Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: O9zSM3JGi8hop9NyZFcDvei5vWGWKfhZypY6GpLSlZU=
Subject key identifier: 2B:A3:3A:80:AE:F9:18:7B:43:41:0B:1E:B8:3D:E8:80:D6:69:C6:8A
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 01A0D2A5E098B8468917BFEED715121EAE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 09:01:21 +0000
Manifest this update: Thu 24 Sep 2026 09:01:21 +0000
Manifest next update: Fri 25 Sep 2026 09:01:21 +0000
Files and hashes: 1: 1mW5uwrA_W3v9jqHQRpyjlHRr8k.roa (hash: MvfZK0vopuWN555bO977ZaPEKGpn35Tp4Z56kxBVG7U=)
2: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: RjZbBMzW+AzrdWA9fhOF8kVwrdxQGETx29fNGWGbJPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:e0:98:b8:46:89:17:bf:ee:d7:15:12:1e:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Sep 24 09:01:21 2026 GMT
Not After : Sep 25 09:01:21 2026 GMT
Subject: CN=2ba33a80aef9187b43410b1eb83de880d669c68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:db:08:6c:23:0b:fb:b5:37:1d:6f:57:51:
4b:12:72:3c:98:c8:85:5d:61:cf:3b:b6:8a:1b:e7:
d5:0a:c6:32:d9:ce:a1:1d:3c:ec:6a:4e:6d:9a:58:
31:29:00:be:95:70:6a:d5:05:da:0d:ed:42:68:2f:
88:84:d0:1c:75:42:aa:d3:30:00:29:02:89:28:d0:
3b:dd:37:f2:c0:91:f0:37:40:00:02:41:d5:a1:64:
be:25:2b:01:9d:7a:8d:22:ec:a7:f9:c0:f6:18:7d:
2d:18:c7:d6:b7:8d:d9:78:ec:cf:ce:54:07:2d:93:
09:43:ec:e2:0d:86:2b:13:5d:8f:fc:55:80:03:41:
89:dc:7a:00:65:64:86:8d:4d:5e:cd:a1:4c:a9:b3:
5e:e0:92:be:f5:52:5d:20:48:8b:20:80:a8:1c:3b:
30:5b:62:60:31:ee:f6:55:4e:a8:20:9b:dc:39:a3:
b5:50:c2:be:a8:98:0f:ba:10:70:8b:c6:c6:4a:b1:
d2:c9:3d:9b:fb:c8:66:c8:dc:9c:86:21:51:2f:24:
93:36:c9:00:23:34:6b:6a:e1:e6:3f:68:a2:78:e1:
16:06:b9:51:d1:fa:78:40:f8:5f:ec:cf:5e:99:8e:
2a:ba:fc:eb:cd:4e:20:bd:b7:1d:d5:11:c4:df:3f:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A3:3A:80:AE:F9:18:7B:43:41:0B:1E:B8:3D:E8:80:D6:69:C6:8A
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:47:8c:93:20:ee:ee:6b:95:64:96:7e:9a:b4:b7:c5:96:
f3:2c:e4:3d:45:4a:10:e9:88:f8:61:e6:77:6e:05:2d:c4:eb:
d3:95:17:96:55:6e:bd:8f:a1:e3:ea:21:e5:6f:09:80:d4:3b:
69:39:8e:2d:a5:15:79:e9:b8:20:8a:d5:93:70:ab:16:1e:a3:
fa:9d:1f:0d:4b:c6:fa:05:c0:a0:71:24:e2:8e:14:23:90:67:
22:01:b7:e0:38:04:c1:41:cd:19:68:a2:c9:60:51:c5:81:98:
70:b1:a0:2f:a9:ec:a2:4d:bd:e3:19:fb:47:ee:0f:aa:e1:9f:
64:53:8f:31:ba:a0:08:e5:da:ab:4b:c3:4c:c4:63:4b:bc:e1:
09:18:2f:36:79:91:35:34:5e:ee:24:0c:9b:3c:7d:c4:8d:d7:
d5:a8:34:3f:a6:62:8b:73:67:80:ce:29:75:57:6c:c5:89:7c:
d1:fe:cc:1b:cc:26:98:88:65:25:8e:71:ab:ee:97:6b:1f:49:
63:c5:71:48:6d:3c:36:1a:7e:f3:8f:bd:a2:1d:d0:3a:76:be:
2d:e3:8e:27:ab:93:7e:e6:22:5f:ac:55:25:29:58:dc:a7:e1:
b0:aa:ed:98:ab:bd:9a:5e:e4:91:d0:b1:42:28:12:3a:33:ed:
91:f5:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:20:22 2026 by rpki-client