Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: wRdRqobozGpYP+/9RRlmsJXYg97g+P0lDLKCunijq0A=
Subject key identifier: 89:87:81:82:55:33:8A:02:8F:47:BB:07:02:F4:3B:4E:D3:BF:24:04
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 01A0CC6C0EB77CBAC6DCB6A717BE7D700EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 04:00:28 +0000
Manifest this update: Wed 23 Sep 2026 04:00:28 +0000
Manifest next update: Thu 24 Sep 2026 04:00:28 +0000
Files and hashes: 1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: Y8MSD8zGCmNpjzzpSv6qSBfSmDDw4z+4gvPOZl2RiW4=)
2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:0e:b7:7c:ba:c6:dc:b6:a7:17:be:7d:70:0e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Sep 23 04:00:28 2026 GMT
Not After : Sep 24 04:00:28 2026 GMT
Subject: CN=8987818255338a028f47bb0702f43b4ed3bf2404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:68:90:cc:b9:7e:6d:18:5a:dc:0d:d3:20:
0c:a6:6a:7a:63:65:8d:81:fb:b1:4e:b1:68:89:33:
0b:0f:31:75:ce:e6:bf:58:a9:f3:22:f1:d5:ac:5c:
df:be:68:5c:ab:de:af:55:e8:de:aa:58:10:de:77:
ec:c3:93:f7:f4:3c:97:de:55:9d:43:3c:c8:ff:ab:
f5:50:79:47:da:e0:6c:11:c6:25:fa:07:02:14:a0:
d7:65:d5:58:5c:b5:cc:1f:67:3b:b2:f5:72:a5:88:
5a:87:8c:70:64:cd:95:6b:62:b5:7e:d9:2f:e9:63:
28:01:bf:09:77:76:a0:40:ed:26:94:5a:f7:23:03:
c7:24:e0:54:64:b1:50:72:df:fe:91:2f:56:45:45:
d2:41:14:68:d3:bf:75:0b:0d:bc:fd:fc:f4:9a:d7:
03:e9:5a:86:f1:a0:5b:42:95:23:06:c9:fd:7f:24:
8c:b5:aa:71:e2:c3:53:5b:26:f9:38:3e:27:2a:bc:
ff:4e:33:d6:03:4a:df:b1:11:65:10:00:63:cf:d7:
af:38:6b:20:24:a7:a6:91:cd:01:d5:67:d6:cc:92:
ce:84:9d:1b:3a:fe:fa:76:9a:50:53:47:7b:10:6b:
a8:ef:5b:34:a7:67:1b:a1:02:b6:b8:2b:d9:22:f4:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:87:81:82:55:33:8A:02:8F:47:BB:07:02:F4:3B:4E:D3:BF:24:04
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:5b:bb:7a:14:46:c7:8a:61:05:11:00:c1:ca:8d:e7:a6:
70:21:f8:f8:6b:60:47:8d:7a:c9:5a:85:9b:99:39:59:7a:f4:
d0:1f:05:d3:f2:f6:2e:7f:d9:a1:9d:7f:b1:07:0c:7a:bf:d4:
63:30:7f:fe:22:f3:21:d2:fe:88:86:4d:76:2e:25:4a:50:b6:
ec:e0:cd:1b:59:c9:87:2c:d4:ea:0c:88:d6:91:a5:46:0d:8d:
d8:12:cf:a2:11:a9:10:2c:93:87:22:53:39:6c:69:ec:74:88:
ee:5e:2e:38:2d:07:57:e1:03:6e:ee:85:63:84:33:e9:52:14:
11:30:76:9f:7f:18:ba:a1:39:92:a8:d2:89:b5:4e:04:b7:c0:
ab:f8:ac:ba:a5:f0:30:34:07:f8:df:47:58:82:ee:7b:9d:5d:
8d:a8:14:ac:d6:61:d7:01:74:e5:fb:3c:2c:03:20:62:73:43:
6f:fb:a7:f0:e3:68:b5:84:c8:f1:e3:be:d6:4e:3c:a2:9b:e8:
f7:de:66:26:6e:7d:ef:12:95:37:41:db:42:f8:74:cd:c0:b3:
ab:98:9a:87:45:2d:32:e9:68:80:87:62:c2:1d:85:e7:94:d3:
6b:73:8c:d6:3c:79:65:fa:f4:1f:f5:54:5f:36:ec:63:12:f9:
a2:08:5f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbA63fLrG3LanF759cA77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmODI1OWIzMGVjMDM3MjJmOTQyMDM1YTk0ZTIwOWY4
ODI4NjEwHhcNMjYwOTIzMDQwMDI4WhcNMjYwOTI0MDQwMDI4WjAzMTEwLwYDVQQD
Eyg4OTg3ODE4MjU1MzM4YTAyOGY0N2JiMDcwMmY0M2I0ZWQzYmYyNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qpokMy5fm0YWtwN0yAMpmp6Y2WN
gfuxTrFoiTMLDzF1zua/WKnzIvHVrFzfvmhcq96vVejeqlgQ3nfsw5P39DyX3lWd
QzzI/6v1UHlH2uBsEcYl+gcCFKDXZdVYXLXMH2c7svVypYhah4xwZM2Va2K1ftkv
6WMoAb8Jd3agQO0mlFr3IwPHJOBUZLFQct/+kS9WRUXSQRRo0791Cw28/fz0mtcD
6VqG8aBbQpUjBsn9fySMtapx4sNTWyb5OD4nKrz/TjPWA0rfsRFlEABjz9evOGsg
JKemkc0B1WfWzJLOhJ0bOv76dppQU0d7EGuo71s0p2cboQK2uCvZIvTpxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImHgYJVM4oCj0e7BwL0O07TvyQEMB8GA1UdIwQY
MBaAFAPz+CWbMOwDci+UIDWpTiCfiChhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQt
YWIxMzM1NmU1ZmVjLzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hNDU4MmUtMWE0ZC00ZDRhLWE1ZjQtYWIxMzM1NmU1ZmVj
LzEvQV9QNEpac3c3QU55TDVRZ05hbE9JSi1JS0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnxbu3oU
RseKYQURAMHKjeemcCH4+GtgR416yVqFm5k5WXr00B8F0/L2Ln/ZoZ1/sQcMer/U
YzB//iLzIdL+iIZNdi4lSlC27ODNG1nJhyzU6gyI1pGlRg2N2BLPohGpECyThyJT
OWxp7HSI7l4uOC0HV+EDbu6FY4Qz6VIUETB2n38YuqE5kqjSibVOBLfAq/isuqXw
MDQH+N9HWILue51djagUrNZh1wF05fs8LAMgYnNDb/un8ONotYTI8eO+1k48opvo
995mJm597xKVN0HbQvh0zcCzq5iah0UtMulogIdiwh2F55TTa3OM1jx5Zfr0H/VU
XzbsYxL5oghfvg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:02:35 2026 by rpki-client