Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: EDpiwyPyP1974E6pnAr1fnGHnvWBdTz5JBi3P8bK+u4=
Subject key identifier: 87:EB:CE:73:A2:5D:60:10:6A:37:21:BE:5D:D5:58:3A:32:1B:59:3E
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 01A106CA82EBB32F2768871ACFA2795AFB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 0516
Signing time: Sun 04 Oct 2026 12:01:37 +0000
Manifest this update: Sun 04 Oct 2026 12:01:37 +0000
Manifest next update: Mon 05 Oct 2026 12:01:37 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: QWB5xOChlYrFFBi1CbRGdMNnauhOUKzyWWxmSfqMXNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:82:eb:b3:2f:27:68:87:1a:cf:a2:79:5a:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Oct 4 12:01:37 2026 GMT
Not After : Oct 5 12:01:37 2026 GMT
Subject: CN=87ebce73a25d60106a3721be5dd5583a321b593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:b6:a6:41:d0:53:b7:39:47:08:85:29:c9:
7b:50:57:b9:3a:32:b2:be:d4:d4:6a:68:e0:21:c6:
7a:6b:35:7b:3c:54:f0:38:cd:6c:dc:8f:66:8b:c0:
12:6b:62:03:5e:4c:f6:f9:f0:2a:be:81:f2:f1:8d:
d7:c2:93:1d:97:4f:63:fc:9d:33:0a:1a:81:a4:f5:
4c:e7:51:3f:93:04:48:c3:f5:a1:70:89:3d:c5:d6:
cd:71:64:1b:1c:78:41:be:c9:f8:a1:eb:30:de:c6:
c4:09:0c:44:9d:4a:b0:fd:3d:16:0f:ac:e4:a9:8b:
ea:6c:91:20:c9:f2:46:cb:c0:23:44:00:fa:2b:29:
26:74:32:04:47:76:f5:4f:d6:23:83:73:e9:f1:a6:
5f:6f:60:11:9b:1a:50:77:0d:65:68:e4:00:f5:fc:
39:93:43:50:19:47:7d:e0:9b:4c:0d:4a:74:81:64:
b0:22:e4:21:de:58:cd:b4:ce:86:a9:bb:84:3f:e2:
39:3b:e5:20:f1:21:a5:0a:23:6d:14:7e:e4:e5:f8:
c3:c1:de:3b:01:62:7e:c8:40:0e:41:71:8f:34:96:
bd:61:3b:5a:9c:bc:39:82:da:b0:97:66:62:a5:90:
70:fe:f4:e0:14:ab:c9:66:76:37:6c:33:69:bb:1f:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EB:CE:73:A2:5D:60:10:6A:37:21:BE:5D:D5:58:3A:32:1B:59:3E
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:32:f8:9a:03:a6:1c:90:cb:9d:94:8b:25:3c:fc:0b:55:e3:
02:86:b2:89:00:c7:43:f1:69:c2:a3:9a:c1:06:b1:a3:58:32:
8b:94:57:45:19:4d:a3:93:5a:8b:45:4c:02:f0:cf:5b:c7:b5:
0a:86:2f:91:84:15:16:40:7a:43:05:0f:43:78:b6:31:e5:48:
cd:46:45:6d:3d:77:dd:6b:a8:eb:c1:09:bd:92:d0:8a:04:2f:
5a:26:46:fa:20:d8:dd:21:24:fb:ed:23:e7:9e:8c:20:17:9f:
7e:eb:57:28:b4:18:b5:e1:cf:02:f6:61:a2:74:eb:8b:8a:d1:
2c:c1:e7:42:7e:8b:da:33:ec:44:ce:de:79:2f:d4:da:05:fe:
2b:67:4e:01:5d:63:5f:8a:0c:51:1a:4a:19:46:44:4a:91:05:
1a:dc:22:72:94:99:28:4b:0b:9f:3e:d2:3e:97:63:54:f0:3a:
f2:e7:0a:a2:a8:e7:07:ae:0b:f8:ec:ed:45:d8:d0:9d:5d:87:
e2:2f:ad:21:76:3f:be:ad:2a:51:fe:55:b6:e3:d7:7c:f8:fa:
32:c2:46:74:12:5c:42:95:4e:8a:48:31:37:28:f7:f9:5f:ea:
d4:5d:b1:6f:6d:c1:66:6e:0c:55:9c:da:c5:c0:bc:7c:09:8a:
c2:6e:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:26:56 2026 by rpki-client