Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
File: A-pQioW8c6mqogOop7r5wWLm82w.mft (raw, json)
Hash identifier: oX2K607O36D5RlnTcjw/RQqtbzmHisUqJlAW3IhTX/E=
Subject key identifier: E6:C1:B7:8F:63:23:C5:59:F7:1C:BE:9E:AC:D9:78:2C:7A:F6:81:C5
Authority key identifier: 03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
Certificate issuer: /CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Certificate serial: 01A0E2F579901F6C1D71B92DE2F949C500E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
Manifest number: 0BE7
Signing time: Sun 27 Sep 2026 13:02:13 +0000
Manifest this update: Sun 27 Sep 2026 13:02:13 +0000
Manifest next update: Mon 28 Sep 2026 13:02:13 +0000
Files and hashes: 1: A-pQioW8c6mqogOop7r5wWLm82w.crl (hash: zCLNx+JPPThVEqtTP3YVfAWNFFwoAWiwGoTJg+Yop/k=)
2: g0oXLuj5iDetxALq5Bw1KiMkRUo.roa (hash: PW9/wUds/6yFiBdtio7q4yhD06x/RpMiIm+VqX8uKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:79:90:1f:6c:1d:71:b9:2d:e2:f9:49:c5:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ea508a85bc73a9aaa203a8a7baf9c162e6f36c
Validity
Not Before: Sep 27 13:02:13 2026 GMT
Not After : Sep 28 13:02:13 2026 GMT
Subject: CN=e6c1b78f6323c559f71cbe9eacd9782c7af681c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:1f:df:ee:4c:60:eb:25:5c:9b:35:c8:1b:
d0:a4:24:27:87:ef:71:da:28:e3:df:a6:fc:5e:b7:
3a:e6:d5:a7:a1:44:25:51:4d:a9:1c:29:18:98:8b:
1c:37:b5:a5:13:56:a4:47:9d:6e:96:23:13:aa:29:
7e:2f:89:98:c9:3a:9d:e8:09:0a:af:4f:70:af:5a:
95:66:0b:fd:6c:17:ee:d9:9f:2b:c7:42:67:4f:e5:
4b:ea:b5:a2:02:90:e0:01:3c:11:bf:3e:8d:3b:db:
db:10:69:ef:63:75:8a:b2:95:91:81:c7:e5:26:31:
97:7b:75:f8:94:e6:2d:26:84:ad:0e:5b:f0:9f:2d:
a8:a9:c1:51:d7:ce:6c:61:cc:5f:03:5c:51:7d:86:
85:87:9e:0f:29:1a:7d:9c:c5:2c:77:92:b5:08:a3:
ad:e7:2a:13:26:fb:53:20:56:39:7a:54:45:de:89:
e4:66:58:f5:5c:c1:ca:ef:32:e3:4e:f6:02:73:64:
6f:37:1b:c4:5d:57:3c:54:8c:de:a1:20:94:5e:70:
7e:6e:fb:de:51:60:0c:c8:2a:2f:8a:8e:37:be:cf:
67:75:b2:8f:2f:d6:a5:11:78:3f:19:a8:42:7a:49:
e5:59:c8:ed:78:02:ac:ef:27:ae:ad:9d:36:20:fc:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:B7:8F:63:23:C5:59:F7:1C:BE:9E:AC:D9:78:2C:7A:F6:81:C5
X509v3 Authority Key Identifier:
keyid:03:EA:50:8A:85:BC:73:A9:AA:A2:03:A8:A7:BA:F9:C1:62:E6:F3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-pQioW8c6mqogOop7r5wWLm82w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9eb346-7b07-4108-9fb0-d7270905e923/1/A-pQioW8c6mqogOop7r5wWLm82w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:ab:3a:5c:47:20:d5:d4:63:f5:9e:bb:ae:14:b1:60:5f:
bd:ad:ff:a1:e1:25:ea:33:16:db:9e:7b:ee:66:66:d1:e5:c1:
e3:3e:cc:39:1a:d4:b7:3d:3f:33:52:04:82:9f:c4:f5:9b:94:
62:d3:c2:ba:0b:90:5b:a0:77:37:93:aa:7a:f5:88:43:f8:54:
6e:4c:5d:d6:74:09:23:46:b7:9e:23:32:37:7c:1b:b3:cc:c2:
35:e9:f4:6f:d3:e8:f4:e0:10:42:ed:3e:03:69:31:30:2f:bb:
50:8c:86:1b:9d:8c:4b:de:64:bb:41:c4:7c:9a:fd:a1:f5:2b:
a1:5d:fb:2c:dc:f4:09:62:cc:7f:7e:00:8c:2c:e5:8a:63:5e:
cc:a3:e9:9f:56:7d:b0:6c:fb:be:74:cf:14:f7:f5:71:e0:a8:
c0:1a:08:65:20:97:54:db:c2:31:69:7b:af:9d:b4:16:8b:06:
3a:4c:9c:5a:b2:83:64:ba:ea:ab:ad:74:e2:4e:4f:8c:32:5b:
73:ba:5d:b3:20:76:38:73:2d:e3:96:91:74:a0:0d:28:3b:e7:
57:a5:16:c1:23:ce:87:09:00:dd:3e:68:20:b3:02:49:ad:f3:
11:a8:72:92:78:71:16:7b:2b:4c:94:e8:14:bf:da:66:94:a1:
04:f5:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:52:42 2026 by rpki-client