Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: UZHWxvmrC+fCjGg6d6hx14qalqfEjNnJ/mfkb1SyoNc=
Subject key identifier: D9:48:DB:82:41:F7:33:AD:C1:CA:F6:73:CA:F2:A8:61:D0:D0:38:2B
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 01A0E551F0CE98EF8B10291F00DB0684A6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0EA4
Signing time: Mon 28 Sep 2026 00:02:27 +0000
Manifest this update: Mon 28 Sep 2026 00:02:27 +0000
Manifest next update: Tue 29 Sep 2026 00:02:27 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: tYFp9Faeg1ZlnsoaZDkYHblesKddq5hy5xXceLM3l2Q=)
2: ns2_9RvIYkB1i9QUreo7mZCNFB4.roa (hash: hRy6vBXZocA8W5sz3dmk0IcTUrCvsfp79eJVXqITSXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:51:f0:ce:98:ef:8b:10:29:1f:00:db:06:84:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Sep 28 00:02:27 2026 GMT
Not After : Sep 29 00:02:27 2026 GMT
Subject: CN=d948db8241f733adc1caf673caf2a861d0d0382b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:94:ee:8a:73:5e:9d:a7:a1:05:98:fd:7f:
1c:fc:d0:b1:3c:13:2a:5f:a9:74:a4:69:cc:c4:6e:
8f:6d:90:28:be:4e:3a:5e:d1:48:c9:1a:0e:45:32:
65:1c:77:cc:b5:5d:90:68:d0:2f:e7:88:72:a8:47:
5d:48:dc:aa:6c:45:84:12:66:a0:46:1b:e8:8c:e4:
27:6c:d1:69:8a:aa:fa:0b:50:9e:fd:c0:e7:f4:2f:
62:bf:89:0a:13:47:5b:b0:d8:3a:a6:47:74:98:95:
e3:e9:d6:c9:35:7d:51:19:60:8c:91:09:70:e7:46:
d3:b3:80:87:37:61:bd:d7:ae:ff:4f:30:d0:f8:7d:
34:ef:8e:66:61:6c:00:a9:4d:26:0b:ce:10:ea:4e:
32:94:45:c6:6f:16:8d:e6:9c:7f:28:c0:7b:b4:c7:
0f:3a:4f:9f:ab:4f:a8:a3:d7:81:5e:8b:8d:81:5a:
95:dd:31:74:ef:67:47:6a:55:79:4c:ff:4d:48:c6:
bf:60:1c:c4:82:d4:09:da:bc:7a:7f:f0:f0:ac:a2:
75:18:d0:c1:97:37:94:70:95:ee:e5:11:6e:b4:5a:
f8:94:86:56:88:58:0d:f0:4b:e6:ef:8f:e2:c4:dd:
46:e0:ac:b1:31:49:b1:ee:5a:05:ef:ee:eb:b8:7c:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:48:DB:82:41:F7:33:AD:C1:CA:F6:73:CA:F2:A8:61:D0:D0:38:2B
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6f:1a:8f:03:f5:13:92:49:61:7c:28:b2:a4:7f:15:9b:e8:
d6:c0:8d:e6:30:bb:12:ae:38:01:bf:88:24:0d:06:03:89:bd:
9a:85:4f:3c:b6:19:87:6f:bb:27:b2:e7:1d:66:b6:15:19:38:
b8:64:02:0a:6d:19:32:d6:0b:3d:de:11:08:7f:71:bf:52:a4:
8b:97:dd:ef:96:8a:62:a7:8f:be:9d:b6:74:bb:1f:2b:55:9e:
8e:38:e8:0f:5d:1f:01:87:d7:3f:fa:e8:5d:45:40:5c:23:17:
31:02:bc:0a:a9:7b:01:6d:0a:fc:54:e9:1c:f7:b1:c0:53:c1:
85:a6:a5:d8:bd:77:dc:c5:5c:c2:ee:3f:a2:5f:fe:1f:6a:57:
19:cf:6c:4f:f7:bd:92:64:2d:18:35:6f:6f:6b:10:73:52:13:
5d:43:ef:9e:0a:bb:f9:e9:59:30:15:6f:23:39:7f:d7:11:41:
70:80:d8:7c:f3:0d:46:cf:da:03:a8:b9:60:0a:bc:1d:09:dd:
72:fc:86:56:57:3b:c3:f5:5c:03:0e:03:1c:9b:7f:8c:cf:6b:
40:58:87:7a:29:f5:59:a1:2a:60:1c:13:cf:71:d9:e1:a1:16:
af:4c:f1:f5:ba:ab:a9:02:91:d7:9a:58:ca:2b:52:af:26:c8:
1f:a7:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:39 2026 by rpki-client