Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: av8yeoKuqw4QNGhIX84ycW4crJb3t2TZSCpP1PdfHGY=
Subject key identifier: A0:EE:CE:76:02:65:FE:75:97:99:37:6B:93:27:5D:DE:FD:3D:12:75
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 01A0D4CB687726070DCB914901E3C1813BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 19:01:35 +0000
Manifest this update: Thu 24 Sep 2026 19:01:35 +0000
Manifest next update: Fri 25 Sep 2026 19:01:35 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: ZOM71IBbR93Kf1ZRRq5oPiiXApr8o/I8TJZHj2gbGHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:68:77:26:07:0d:cb:91:49:01:e3:c1:81:3b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Sep 24 19:01:35 2026 GMT
Not After : Sep 25 19:01:35 2026 GMT
Subject: CN=a0eece760265fe759799376b93275ddefd3d1275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:3c:41:cf:bd:11:9a:d2:90:08:c7:52:55:
d8:92:c2:1a:f0:27:a3:ef:16:49:c0:f5:55:21:e5:
76:0d:74:44:11:17:30:ab:fc:13:51:8a:68:d5:c5:
76:65:18:02:b7:01:ce:c7:70:62:67:c3:4f:1c:e2:
64:5f:1e:c0:8a:5e:aa:7d:41:a4:dd:8c:5f:6f:f5:
29:e1:23:f4:1b:16:92:f5:35:df:5c:6c:32:67:15:
91:ba:fd:1e:a0:73:72:c3:ab:c4:0b:d5:ad:f6:72:
98:4a:77:f4:3b:3d:ce:30:84:97:f6:2b:7b:06:b3:
b8:db:ac:68:c7:a1:b9:fd:c2:59:b5:b4:eb:12:86:
ee:1b:c7:1a:5b:73:0d:af:52:2a:f0:e1:e1:b1:1f:
e9:f0:af:05:45:f9:ec:98:81:29:d4:79:0f:55:e2:
c7:65:42:ba:ba:4c:9e:30:9a:e4:5c:46:90:1b:fb:
cb:fa:af:74:3e:d4:60:d8:62:c3:f8:d8:f1:e5:34:
83:79:6a:ab:40:31:9a:61:f0:c5:6d:ad:de:af:70:
45:86:12:c2:e7:da:f4:f7:21:bd:b5:d4:53:58:89:
d9:88:6f:f9:dd:ee:89:03:76:25:1f:da:69:a4:88:
2d:7e:7f:f0:24:e0:cc:82:2c:e4:5a:8a:b9:27:78:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EE:CE:76:02:65:FE:75:97:99:37:6B:93:27:5D:DE:FD:3D:12:75
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d8:dc:01:7f:b8:fd:e3:74:b1:55:f1:2f:2b:a1:d1:ff:f2:
ba:9f:3c:26:b8:87:8f:a0:22:d6:79:1c:d6:45:35:8a:b2:65:
50:4d:dd:0d:1c:bd:53:41:f6:62:da:58:fc:3f:c3:db:18:5a:
08:14:f8:b6:76:d4:2a:02:3b:ad:c3:84:b1:72:2d:98:f5:29:
43:47:53:69:f5:5a:8b:cb:f9:34:a8:e0:66:7c:d0:c4:7c:87:
b0:10:7d:aa:4f:c8:1f:b3:8c:80:f9:1a:59:d2:4f:4d:8f:76:
b2:d2:ac:62:26:c4:f8:79:b4:85:8d:81:cc:06:b7:f4:e4:eb:
86:2c:ae:dd:e0:87:ab:98:bf:0b:b5:79:65:b5:f7:1d:0c:fb:
20:60:fe:46:ff:b5:48:be:7a:be:d3:15:84:a8:63:30:fe:11:
43:2c:ef:14:63:39:fa:27:12:2b:5b:6c:74:4b:59:9a:3c:e6:
da:a0:ba:c5:66:10:e7:40:3e:85:de:60:a5:3d:33:2b:1c:52:
78:0e:82:fb:73:21:65:f0:73:da:74:07:e6:84:a4:e7:88:c9:
c1:e6:9b:aa:9e:ca:77:6b:48:59:be:c7:58:1e:a3:d9:98:60:
6f:8d:49:95:50:ec:19:e7:e6:96:29:3a:3f:ae:ac:2f:70:6e:
42:c6:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:09:12 2026 by rpki-client