Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
File: A2loTGfKqZ_8AYS-rMrw6oipISk.mft (raw, json)
Hash identifier: FFHksRyeOOwOShVQ+8nA85hSiObdtBZbI3V+1JmNudg=
Subject key identifier: 61:3A:2D:60:36:D8:8B:0F:4D:43:64:7A:D9:B4:EE:A4:38:37:42:11
Authority key identifier: 03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
Certificate issuer: /CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Certificate serial: 01A106266AECA56B9C43DAB8509E406DD6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
Manifest number: 0D5E
Signing time: Sun 04 Oct 2026 09:02:23 +0000
Manifest this update: Sun 04 Oct 2026 09:02:23 +0000
Manifest next update: Mon 05 Oct 2026 09:02:23 +0000
Files and hashes: 1: A2loTGfKqZ_8AYS-rMrw6oipISk.crl (hash: h3y8+mFP63JAJyedD+a3H6LwYHMKfNf1V9xopZ33998=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:26:6a:ec:a5:6b:9c:43:da:b8:50:9e:40:6d:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Validity
Not Before: Oct 4 09:02:23 2026 GMT
Not After : Oct 5 09:02:23 2026 GMT
Subject: CN=613a2d6036d88b0f4d43647ad9b4eea438374211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:d2:a5:77:34:31:c7:52:32:1e:b2:1f:c1:
90:9d:83:f3:a6:cd:51:80:16:e0:2e:3f:71:e2:a3:
9a:48:c2:56:2a:4a:9a:76:6e:62:e4:1b:dd:ca:0c:
16:0e:08:e5:70:b5:b5:d1:03:74:ff:ad:cb:5f:30:
fb:72:9a:3a:ae:53:ff:5a:0f:be:a3:7b:f6:aa:e4:
3d:85:64:07:af:7e:46:87:a1:d1:69:3f:17:62:47:
2c:96:0b:8a:a3:86:fe:71:01:84:88:2b:61:a1:99:
5b:3f:70:75:df:64:9e:aa:3a:98:37:47:c2:75:cc:
ca:ab:d4:d8:8e:1f:07:8c:6a:6b:bd:d6:56:e2:0f:
6f:f6:44:d5:c2:6d:74:f4:b2:8f:bd:dc:8c:ca:1e:
b4:c5:e2:44:12:4f:d7:0e:6b:05:61:3c:fb:35:51:
b6:62:ba:ec:d3:f9:b8:b7:26:72:93:ba:65:72:4d:
b2:78:17:7e:17:a3:32:ee:e4:eb:0b:23:30:63:d5:
6e:1b:a4:fc:d6:fd:84:09:84:2c:56:60:13:5d:4f:
aa:0a:4a:3f:4a:51:ee:30:97:89:16:8a:11:66:27:
a3:cf:2e:0f:d8:aa:6a:a5:6b:ec:79:fe:8a:8e:48:
85:ba:32:2c:11:05:7b:39:44:40:70:5e:d2:eb:2f:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:2D:60:36:D8:8B:0F:4D:43:64:7A:D9:B4:EE:A4:38:37:42:11
X509v3 Authority Key Identifier:
keyid:03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:30:ed:03:52:0d:c9:9d:ee:85:79:ad:e3:f5:96:0c:75:30:
b4:99:a4:96:37:5b:a9:98:87:ac:1a:1d:7f:52:c5:e9:95:3b:
3d:a5:18:89:58:8a:ab:e5:8c:0e:dd:4a:6c:95:55:c8:e4:b4:
77:7a:3e:34:28:46:c0:85:11:ef:65:81:69:bf:d3:60:6b:82:
13:9d:0d:81:7d:74:d2:9e:e8:dc:3c:19:37:8a:53:20:e1:d8:
b7:74:1b:05:3f:c0:37:8a:c5:25:ba:de:d2:6d:6f:85:10:f4:
89:53:75:7b:e9:e4:b7:9b:da:0d:52:63:d6:7f:37:d6:bf:8a:
18:e8:2b:48:17:b1:3e:5c:f8:f0:9e:d0:67:7a:6b:51:e5:5c:
34:7d:a6:07:c4:03:de:8c:98:7c:e0:ed:93:0b:39:99:e0:00:
77:a8:4a:92:23:e9:3a:84:48:2c:98:80:7e:01:68:8a:13:09:
0a:fb:e4:3a:f8:5b:f8:07:17:c0:1f:d1:5a:4b:00:d8:8c:7b:
a4:56:10:ce:f1:03:40:8d:12:ce:2b:62:35:67:b5:26:30:c6:
d3:ad:7f:e6:ef:ec:9d:e8:15:6e:34:19:9a:d4:ea:60:61:40:
35:ae:f0:36:13:5a:87:e2:ca:db:1f:cb:4b:46:c8:d6:2f:96:
34:86:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:35:52 2026 by rpki-client