
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: ZErkXISCGc3xJ+KPwkWLcdSnqqgHrT8mmIsZFG65rpI=
Subject key identifier: F2:D3:BB:8F:91:A4:39:8D:7E:66:A3:A5:E0:2A:1D:FE:84:3C:70:20
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019F859F636DA38BE08CB9E1258B07E5118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 19BF
Signing time: Tue 21 Jul 2026 17:00:42 +0000
Manifest this update: Tue 21 Jul 2026 17:00:42 +0000
Manifest next update: Wed 22 Jul 2026 17:00:42 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: TQV7VlQitH5eMA0IyH3VUabumTzAFx022eLsGem5ffg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:63:6d:a3:8b:e0:8c:b9:e1:25:8b:07:e5:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Jul 21 17:00:42 2026 GMT
Not After : Jul 22 17:00:42 2026 GMT
Subject: CN=f2d3bb8f91a4398d7e66a3a5e02a1dfe843c7020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:5c:ec:d5:5c:3c:5e:d7:75:3d:0e:2c:e8:
d5:99:98:5e:4b:05:72:6b:d5:d7:e6:42:b8:53:93:
0b:ef:fb:3b:84:56:40:c0:f6:6f:51:ec:f2:8c:e4:
a2:99:1a:7d:5a:15:ca:3e:e1:72:5e:8a:5c:47:b4:
25:4f:3c:57:4f:8d:90:ed:ad:14:fd:3a:ca:6d:a6:
65:59:2b:73:0e:11:46:a7:04:99:db:e0:fc:ac:6c:
44:f4:f7:55:f2:0e:6b:cf:2b:f5:7d:4b:67:30:8c:
10:57:72:59:9d:33:30:50:5c:e5:15:58:e0:f0:39:
8f:c5:6c:24:50:fc:90:10:42:53:e0:eb:fa:1c:94:
91:cc:d1:85:3e:58:48:35:80:e7:5e:a4:3a:27:e4:
4a:b9:2c:5b:e6:56:8f:de:fa:b7:23:29:1a:5d:5f:
3f:a8:93:fb:f7:d0:f4:4e:e3:1a:ff:e5:7c:5d:37:
1d:26:e1:1b:86:08:a0:dc:05:13:53:06:ed:17:6c:
a9:53:3d:6e:45:ee:a7:60:2d:87:17:b2:9a:0a:66:
e2:36:28:2f:78:14:0e:c2:8d:cc:07:27:ff:3f:99:
03:48:76:00:b4:94:41:cc:21:5a:24:ab:59:58:ec:
72:0b:e0:d4:42:f2:c7:fa:1c:d7:33:97:00:23:f7:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D3:BB:8F:91:A4:39:8D:7E:66:A3:A5:E0:2A:1D:FE:84:3C:70:20
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:38:54:39:64:38:dd:0c:b3:3f:58:d2:6e:9d:46:d4:ff:
77:f7:57:1d:f1:01:0d:61:9e:b5:93:62:0c:e6:a1:61:87:84:
5b:20:df:b6:51:ce:1c:da:f8:56:38:60:c2:3c:03:f8:6e:16:
f8:92:37:9a:e4:98:55:0c:59:c4:74:aa:1a:fd:a3:65:a4:c0:
6e:46:40:95:9c:b7:57:78:6b:e1:6f:f0:1e:fc:45:c4:f9:bf:
96:47:bf:5a:7f:fb:cf:bd:60:d2:b7:59:42:6d:23:ac:9e:3b:
d5:bf:d1:a0:f9:ed:b6:58:05:3a:f6:04:8e:0e:92:3d:b1:6d:
a2:59:db:3f:24:80:e1:44:ae:dc:45:ee:ac:74:8f:9c:10:8d:
f9:98:8c:8d:ff:fe:68:09:8d:47:68:fa:7b:69:77:8f:5c:3c:
43:ee:34:e7:1b:33:e3:a8:a8:ee:f8:e0:26:62:04:93:b0:5b:
d9:9c:63:d1:f2:85:83:3a:a8:04:f5:49:4d:fa:53:17:58:e2:
09:ba:51:89:57:dc:8d:7c:c9:85:79:7d:a6:f6:41:fd:9c:72:
a3:8d:6a:b9:5f:a8:27:f2:6a:b4:e6:1d:59:76:46:3a:54:3e:
5d:24:ba:2b:10:8f:74:64:e3:e8:de:04:94:00:a6:7c:9d:42:
3c:e2:b7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:21:14 2026 by rpki-client