Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: bvdHe45Fdsx91MKGrxTCS1tiWQoxAi6FnFmD29V5DTU=
Subject key identifier: 9F:E3:98:FF:84:FE:D5:65:FE:46:42:CC:56:BD:34:49:88:00:68:A8
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 01A0E061D608A58924C4D4F210C56F26B3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 11FB
Signing time: Sun 27 Sep 2026 01:01:43 +0000
Manifest this update: Sun 27 Sep 2026 01:01:43 +0000
Manifest next update: Mon 28 Sep 2026 01:01:43 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: DHHgzHgzj35I3rU8rfaMwN50Sh2Rwuy5pXztmGCakjk=)
2: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (hash: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ=)
3: agPmj-1yZOqdW-zJe9GpIqUN03w.roa (hash: ToCg4vQlYxypC6RWyLP+F3bLTdA7lp0Hnkzv9RyJf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:d6:08:a5:89:24:c4:d4:f2:10:c5:6f:26:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Sep 27 01:01:43 2026 GMT
Not After : Sep 28 01:01:43 2026 GMT
Subject: CN=9fe398ff84fed565fe4642cc56bd3449880068a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:4b:87:51:48:39:e6:5b:0a:96:84:56:04:
60:73:b0:cd:44:16:64:1a:75:88:8f:50:6c:1d:c1:
d1:31:a9:4a:08:45:1a:97:1c:2d:10:76:35:49:df:
4b:2a:a0:ce:82:c1:6e:31:4e:05:c4:7e:ff:aa:e0:
54:3c:5e:cf:18:dc:b9:92:5f:21:bb:de:4b:24:3c:
20:22:2f:0d:62:cd:ea:92:eb:32:5d:9e:20:1f:cd:
95:03:1f:f6:4f:7a:45:7e:bf:9d:40:6a:af:09:6c:
e1:94:14:13:bb:15:35:ae:8d:8a:19:1a:8a:9b:82:
20:e4:96:36:58:20:35:a5:05:d7:8a:28:cd:ca:2a:
d8:e5:30:e8:f5:b5:64:c1:1a:b3:7a:ac:e2:f5:41:
bb:9f:8b:f1:00:77:41:67:ca:7d:b6:40:40:cc:a9:
e5:66:95:e6:98:5f:47:7c:11:ef:50:e5:de:d7:a2:
28:7e:18:08:fd:29:94:94:b8:79:af:af:7f:24:70:
53:65:11:19:e7:70:86:c0:fc:0a:c2:56:f3:05:15:
e2:f4:58:b5:93:70:3f:ba:08:d6:6d:90:32:2b:4b:
40:b7:d5:4f:6f:b9:b2:3b:d1:11:f3:9e:2a:b7:1f:
9f:c3:ab:bf:85:74:15:0b:de:e1:94:24:ed:18:df:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:98:FF:84:FE:D5:65:FE:46:42:CC:56:BD:34:49:88:00:68:A8
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:9a:a2:a7:ff:cd:a7:d7:57:38:f8:ee:a9:85:2c:9f:d0:
21:30:18:24:ad:b5:3d:4c:fe:ff:a5:ca:d1:2f:75:2e:91:43:
4e:57:35:6e:33:fb:33:18:a4:fd:aa:dd:02:49:d7:3e:7e:e2:
b1:d1:14:eb:44:65:7d:10:34:8a:95:ac:44:b6:d5:e7:99:fd:
fc:9b:0a:2d:25:2f:f7:1d:4b:ea:a7:ba:13:20:6f:9a:1e:bb:
4b:a4:ec:2d:6c:67:18:be:a7:7b:6f:05:61:db:80:5d:83:74:
05:21:1d:dc:97:6b:8d:88:80:db:38:7c:af:37:16:03:8d:74:
86:75:c0:e3:01:5c:c0:9e:e8:7e:4d:04:98:0b:d7:20:4f:77:
43:c9:d2:c7:43:c2:bb:7c:13:18:c4:6c:b6:d0:f5:30:5c:aa:
64:5b:34:f6:21:a6:bd:e9:03:b4:95:c6:51:07:02:a8:7e:dd:
a0:61:57:31:33:c3:0f:a2:ce:b2:ec:1e:c4:8a:1f:77:ec:3a:
1c:f4:9f:8c:d9:d3:3c:00:98:f6:57:31:fc:4d:bf:b9:5c:89:
a2:61:e3:20:78:58:49:4e:8e:3b:8e:d9:3b:15:ab:2f:29:e1:
82:27:58:66:34:d6:7c:05:e2:d4:c8:6d:1d:1e:46:bc:ce:4c:
b4:9f:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:25:44 2026 by rpki-client