Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: aQY9Zfdm+7JwQSs6gKgD/Xgi497IcwcT7N1TDppdmS0=
Subject key identifier: D2:CC:8E:F3:42:2A:40:72:C5:25:85:5D:D8:A9:D9:9A:12:DE:E2:9A
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 01A0D7284364288FD389C8E1BCBE0414A06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 1674
Signing time: Fri 25 Sep 2026 06:02:15 +0000
Manifest this update: Fri 25 Sep 2026 06:02:15 +0000
Manifest next update: Sat 26 Sep 2026 06:02:15 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: QezvVEoazv74kZmPmRx7QH8WYh0sP5xtrNqCQPeqTeU=)
2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:28:43:64:28:8f:d3:89:c8:e1:bc:be:04:14:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Sep 25 06:02:15 2026 GMT
Not After : Sep 26 06:02:15 2026 GMT
Subject: CN=d2cc8ef3422a4072c525855dd8a9d99a12dee29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:5d:d9:a5:fc:0a:f4:e9:a3:1d:e9:e3:87:
63:f1:1a:44:d3:c3:8b:0d:d4:52:c9:f5:a8:e2:e0:
db:4c:79:9f:69:c5:44:2c:91:f3:e8:1b:63:ab:1c:
c1:1a:21:58:d7:41:5e:33:7b:77:11:5d:7d:9d:43:
a4:e4:2e:de:9b:70:5b:9a:9e:69:40:f1:c9:45:0c:
24:da:ed:60:5f:ef:f4:56:d9:3c:d6:c0:36:a3:18:
ca:0f:26:91:f2:76:e2:bd:2c:15:0b:c9:29:39:94:
38:28:99:97:9d:9d:af:79:68:88:5f:2a:65:50:b4:
45:45:5f:0f:3c:50:83:13:4c:b4:f6:60:88:d4:08:
8b:05:6e:fc:66:8e:e8:c5:65:ff:87:75:e8:88:c3:
1e:52:34:28:91:1a:bd:c8:53:99:8f:54:b4:06:61:
46:5d:3d:7b:ab:64:2f:97:68:35:ce:32:49:43:f1:
c5:00:8c:66:aa:96:52:4b:ae:3e:be:f5:1a:f2:ec:
93:16:56:57:8a:3d:1a:cf:22:a7:1a:b4:cf:a7:09:
b7:8b:b3:76:9e:2e:76:2f:6c:64:1b:87:ba:0f:db:
12:39:c2:2c:b8:a6:c8:42:ab:39:6b:56:88:a9:11:
68:06:e8:9c:0e:09:f3:bb:43:ce:4d:2d:7e:de:46:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CC:8E:F3:42:2A:40:72:C5:25:85:5D:D8:A9:D9:9A:12:DE:E2:9A
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:16:6d:6a:0a:08:14:c1:e9:0d:1a:5d:6a:9d:95:23:2d:
86:e9:e4:54:a8:62:08:d5:3e:60:9a:98:db:de:4f:a7:0a:04:
4f:c8:37:41:ea:3d:83:63:e9:f5:6e:6a:00:05:0b:8a:8b:98:
48:21:fe:5e:44:4f:a8:76:dc:4c:a6:8e:41:03:39:52:06:f2:
a4:66:73:5d:52:6f:36:b5:0c:ae:71:06:cd:36:26:a3:a8:99:
30:99:a9:5b:8f:87:37:be:1c:bf:f8:46:66:d0:75:e2:c6:54:
79:fa:3e:98:02:cd:cb:a3:b0:84:ef:8b:6d:f0:72:fa:5b:e4:
0a:f1:d9:bc:93:b9:fb:08:2c:a1:e8:6e:04:4d:f1:8a:70:1f:
25:d2:a4:a5:a3:eb:e8:4b:3a:59:6b:6e:d4:f9:68:b7:82:30:
d7:dc:fc:d5:fd:31:bb:53:56:52:de:4d:b3:60:90:4c:46:17:
88:dd:5d:1b:91:83:58:88:1b:81:cf:a6:da:ed:f7:fd:5d:ac:
6b:c4:6b:fb:73:c6:c1:ac:a9:76:00:22:bc:20:be:25:a0:47:
16:3d:49:42:30:74:50:d9:23:6c:41:a5:44:4a:b0:7e:ec:d5:
e5:43:e5:2d:52:97:11:5d:bf:3b:bc:e9:7b:15:c4:42:56:dc:
e7:b8:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:02:47 2026 by rpki-client