Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
File: A8faYZwwdCdMsGlarsoJxTn-aGM.mft (raw, json)
Hash identifier: IrGIjR0MEmpSwa8d6d9X8BcWDa/VmeNKk0STfVyvAYY=
Subject key identifier: 14:B5:48:A4:90:EB:A2:C1:29:53:6B:44:6B:94:61:23:E2:C9:84:7C
Authority key identifier: 03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
Certificate issuer: /CN=03c7da619c3074274cb0695aaeca09c539fe6863
Certificate serial: 01A0CB59F8C6A7061C6494B9E3264BEDA340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 23:01:06 +0000
Manifest this update: Tue 22 Sep 2026 23:01:06 +0000
Manifest next update: Wed 23 Sep 2026 23:01:06 +0000
Files and hashes: 1: A8faYZwwdCdMsGlarsoJxTn-aGM.crl (hash: 33+Q3sqCcFLnjDI9Lgt0n/M+CT8yxkHUhy3feEQ46MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:f8:c6:a7:06:1c:64:94:b9:e3:26:4b:ed:a3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c7da619c3074274cb0695aaeca09c539fe6863
Validity
Not Before: Sep 22 23:01:06 2026 GMT
Not After : Sep 23 23:01:06 2026 GMT
Subject: CN=14b548a490eba2c129536b446b946123e2c9847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:ba:99:85:8d:39:bf:62:bc:c8:a6:9f:a3:
8b:59:1a:16:7e:e4:70:c4:7d:f7:3e:a5:7c:6c:4d:
04:5b:86:f5:d9:d0:ac:e8:12:ac:eb:a2:ed:01:d2:
4a:28:a1:f2:4f:84:1b:fd:d7:91:c8:87:ca:74:44:
79:45:67:6f:cb:06:fc:10:b0:22:10:89:07:09:85:
d7:98:6f:65:dd:3c:6d:3f:25:16:af:2c:5b:53:df:
72:d9:bc:f5:ac:75:91:c9:16:2c:5a:ff:89:5c:5d:
92:42:dc:da:bc:87:a7:1c:bc:0f:a1:8d:f5:bb:8c:
08:a7:33:13:3e:53:35:f3:60:ba:59:7d:ad:6a:7c:
d8:9d:d4:ca:ca:cd:d1:db:79:c0:0c:48:1a:7a:d0:
29:3f:83:f7:91:8f:e5:8e:03:4d:dd:4e:fd:10:2c:
5a:ec:e3:d6:99:e4:a7:23:1c:9a:b8:8d:4e:3a:19:
3e:43:a9:66:d3:a5:32:e2:b5:25:74:1e:ab:cf:2c:
d8:5b:86:f1:43:39:1b:08:52:87:55:d8:24:74:fe:
23:f3:9a:19:fe:9c:2e:9b:3a:10:6e:6b:2c:8e:6d:
f9:e1:c0:05:85:4d:c5:c1:31:ef:25:d3:54:c2:b2:
02:3f:cd:3d:87:66:62:e8:8c:1a:bc:19:b8:ef:aa:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B5:48:A4:90:EB:A2:C1:29:53:6B:44:6B:94:61:23:E2:C9:84:7C
X509v3 Authority Key Identifier:
keyid:03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:8e:a4:5b:e7:0d:2f:64:50:5b:29:35:ec:31:9f:7e:44:7b:
5e:1f:31:26:f5:f2:e2:e6:5e:05:56:e6:f3:03:f7:e8:67:d3:
80:90:49:8f:4a:15:da:51:dd:6c:ed:50:8a:88:b7:8a:da:e9:
ab:04:7b:23:64:16:1e:e8:5d:39:93:be:9d:9d:51:d9:c3:1c:
df:f2:e5:3d:9a:c4:16:e1:7a:2e:47:26:6a:7a:01:65:f7:fd:
0f:cc:3e:e0:15:ab:c7:b0:c1:5f:90:95:42:ca:8d:52:54:e9:
79:3f:64:54:a6:b9:e3:7d:de:0d:75:52:4b:f9:db:2c:0a:4a:
43:0a:19:1b:42:53:ff:08:b1:87:6f:4e:7c:96:75:f3:b4:25:
a2:82:53:50:e7:f5:01:b5:d5:f9:eb:53:53:43:5b:f5:0f:4e:
07:8d:f8:85:94:5a:e7:e7:cd:d5:0f:cc:23:de:73:45:49:54:
6d:75:f7:34:41:0a:d4:8b:20:44:4f:70:e0:60:15:cb:02:14:
d7:ca:8d:34:10:f7:2f:f6:e6:dd:d7:df:57:05:f8:1b:25:cc:
73:ae:33:d9:30:61:65:4e:ac:bf:91:7c:3c:dd:4b:f5:7f:37:
c5:1f:38:d6:a3:30:1e:47:4a:fe:72:b9:d1:7d:8d:f3:2b:8c:
8f:c7:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:21 2026 by rpki-client