Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: xiuqoW+NRWQbTQEuF4J5xhYjB1yukFvft3HzhFuZca8=
Subject key identifier: 7D:28:6C:2A:C5:01:5B:9A:F6:CB:09:EF:AC:13:3C:8F:9E:58:A1:1F
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019D3789508F52330B816DB31B46B561BB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: VvDuugNBpenMwUECgq8kZEiLZ3Ngf7dP+ZGR+yXcxcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:50:8f:52:33:0b:81:6d:b3:1b:46:b5:61:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=7d286c2ac5015b9af6cb09efac133c8f9e58a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:bd:d7:6c:39:cd:87:1f:a0:3e:bb:3c:fb:
7c:06:a0:4b:25:70:e1:3d:7c:d2:0d:f8:ab:76:8f:
11:c2:b7:0d:34:d2:79:0e:0c:fb:8e:3e:e1:ac:24:
f1:60:e7:0d:72:f3:8b:68:c4:44:b6:5c:05:9e:eb:
ee:4d:af:3f:23:3a:ea:b4:05:6d:a4:f1:1a:8c:5d:
d9:70:5e:43:09:4f:d4:9d:5e:4b:eb:62:8b:6a:a5:
9f:aa:47:cd:24:9a:57:3a:cb:be:25:2f:f9:43:37:
eb:00:35:36:3a:a8:87:ab:bd:17:c1:c0:26:f0:a4:
a7:99:62:da:77:cb:9f:01:c1:b3:4c:63:a6:16:54:
f4:50:84:4e:8c:df:df:9d:73:cd:53:72:ef:15:d8:
ac:56:bc:95:ac:54:82:33:4b:60:94:07:d1:18:61:
0a:03:b9:f1:4f:6c:65:24:6e:ea:4c:27:79:9f:88:
32:51:ce:9e:1e:41:22:a8:80:6f:ca:9e:47:47:02:
25:dc:38:78:b5:62:3c:52:4a:6f:c6:e5:85:9b:33:
a1:fe:d2:54:8a:79:d1:65:f5:28:ae:d8:48:68:85:
ed:88:17:9b:b0:69:8e:08:55:24:24:33:34:c5:22:
4c:79:7e:6e:7b:3d:12:86:d2:61:21:08:96:fb:27:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:6C:2A:C5:01:5B:9A:F6:CB:09:EF:AC:13:3C:8F:9E:58:A1:1F
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bf:5d:c2:a4:ab:21:5f:16:0f:99:7f:18:92:7a:2e:d2:38:
6e:47:b3:d1:dc:3d:59:8b:94:a1:30:70:63:cd:ac:d7:ee:58:
30:51:be:3c:f0:d3:c1:a7:90:03:d3:3b:7f:33:a9:39:c6:8d:
a1:35:f5:a8:15:af:40:49:32:31:a9:20:16:2c:0a:04:fe:db:
a3:5e:05:78:59:36:67:39:ca:8b:04:97:44:b8:4e:b3:5a:3d:
6a:e6:ed:ec:46:44:e2:9f:65:3e:91:f7:e8:4a:9b:e2:cd:11:
4d:39:06:01:9e:22:37:ef:ad:e2:a0:f9:3a:7c:db:b8:e0:3c:
f6:41:24:a5:83:36:e7:ff:07:09:e4:eb:5e:64:6c:ee:56:90:
7d:98:e4:48:04:af:38:5a:2d:09:47:9b:fe:fb:2f:27:a8:00:
ce:09:63:6a:81:18:44:ea:d5:d0:9a:7f:dc:11:82:31:36:62:
a2:7e:29:ba:a4:b7:03:95:9b:50:08:8a:51:1c:c5:b1:ce:ca:
6c:7b:4f:b2:c8:6e:59:40:5b:b5:8d:9a:21:64:54:88:7c:3d:
ae:ee:8c:1c:ed:3a:1e:77:e4:08:b4:6a:49:60:71:d9:62:e5:
1e:5f:df:b0:d6:1c:b5:62:17:e4:05:17:74:e6:ba:17:a9:cc:
43:78:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client