Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: 5+u5Vc67yRysABLy/oeO3nnoZYcPof2guhGDPZbubH0=
Subject key identifier: BC:3F:E5:79:1D:E6:8D:A3:88:6E:72:3B:62:85:CA:B4:52:43:A0:DE
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01A0CE2428EFFA7D138C0D939FB509CAA423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 110D
Signing time: Wed 23 Sep 2026 12:01:11 +0000
Manifest this update: Wed 23 Sep 2026 12:01:11 +0000
Manifest next update: Thu 24 Sep 2026 12:01:11 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: EDFycCFT/cziiU2jcA5hwNf+BUT7+c64ZFb23kBGBNw=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:28:ef:fa:7d:13:8c:0d:93:9f:b5:09:ca:a4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Sep 23 12:01:11 2026 GMT
Not After : Sep 24 12:01:11 2026 GMT
Subject: CN=bc3fe5791de68da3886e723b6285cab45243a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:35:f2:72:8f:a5:af:d2:f3:77:9c:62:65:
91:93:19:c6:34:08:b1:df:62:ff:a2:22:2c:d3:76:
80:2b:63:e2:2b:43:ff:0e:cc:ab:11:51:42:22:f1:
1e:d5:1d:3c:e3:25:22:57:ef:86:90:ea:bb:69:2f:
cf:a6:f7:63:07:d0:72:bf:46:46:0c:b2:d6:93:08:
cb:49:dc:bf:0e:3f:25:6a:86:ec:9e:a5:bc:ef:22:
cb:c3:ab:f4:9b:0b:bd:97:23:74:12:70:58:05:c7:
bb:30:45:75:7f:e5:c2:7e:c5:f4:b8:39:24:29:ae:
72:00:63:86:82:64:12:22:2d:7b:1e:3e:e8:e1:6c:
4d:af:45:d3:fa:a5:65:38:8b:a4:d9:8b:c4:22:01:
9d:e7:b0:bb:a7:de:84:9a:bf:fb:b6:d7:5b:d5:aa:
f4:68:ee:09:9b:b9:29:a1:c7:47:3b:f8:b7:3d:07:
6f:0a:05:78:cb:f5:ea:9b:84:53:06:0f:a2:ae:d7:
4a:59:e1:bb:c2:2d:6b:13:86:73:78:f2:9c:4b:cc:
5b:3d:30:5c:83:ac:ae:58:6c:9c:3a:91:e4:6d:24:
92:5e:a4:d7:fb:f2:7b:81:b7:a6:92:07:b9:fe:ab:
99:a6:2a:e8:2b:e6:fd:14:40:12:28:b6:24:4b:28:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:E5:79:1D:E6:8D:A3:88:6E:72:3B:62:85:CA:B4:52:43:A0:DE
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:92:d1:a2:a9:12:61:25:2b:e7:91:6a:7b:40:ed:b8:bb:14:
5d:fb:2d:58:59:37:6d:bf:7c:9b:95:9a:c6:8e:9d:f8:08:2e:
41:c2:93:7c:36:f6:10:e2:e4:c3:83:3b:85:38:0c:4a:64:e9:
27:a4:83:c8:4d:2d:0e:97:0c:ba:18:dd:f4:08:41:a7:98:d4:
c7:ea:de:f3:9d:43:f9:c7:24:2b:52:07:52:36:99:18:a6:fa:
aa:db:a2:81:e0:99:38:e4:3b:30:a4:51:60:d5:5e:32:fe:4e:
3a:25:99:ce:0e:de:f7:ff:ff:dc:26:d4:85:a4:25:4f:59:9b:
fb:f3:00:fc:3a:00:95:bb:3b:07:42:e8:46:92:2e:3b:95:1c:
2d:b6:64:53:81:21:f8:15:18:1e:74:01:91:ad:c7:40:cd:c8:
44:a0:bb:e8:17:c3:24:f8:8d:80:6d:27:5d:92:b5:96:b1:96:
44:23:75:52:0e:6f:bd:a7:24:00:db:22:f1:3f:7f:94:95:d2:
44:de:42:75:df:0b:15:12:09:80:2d:cf:12:22:9b:5f:71:78:
24:6e:f6:f5:d9:13:f2:c0:d5:47:4e:f9:9e:08:2a:d7:65:d0:
47:ee:94:af:70:9d:3e:2e:c4:6b:8c:c5:54:73:b3:8e:a1:e2:
f3:4d:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:38 2026 by rpki-client