Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: mrQHkTIMHEafamVqGK2e6OdRTlTLT+7hAAKvmPQX7XI=
Subject key identifier: 7D:15:00:35:83:07:A3:C4:45:7E:9A:EB:5A:A4:3A:20:BC:AA:E0:1B
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 01A1CBFC6CDCCA43EA1C1B267541F04468C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1AF0
Signing time: Wed 11 Nov 2026 19:01:20 +0000
Manifest this update: Wed 11 Nov 2026 19:01:20 +0000
Manifest next update: Thu 12 Nov 2026 19:01:20 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: +3zGJCFX5Lw/BgQDjTqLjbmAF4A3TM4MYp952bmhy5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:fc:6c:dc:ca:43:ea:1c:1b:26:75:41:f0:44:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Nov 11 19:01:20 2026 GMT
Not After : Nov 12 19:01:20 2026 GMT
Subject: CN=7d1500358307a3c4457e9aeb5aa43a20bcaae01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:e0:00:6c:b3:6a:fe:6c:87:5b:9c:ec:f3:
75:3e:52:c3:cd:7a:16:83:f3:17:7a:7b:05:9b:97:
01:fc:b8:d1:62:bf:92:be:00:db:e7:1d:93:d1:90:
02:bc:95:57:1d:f2:18:6f:b5:6d:56:79:e4:5d:c3:
2b:93:86:49:70:9e:0c:82:fd:bb:2e:ff:20:bb:3d:
ab:80:c8:d9:57:2e:36:58:aa:92:af:29:f4:fa:1c:
94:b6:ee:46:d8:3a:ad:18:fd:d9:9f:14:c8:1d:32:
30:13:16:93:ec:b0:7b:d1:42:ee:6b:e6:d3:8d:3e:
97:a9:36:59:b5:39:85:30:60:6d:35:3e:6e:59:57:
37:b7:c3:d4:29:61:60:d5:04:4f:26:6a:c9:e7:56:
ee:28:d6:e5:96:dd:95:7c:f0:d4:ea:da:18:de:86:
dd:44:d1:52:bb:ec:c8:c2:0d:97:6f:8f:2a:7c:75:
ac:bd:a5:1d:59:87:06:12:16:5c:d0:7b:57:6b:8e:
7a:9e:84:f6:ae:84:4c:0f:c8:aa:d8:e3:e0:68:9a:
8d:05:0f:67:81:af:9b:88:d2:bf:e1:3b:0d:af:6f:
4d:83:c7:39:e0:1e:d7:f8:a9:8d:25:14:bc:7f:35:
9e:7b:ed:66:fc:b9:d1:56:23:6a:4a:e8:62:c7:07:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:00:35:83:07:A3:C4:45:7E:9A:EB:5A:A4:3A:20:BC:AA:E0:1B
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0e:8d:d9:2b:cf:91:b0:32:aa:95:cd:70:ce:04:e7:c0:be:
ca:27:ab:77:7f:2d:e0:cb:ff:4d:6c:33:6e:41:b0:ab:01:4e:
ae:ae:f9:f1:da:cf:ae:3b:c1:3a:87:8f:d1:bb:3f:01:bc:8b:
58:a6:d6:c8:85:1c:f4:fc:86:8e:9e:2d:70:6e:2e:b1:e6:89:
cc:2a:63:90:b6:48:0a:a0:ed:14:55:b5:56:7c:63:38:77:d6:
ae:7a:0d:05:e7:50:ea:d4:55:c1:9f:83:f8:2f:49:9f:be:59:
0f:2b:90:61:b8:f7:b3:ba:e4:8f:7a:c3:16:80:05:7e:9e:15:
87:1b:11:8b:14:fd:e8:66:5c:92:80:de:e4:89:39:58:fb:36:
11:d2:d8:e5:87:ce:dd:4c:7d:f7:d0:e3:1e:97:bc:c3:52:ae:
60:2f:35:57:e8:51:31:66:b9:ba:8f:12:ab:f7:a3:3c:08:90:
ef:34:9f:c6:a9:a7:b3:a2:95:36:df:13:c1:3a:3e:e7:73:cb:
e5:c4:3b:8e:72:31:17:37:05:78:86:03:67:bb:1f:d2:c8:a3:
de:75:81:c0:35:c9:c2:3f:cf:bc:7f:e1:35:98:70:62:28:a3:
b8:e3:10:5d:28:24:e7:f8:84:4f:0c:62:41:ca:33:69:bd:fc:
fa:93:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 22:00:26 2026 by rpki-client