Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File: A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier: zfsCANPRPjgzrbbQlqvuctvbeSbk+yzAaEQlVOrtfp8=
Subject key identifier: 9D:CA:A2:62:51:B3:50:A9:25:1E:F4:AA:26:F8:18:70:77:C6:C0:08
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer: /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial: 01A0CBC742F9D70A72E8B5E2EE0721BBC0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number: 0FDE
Signing time: Wed 23 Sep 2026 01:00:28 +0000
Manifest this update: Wed 23 Sep 2026 01:00:28 +0000
Manifest next update: Thu 24 Sep 2026 01:00:28 +0000
Files and hashes: 1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: 4+i1pSx7SBo37eE+OFWckYXbFv1tMHgFKfF3yPWs/Jc=)
2: C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (hash: A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:42:f9:d7:0a:72:e8:b5:e2:ee:07:21:bb:c0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
Validity
Not Before: Sep 23 01:00:28 2026 GMT
Not After : Sep 24 01:00:28 2026 GMT
Subject: CN=9dcaa26251b350a9251ef4aa26f8187077c6c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:44:34:ce:9d:3f:d9:25:2e:90:7d:75:b3:
14:9f:79:e8:79:d0:fb:4b:a5:96:50:33:35:22:ca:
c6:22:fc:23:63:a4:f1:eb:2c:31:60:7b:d8:d1:c6:
20:12:a2:1e:a8:8a:f6:e1:7a:2e:53:f0:4d:43:74:
73:c6:7d:b5:b7:48:b2:f9:c6:82:73:71:66:a7:0e:
2d:d0:46:30:4e:bc:43:95:56:37:80:ba:5d:90:13:
8d:a5:ee:b5:f1:1d:b3:f4:47:46:ac:aa:ae:7a:b5:
c4:e0:3b:d5:3b:a8:d5:1a:7d:4e:8d:e0:d0:e7:86:
ad:9d:5c:ca:4f:ac:87:77:79:25:ca:3a:e3:cd:ff:
a7:f4:51:83:ba:9e:29:c2:e1:4b:10:a6:60:01:9a:
91:5c:f0:a8:70:de:02:38:9e:a3:3e:f8:67:89:4e:
28:60:85:8b:95:94:db:07:09:64:58:fa:33:3a:d4:
bf:f0:a9:c3:74:2f:c3:93:d1:d8:18:2f:ae:4b:1a:
ab:db:3b:b8:8e:6f:df:23:3d:90:b1:bf:53:75:1a:
8b:1d:d3:84:04:d1:87:ba:8c:ec:53:66:59:c7:e8:
0d:5f:16:05:a5:6d:2a:1e:8c:bb:fa:ce:4e:ec:8e:
f9:25:2a:a7:e4:a2:0e:93:01:7e:46:d0:d1:9b:32:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:A2:62:51:B3:50:A9:25:1E:F4:AA:26:F8:18:70:77:C6:C0:08
X509v3 Authority Key Identifier:
keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:69:a0:f3:ea:f2:dd:12:f6:96:3b:14:35:e0:4f:21:db:06:
4d:ba:42:27:83:be:4d:b2:0a:26:31:8a:99:60:a7:c9:1c:7b:
5d:91:0d:a2:83:86:3f:64:ad:5a:55:9b:51:da:fd:fb:d8:22:
70:45:2e:9e:0b:8e:7d:76:a8:c4:99:eb:76:a2:35:17:d8:eb:
63:b3:b9:bd:1f:c7:da:3f:a7:4a:ee:11:44:d2:c4:97:96:e7:
d5:c3:d3:1d:f7:b7:88:c3:95:56:81:92:01:47:c6:6b:a9:e0:
f6:9f:ab:9e:23:c5:d2:ad:61:c5:c7:5d:a0:83:7b:f4:9f:58:
2d:07:e5:3a:f7:a4:a7:56:60:73:82:ea:90:29:ab:23:0a:b7:
06:ce:74:e9:cc:63:63:fa:53:7f:c1:d6:e4:1d:8b:6c:26:fd:
d4:db:8e:f8:bb:b9:4d:35:27:99:42:ed:47:bc:66:ee:67:18:
60:73:79:c4:5a:d8:3b:8f:c2:92:5e:69:24:5d:82:2d:44:b7:
94:9e:4c:03:0d:ed:40:b7:4c:cf:0a:f2:bf:9b:6a:7f:50:91:
17:c2:a9:c8:20:54:1d:a0:dc:69:a6:1d:a8:4c:e4:d4:f1:65:
a3:be:d7:93:0e:f3:cb:4e:96:1a:8c:45:e9:0a:b5:e7:17:9e:
91:3b:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:26 2026 by rpki-client