Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File: A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier: /abSzd4TYhmcNjOI5cf8UZprNA5Xq/3CoRCnIjs15hA=
Subject key identifier: 8A:B1:14:FE:7D:52:BE:FA:F3:D7:69:33:B2:17:B9:CD:78:4B:DB:6A
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 01A0CA0F9D0BEE28963B365BDFF8A26E5DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number: 1675
Signing time: Tue 22 Sep 2026 17:00:15 +0000
Manifest this update: Tue 22 Sep 2026 17:00:15 +0000
Manifest next update: Wed 23 Sep 2026 17:00:15 +0000
Files and hashes: 1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: dRFCyhS7UCLRmIB9aL1qfTX0fIhNtn3PsDZc1Faxrfw=)
2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:9d:0b:ee:28:96:3b:36:5b:df:f8:a2:6e:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Sep 22 17:00:15 2026 GMT
Not After : Sep 23 17:00:15 2026 GMT
Subject: CN=8ab114fe7d52befaf3d76933b217b9cd784bdb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:22:e3:4c:d5:e7:1b:c6:b9:b2:1b:a0:36:
85:24:b1:a9:f3:98:ec:7f:4d:69:6c:05:41:9f:4b:
19:80:9d:8f:1d:71:29:78:ab:68:77:a3:40:55:4c:
bb:e2:f8:cc:da:5e:d5:44:2b:8c:b0:f9:e4:9b:d9:
8e:b5:79:f9:2e:98:43:64:b4:16:39:9b:6e:66:13:
4d:de:7c:bf:af:31:d3:ab:eb:58:70:37:f0:c3:97:
56:c7:18:aa:bc:12:9a:70:71:55:4b:ff:55:cf:40:
18:37:f6:2e:f9:89:86:46:fa:f6:bc:42:75:47:33:
99:34:59:00:02:c0:53:3c:2b:d4:5b:53:f4:97:de:
50:13:93:48:eb:0d:13:79:12:3f:db:72:09:b0:47:
64:5f:1f:79:7d:15:c3:31:b1:2b:06:ea:49:30:46:
e9:80:60:ae:84:28:82:e4:0d:d4:df:4a:7e:05:1e:
cd:f9:d7:55:0e:4f:ac:9b:93:63:0e:cd:6d:df:d1:
f0:35:39:4a:4d:73:42:c9:52:2f:04:9a:71:93:66:
16:06:10:62:54:fb:cd:5b:35:b7:a6:37:ea:50:3c:
f0:98:23:90:de:26:8b:a3:2b:c6:1d:ec:75:59:aa:
e2:97:cd:a5:63:90:76:62:bb:23:c2:43:c2:e5:90:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:14:FE:7D:52:BE:FA:F3:D7:69:33:B2:17:B9:CD:78:4B:DB:6A
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:71:7a:1f:62:23:5e:d5:f2:f3:7a:ee:9a:cb:dc:10:00:40:
fe:62:cb:56:fd:3b:6b:9e:71:b5:1e:5c:de:97:91:07:6b:2c:
98:df:d0:8e:5d:e0:64:d6:35:27:7a:47:ca:cd:2e:27:55:03:
84:ad:a6:e3:aa:00:57:a8:a0:64:3b:8d:ac:fb:44:b4:ed:3c:
da:2e:60:65:97:46:82:12:9d:3c:4e:24:cb:02:db:10:43:c8:
54:69:ec:d5:e0:c0:f7:ea:12:fe:e5:2e:b1:24:f9:be:16:42:
88:fb:b5:61:4c:b9:9b:44:bf:1e:25:dc:0e:b4:3a:32:3d:ea:
0a:e9:d4:b7:6b:71:bb:49:7c:74:c3:98:a1:78:4d:5e:58:ca:
79:9b:95:7c:95:16:7f:65:43:81:60:40:8d:a9:da:06:bd:fd:
a3:c6:15:58:2e:ff:0a:d3:9f:c9:28:ff:e0:23:e9:88:bc:d1:
cc:69:93:3e:27:db:05:01:c4:c5:d0:29:4e:80:e0:63:d3:14:
c4:2c:ad:0a:6f:28:d2:dc:68:b9:9c:f1:db:d9:d8:07:37:13:
4d:58:49:52:20:5f:1c:d6:dd:3e:88:c4:d8:f4:b4:ea:be:e7:
4a:49:74:a0:00:b7:b3:8b:f9:f5:28:17:a3:94:15:f6:e6:b2:
29:e2:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:39:13 2026 by rpki-client