Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
File: A4iUPq0vSKfV6b9ugz-b7afx-kY.mft (raw, json)
Hash identifier: UXRPy5rzKAZVpUPLdquMAFhnQ+khUxsdwLubEYy1rR4=
Subject key identifier: 5A:EA:C4:95:9A:0E:9B:62:18:06:12:74:F4:B2:45:34:C5:A2:63:E7
Authority key identifier: 03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
Certificate issuer: /CN=0388943ead2f48a7d5e9bf6e833f9beda7f1fa46
Certificate serial: 01A0D4CAED8D18763A98E55BA27A09FE91B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
Manifest number: 40
Signing time: Thu 24 Sep 2026 19:01:03 +0000
Manifest this update: Thu 24 Sep 2026 19:01:03 +0000
Manifest next update: Fri 25 Sep 2026 19:01:03 +0000
Files and hashes: 1: 9JrbCnd-NsOcw-TKlM21Fl6_fs4.roa (hash: b5Pzp39mEM5uAhhGEfJ5t7YZHdwAVfSLz6od7nWDOa4=)
2: A4iUPq0vSKfV6b9ugz-b7afx-kY.crl (hash: QBjIt+1wxE3NlM2hP+hBgp3U+LONofWCOmDC8RGgGx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:ca:ed:8d:18:76:3a:98:e5:5b:a2:7a:09:fe:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388943ead2f48a7d5e9bf6e833f9beda7f1fa46
Validity
Not Before: Sep 24 19:01:03 2026 GMT
Not After : Sep 25 19:01:03 2026 GMT
Subject: CN=5aeac4959a0e9b6218061274f4b24534c5a263e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:d1:a5:65:e0:fa:d1:62:70:14:18:02:28:
51:6e:b1:55:c3:35:d6:4c:22:4a:f4:e5:27:d9:44:
03:e4:ae:6b:82:ca:fa:cf:c7:37:28:da:52:c9:b7:
4d:ef:43:6a:8a:c1:01:16:2b:68:3c:50:92:a4:f4:
2a:e9:d7:26:0f:d3:4d:45:80:69:d6:32:bc:ab:9d:
e4:20:f5:42:97:1e:ef:fe:f6:b1:30:32:f8:46:6b:
84:45:15:ad:ee:b3:e5:0c:b5:ad:67:bd:11:02:b4:
02:c4:53:a0:a3:64:23:f8:d8:ab:03:5d:c8:d6:53:
87:3d:a4:76:2d:fa:8f:60:68:5b:77:45:71:27:38:
f4:b5:9d:92:e9:47:fb:47:b5:e2:2b:c3:69:a6:9a:
c3:29:8e:ed:5c:bd:a9:7a:dd:dd:4f:60:ba:d2:42:
d4:30:c3:86:38:c7:12:4d:3a:e1:31:55:05:43:20:
96:93:d0:5c:12:d3:af:e0:28:24:21:d8:85:50:83:
8c:ef:32:01:7d:95:63:77:b1:a5:16:20:95:03:71:
d0:1b:2d:c6:81:bc:89:9f:7f:b7:75:0c:05:44:8e:
3d:d2:41:ae:12:aa:74:91:f0:4d:d4:5e:ea:d0:df:
49:ad:83:26:ea:06:c6:47:ba:92:7b:9f:fa:34:24:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:C4:95:9A:0E:9B:62:18:06:12:74:F4:B2:45:34:C5:A2:63:E7
X509v3 Authority Key Identifier:
keyid:03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d3:c2:12:0d:71:6e:61:10:eb:06:8e:d6:46:a6:4a:b0:01:
8d:a3:46:4a:60:59:53:c1:1e:04:3b:54:a4:c2:15:b0:4b:1b:
53:b6:9f:a2:20:c4:24:3b:47:fe:69:75:21:11:ac:45:85:25:
0c:cc:ba:ac:2e:4d:d9:ee:30:8f:7d:10:ed:20:58:bc:8d:23:
31:f5:03:c3:a0:7a:36:c3:f6:c1:20:b0:03:4c:d2:68:0f:cd:
c4:ed:89:b4:93:51:23:f3:e6:2d:ad:0c:ec:85:13:67:7d:b6:
5d:4c:4c:6c:ed:2e:de:28:c9:7e:b3:2d:3b:98:7b:96:fc:a9:
c7:d0:7c:cc:1f:96:07:0d:22:fe:82:ca:09:ae:83:3f:97:17:
22:90:23:79:93:4c:d3:34:62:de:f7:9a:fa:1e:78:1d:00:ca:
f4:69:68:db:bb:f0:5d:6d:f5:bf:68:5e:89:69:2e:04:38:6b:
28:22:c7:8e:62:02:07:f1:ff:27:9f:da:55:c5:65:f1:5b:46:
4d:4e:36:e0:db:67:e1:c2:d6:a8:5c:79:25:7b:16:2d:e6:78:
97:a8:cc:7f:5e:c9:ea:20:19:a9:22:a4:19:48:11:94:06:ad:
e2:c3:42:da:05:96:fd:44:39:c5:a1:f0:be:c0:cf:93:71:b4:
92:60:c7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:36 2026 by rpki-client