Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: oZNgN9j+7HTIBflpNN4/f869I2MgMeVXT3+REfByjlg=
Subject key identifier: C5:FF:AA:46:B4:DE:4E:29:F0:9B:C1:F9:D5:CA:B7:12:95:A7:25:DA
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 01A0D6F02AE16E7A0C0D18263D875B6CBF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 06F3
Signing time: Fri 25 Sep 2026 05:00:58 +0000
Manifest this update: Fri 25 Sep 2026 05:00:58 +0000
Manifest next update: Sat 26 Sep 2026 05:00:58 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: rYdL6R6KqUjK9qUuRZfJ0cxHsdc1jFWOrfh30VDDkmg=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:2a:e1:6e:7a:0c:0d:18:26:3d:87:5b:6c:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Sep 25 05:00:58 2026 GMT
Not After : Sep 26 05:00:58 2026 GMT
Subject: CN=c5ffaa46b4de4e29f09bc1f9d5cab71295a725da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:26:f1:1a:b4:d5:5f:5d:1e:d0:71:df:7b:
b4:6f:10:e5:8b:cc:06:67:24:a4:a3:69:e1:e9:e4:
d2:34:6c:33:c4:66:19:38:1f:b9:6d:90:e3:64:d9:
fc:a3:6d:23:4f:5f:3f:5f:73:73:2a:5b:ea:e1:e3:
d3:00:02:e3:c8:87:34:65:14:85:5b:9f:63:60:46:
9a:54:39:52:e7:1b:2a:bf:0b:64:8f:ea:63:0d:18:
a0:07:cc:f3:4c:b8:ab:10:b4:b7:d8:99:8c:2e:82:
b6:65:ac:9a:86:6f:83:bc:ef:54:a8:d2:93:e5:fd:
3b:af:14:83:59:cf:76:ef:db:80:dc:a1:0d:bd:26:
81:14:47:f0:24:d6:f6:d6:00:12:7f:46:c7:fd:e7:
80:b5:34:be:af:43:5d:1c:9c:38:7b:71:3e:b8:13:
b7:f0:83:10:eb:4f:0a:99:ad:9e:f6:fc:21:46:70:
14:6a:c5:04:7c:94:d1:09:97:20:57:9a:f4:82:96:
fe:70:0d:4f:77:08:3f:97:2d:a4:d3:a2:35:6a:a1:
1c:85:75:ab:38:e0:25:4a:5d:62:b9:0b:3a:4e:a9:
1d:62:d7:50:74:2a:f4:d2:b1:48:76:f3:c7:4d:93:
08:35:af:20:cd:2e:e9:38:1c:01:6e:b8:2b:0a:5f:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:AA:46:B4:DE:4E:29:F0:9B:C1:F9:D5:CA:B7:12:95:A7:25:DA
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:f5:f2:4c:90:62:e3:97:58:30:0c:71:af:bf:07:65:2a:
4a:da:8d:5c:4f:7e:7f:8a:44:85:e4:92:8c:05:25:e9:ea:ec:
16:06:6f:c6:a3:dd:69:d4:9a:9c:9a:7d:25:48:2e:b3:69:b9:
5a:07:ce:00:6a:66:e3:65:28:e0:65:1f:39:4b:b3:24:e5:22:
58:8a:77:9d:70:5c:04:10:df:c7:be:d3:8b:83:38:d0:3a:0b:
64:f9:9e:30:ae:c7:d2:46:b7:ef:b5:af:90:b8:42:91:95:a5:
98:ca:a7:4b:75:56:66:1a:db:e2:8d:16:2b:42:9c:74:f3:0a:
68:88:d6:b8:04:02:b8:89:ab:e5:d3:fd:0f:6f:42:cf:30:d1:
7c:1a:1f:9f:c0:11:15:b8:5e:61:81:73:ee:79:b4:27:b0:44:
c1:16:27:55:95:17:42:76:9a:ce:d5:0f:bc:04:1e:56:d2:77:
bd:1d:13:45:bc:5f:ce:6f:8b:2f:73:0a:f4:8f:7d:05:5a:5d:
06:b2:14:b2:21:22:cf:5e:a8:d6:da:1f:a5:a4:9c:57:c3:11:
15:87:54:0c:7d:0f:9f:12:ec:56:18:27:6e:3b:54:f3:67:e5:
91:0a:3d:fa:2c:3f:28:d5:81:99:e7:19:4c:0a:c1:ec:28:aa:
14:63:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:18:26 2026 by rpki-client