Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: 91GTGT7y9dnQU2NMeV49UkGivYeEmjTXb+fvfIApdmo=
Subject key identifier: 77:87:25:52:5E:47:E8:5B:5C:F9:7E:DE:86:7A:15:00:A8:B5:91:0F
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 01A0E7AE7EBCC9C5343DEEB886DCD62F69C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 0686
Signing time: Mon 28 Sep 2026 11:02:47 +0000
Manifest this update: Mon 28 Sep 2026 11:02:47 +0000
Manifest next update: Tue 29 Sep 2026 11:02:47 +0000
Files and hashes: 1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: Tag943xbE3KYUl2k8gVM+fRdOLN0e7pb2K8tbLThU+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:7e:bc:c9:c5:34:3d:ee:b8:86:dc:d6:2f:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: Sep 28 11:02:47 2026 GMT
Not After : Sep 29 11:02:47 2026 GMT
Subject: CN=778725525e47e85b5cf97ede867a1500a8b5910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:d5:20:d8:0d:64:62:9c:8c:e2:0e:7b:30:
3e:97:f6:38:0d:ae:06:93:7d:67:b6:15:a7:21:97:
07:c1:27:cb:8c:49:13:c6:9d:4a:d2:4a:6b:07:b2:
46:ba:b6:df:2f:e5:2e:fc:58:d3:5f:36:5a:46:c9:
cd:0a:54:21:69:ba:28:f3:f5:a2:a6:aa:d9:6d:9f:
c9:70:42:91:d6:36:c2:4d:17:52:1a:e6:5a:08:ed:
5b:fd:8a:ed:23:ce:02:58:1e:c6:07:73:ab:eb:a4:
96:56:16:68:36:a1:44:6d:fb:5b:fd:d4:89:ff:a0:
d9:a7:f1:db:2c:8d:19:68:a4:92:cd:1b:7a:b5:91:
68:02:51:c9:6e:2d:5e:d1:0c:57:d8:db:9a:a8:9f:
73:57:36:d6:06:1f:1f:b5:6b:29:30:2a:52:57:e2:
25:ef:f1:aa:16:c1:9b:d3:8e:20:41:23:50:b9:ed:
04:50:83:84:65:82:c6:ce:0d:7f:14:66:d6:82:7c:
20:f9:1a:68:7d:28:01:c8:a6:82:86:cc:3a:4c:bd:
ae:3d:6f:68:6d:17:83:71:15:b4:e3:b6:13:f4:3a:
ba:3f:36:c1:bd:7e:49:88:21:e6:e9:33:fd:ed:7d:
db:cf:b9:80:9b:84:7c:c3:59:4a:58:4f:f7:4b:3e:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:87:25:52:5E:47:E8:5B:5C:F9:7E:DE:86:7A:15:00:A8:B5:91:0F
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:cc:0c:7d:dd:fd:fb:df:c5:62:fa:9a:9a:fc:17:94:c0:
0a:65:17:5f:03:00:ef:7b:d0:aa:d0:a1:fd:69:19:11:c2:f0:
5b:16:92:a2:b6:d4:66:62:1a:11:1f:e5:49:a5:9c:a9:9e:97:
63:99:f0:04:c0:f5:6a:5d:2e:0f:cf:f9:4a:d6:93:40:a4:03:
ff:95:50:cd:a9:f2:90:28:f1:fe:e3:40:a4:31:a7:a2:31:cb:
2b:0f:58:9d:5b:7b:c9:b6:1e:04:9f:fd:75:54:b0:99:20:e8:
77:76:08:f8:03:79:6b:43:6c:b4:58:ff:99:9e:1f:d7:09:18:
9c:98:82:84:a7:2a:d0:77:de:86:3f:f1:7c:1a:f5:5e:dc:72:
fb:7d:5c:c0:64:ad:62:6e:44:86:5f:76:71:e0:cd:87:68:83:
6e:b2:26:0a:82:59:a1:a0:79:88:fd:9d:36:61:df:d4:e1:55:
47:cb:c3:f7:e1:74:07:0a:21:33:8e:ff:85:df:f7:c3:07:f8:
f4:f8:5c:4f:e9:26:26:ba:0e:7c:a2:2f:c9:fa:b4:db:05:83:
35:99:02:43:e3:e2:3c:b9:6f:fe:67:92:1c:1c:de:df:07:76:
70:0b:9b:ef:76:ae:a6:63:f3:64:a6:c3:7a:dd:c7:7b:9c:98:
69:0f:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:24 2026 by rpki-client