38:26:af:14:ac:71:e7:7e:22:a5:ed:42:62:a2:0d:
95:f0:0a:78:3f:29:75:b4:b7:fb:5a:0d:e2:54:3e:
24:de:5f:fc:80:0c:37:25:e8:cc:ea:12:d7:a8:1a:
e9:0f:5a:29:9d:d0:35:6c:b2:68:93:05:b4:b3:ab:
99:36:06:1c:d5:cc:ee:04:83:f1:92:93:e7:a5:55:
b0:6c:8b:8d:3e:62:23:31:10:cb:b6:ab:4a:15:c7:
52:00:3c:97:ed:0a:b3:ca:29:97:02:60:5e:ff:ee:
d6:65:22:dd:b7:7f:6e:29:4c:f5:bd:21:b5:80:01:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:BE:EA:0D:42:6D:9B:1B:1F:80:9E:A9:1F:EB:85:8D:32:C1:B3
X509v3 Authority Key Identifier:
keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:38:67:b5:9a:01:2a:eb:a0:d4:b3:29:85:f3:af:3b:9f:
89:cd:df:c9:b0:d6:6b:d6:e0:c8:d9:5b:e1:cc:0a:40:cc:b4:
3e:eb:7c:ca:f1:7d:88:0a:1b:82:86:fc:23:96:ad:30:db:13:
1b:ce:9b:1d:4b:a4:ab:6d:4b:f2:8b:6d:33:bd:90:f2:25:34:
30:00:5d:fa:9b:7b:27:82:c0:5e:e7:de:43:9b:9d:e6:ef:16:
92:b6:d8:9b:ba:70:c4:66:b1:b1:04:3e:8b:eb:69:dc:0f:46:
d8:9c:e3:1a:d3:f6:69:59:46:41:5f:3c:24:5b:09:12:fc:69:
2f:56:f7:7e:6c:2e:b0:41:b6:5d:74:5b:92:fd:2d:54:ef:db:
0e:f7:86:7f:cc:ec:b4:6e:81:c3:c1:b4:73:67:ec:e8:c8:a1:
53:5c:45:30:43:d7:65:cb:ba:5f:ba:b2:2a:48:69:f0:b4:1d:
6e:d9:e3:85:e5:80:76:15:dc:a9:e6:19:34:41:0e:06:f6:b6:
b4:41:23:c0:71:0b:3e:93:99:2c:4e:2f:51:07:19:4b:91:56:
da:15:2b:8c:21:c8:87:95:5e:c6:d2:ce:eb:4e:f2:4d:b1:37:
76:87:8c:9c:dc:3b:77:51:b8:ed:30:36:4f:2b:f4:55:d5:fa:
85:fa:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:21:34 2026 by rpki-client