Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: nbNqdvqNREpDFOJa/7CQ38Qmxt1hOX7Sm3inwJy8hIQ=
Subject key identifier: 83:1D:AC:2A:36:75:5B:7E:91:4C:2A:F5:19:6E:F3:7C:CD:A8:7D:F5
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 01A0D15B69B7580FC74F7D15E00CE5BA072F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 03:00:23 +0000
Manifest this update: Thu 24 Sep 2026 03:00:23 +0000
Manifest next update: Fri 25 Sep 2026 03:00:23 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: l0Y07Lr87GfsM9ZeYJ3C0pQXjWJVoAAjbyJ+ei+GrMw=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:69:b7:58:0f:c7:4f:7d:15:e0:0c:e5:ba:07:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Sep 24 03:00:23 2026 GMT
Not After : Sep 25 03:00:23 2026 GMT
Subject: CN=831dac2a36755b7e914c2af5196ef37ccda87df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:f1:e8:90:b0:79:5f:0e:06:05:39:96:79:
38:9a:98:59:3a:40:4e:bc:b8:fb:de:5c:60:4d:28:
4c:b2:d8:00:ac:f6:cb:8f:7b:3d:c6:66:a1:0c:a3:
ef:12:76:3a:c7:15:fa:d9:95:f7:fa:86:68:08:09:
95:f2:32:fe:a8:35:23:ea:6b:e0:44:2e:b2:42:8c:
84:ee:bb:69:dc:63:9f:d1:93:3e:95:7e:2e:ad:14:
c1:aa:4a:36:83:71:9f:14:b8:9c:f3:61:9b:48:a9:
08:ff:cd:3e:e2:24:85:fa:3a:4e:ac:89:b8:71:d9:
fd:c9:f9:2b:ea:c4:74:b8:67:fb:d1:ce:39:1b:27:
6a:58:f4:9c:b0:1d:b9:46:c2:21:3f:89:92:96:08:
67:cd:4f:5a:01:42:ca:97:49:a9:cb:2e:c2:d5:c3:
75:f0:46:23:a0:9c:9e:d5:f2:a1:21:1e:3d:42:55:
0c:49:2d:d9:f5:39:2e:98:94:19:95:ad:07:a1:d5:
f4:9c:38:09:14:4e:4b:68:72:a6:00:08:ef:ea:71:
78:25:97:5f:57:f6:bf:03:08:1c:20:2c:f4:3e:01:
e1:63:a4:bf:67:af:6c:6f:65:3e:6a:4c:b0:6c:98:
fe:22:86:57:b5:55:15:04:a5:a9:63:c2:fe:c5:dd:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1D:AC:2A:36:75:5B:7E:91:4C:2A:F5:19:6E:F3:7C:CD:A8:7D:F5
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:97:0e:83:44:2c:39:01:e2:3f:96:f1:f1:16:7d:bf:61:5d:
56:ca:3f:b4:6d:a2:c7:b8:29:f9:8b:67:77:a0:b0:ea:dd:a3:
7e:22:6d:05:9d:3f:7f:cb:42:25:1a:af:23:a1:a2:80:6c:90:
a8:b9:67:92:98:1f:78:85:fd:90:c1:5c:a0:ea:1c:44:0c:d7:
fb:f5:16:3d:5f:cd:22:f2:0b:76:60:38:45:98:c7:10:9c:17:
25:20:09:e9:f0:d2:eb:37:ae:3f:1f:1d:da:f1:47:b6:e0:ac:
1e:a1:08:0c:83:cd:91:96:a2:d7:d5:8c:5e:a7:6c:a5:e1:04:
9c:b0:54:6b:66:b0:30:41:28:69:fa:38:c0:99:3f:bc:71:47:
31:fe:9c:ce:df:77:bd:d1:66:d4:ea:3c:b4:2d:69:be:ff:76:
30:f8:a0:ca:87:9a:7a:35:ac:aa:47:08:c5:05:77:79:74:d5:
09:63:4d:52:db:b4:71:b8:f4:3c:41:71:94:a0:c6:8f:24:49:
34:1c:4a:5a:c0:90:a1:8b:94:d4:8d:62:f7:35:91:99:aa:b0:
0a:3a:89:d6:f0:01:5d:42:0e:4b:40:32:90:d7:9f:42:ae:0b:
aa:a6:fe:df:cb:b1:f2:ff:e6:40:78:37:81:ed:6d:e9:8e:ce:
d7:d3:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:37:39 2026 by rpki-client