Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: X885qyoLqT1FxkKatN4GPi4iKmmJLZqHU0Bw35iclH4=
Subject key identifier: 58:72:93:61:D6:02:CA:03:85:08:67:C0:07:EA:32:DE:35:57:1D:65
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01A0CAB459D398FF050FFB58F909B23C7679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 20:00:12 +0000
Manifest this update: Tue 22 Sep 2026 20:00:12 +0000
Manifest next update: Wed 23 Sep 2026 20:00:12 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: Qcd6LJvrgg7JX3cqQbgX3FV7Pa+eTG8GKMul0gCABh0=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:59:d3:98:ff:05:0f:fb:58:f9:09:b2:3c:76:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Sep 22 20:00:12 2026 GMT
Not After : Sep 23 20:00:12 2026 GMT
Subject: CN=58729361d602ca03850867c007ea32de35571d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:df:bd:d4:bd:fa:8d:e7:21:48:b2:3a:43:
fe:fb:6a:b1:87:1e:27:a7:1c:82:d9:84:8f:60:77:
1f:62:60:8d:5b:9e:8a:25:8d:b7:2d:00:13:77:98:
4e:25:52:6a:90:a2:55:91:98:1d:17:9f:ce:2e:9d:
4f:d0:f0:5d:e9:f8:34:a7:e3:db:08:3e:e1:53:29:
af:d0:e3:83:74:95:79:50:d5:28:44:c7:95:4d:41:
1d:ea:30:46:28:1f:0f:1f:a6:93:14:21:5e:16:c4:
04:e3:de:99:e0:84:a0:54:20:a7:54:ab:d8:a9:c7:
9b:b5:77:3b:19:83:bb:94:4c:47:7a:82:55:ab:59:
67:04:03:20:1e:96:71:9c:ad:98:90:57:42:71:db:
b6:0c:53:28:aa:c0:d2:0a:07:a8:9f:97:5b:4c:23:
02:12:d8:1b:87:6e:88:45:cd:c3:5d:b6:0a:eb:b3:
44:2b:f9:78:f9:74:04:b5:c3:1d:f5:30:d7:00:ba:
0c:39:cc:7d:92:27:a4:7a:56:5a:5b:e2:96:ca:61:
23:9e:5a:e8:59:40:9b:57:07:15:68:3b:b0:7f:26:
8b:29:bf:94:0b:f4:e5:16:0b:12:aa:e2:82:28:c7:
76:87:78:75:37:66:db:11:91:3e:89:98:89:52:b1:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:93:61:D6:02:CA:03:85:08:67:C0:07:EA:32:DE:35:57:1D:65
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:de:93:e8:62:d8:e8:8e:05:98:1d:9d:c9:eb:88:33:28:
0e:7b:24:63:39:2f:ac:87:1d:9d:dc:3b:a6:6f:23:5a:03:cf:
14:50:ec:00:94:7c:1f:20:8f:d3:25:90:6a:2f:ed:02:84:11:
1c:97:0d:9f:f4:68:2f:26:97:68:2a:09:c5:91:be:39:29:ef:
54:e0:7a:31:95:81:ba:ef:45:55:58:86:55:ec:0f:f3:b4:32:
ea:4e:c5:df:c5:34:07:84:64:73:d2:c3:e8:49:15:3e:8a:fd:
e2:7e:26:02:79:4b:dd:ea:f0:87:e8:f1:84:1e:a2:de:89:40:
93:68:74:06:18:da:28:32:58:21:e2:79:fc:20:68:9f:21:06:
ad:f3:07:4c:c4:ab:e2:6d:28:d1:bc:b2:48:1c:48:56:68:1d:
25:53:dd:e3:3d:61:ff:1a:d3:08:a8:7b:c8:1c:f8:01:59:ba:
6e:c5:8e:fa:bd:b5:e3:c8:5b:b1:32:ba:82:c8:df:ce:30:89:
43:3d:8f:98:65:14:cc:61:37:67:43:1c:82:25:76:9e:32:c1:
d5:06:2e:22:0d:81:61:ed:bc:ae:d9:4e:dd:5d:54:a9:35:93:
62:ad:c2:37:aa:5d:25:75:4f:d8:8a:fc:eb:06:ca:15:df:5f:
e0:fe:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:40:41 2026 by rpki-client