Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: Z4h6Ae5PjGhXNKjowp0M9iKppIO9ap3MvQgzZ5FQrXU=
Subject key identifier: 12:6C:93:C3:25:C1:C6:98:AF:66:54:70:05:BC:6D:41:01:B7:B7:06
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019E30A933A7E76942D65D2992D76BD1AC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 12:00:55 +0000
Manifest this update: Sat 16 May 2026 12:00:55 +0000
Manifest next update: Sun 17 May 2026 12:00:55 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: 2kiSfKKKS388OnotrWEFc3hm2Pf1e7Oro3cP0VDGoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:33:a7:e7:69:42:d6:5d:29:92:d7:6b:d1:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: May 16 12:00:55 2026 GMT
Not After : May 17 12:00:55 2026 GMT
Subject: CN=126c93c325c1c698af66547005bc6d4101b7b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:59:f9:d3:0e:eb:c6:f2:c5:d5:3e:4c:bf:
57:d9:8a:84:e7:a0:19:32:83:73:f2:79:ad:7d:72:
55:e9:30:af:e9:4a:64:ad:00:34:9d:97:f6:3b:88:
4e:05:8b:f2:83:35:1d:3a:f9:79:6e:4c:fc:38:2b:
11:f4:15:c6:39:8a:09:51:77:ad:56:c5:3a:77:27:
77:80:ec:96:d3:41:90:f6:39:ff:d7:84:7e:51:de:
70:a1:fb:c0:d2:f7:9a:cc:56:f0:61:98:07:26:c6:
ff:0a:e4:41:79:ea:2f:8b:2b:4e:f3:a1:6d:bc:87:
72:a3:37:ac:70:ae:98:de:88:47:0b:ab:96:17:d2:
e8:b5:38:d4:6c:5c:9a:fc:88:9a:ab:e1:0c:2a:b7:
4b:9b:98:c6:2e:de:49:c2:17:d3:a3:40:30:2d:83:
8f:76:25:9b:46:df:5d:1a:bd:0f:32:9a:13:42:a3:
79:9b:a2:d0:c2:2f:38:ed:e2:18:fa:ab:16:43:ac:
aa:c1:15:3a:0c:fa:9e:f9:fb:d6:7a:60:f0:d3:3b:
04:9d:71:35:cc:4c:d8:bf:6f:a5:dc:04:4b:1b:aa:
0a:04:d3:24:a4:20:10:3f:4c:c0:b7:c6:ec:69:0f:
91:11:1a:26:9c:5a:f0:2a:ca:7a:5a:98:a5:b6:48:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:93:C3:25:C1:C6:98:AF:66:54:70:05:BC:6D:41:01:B7:B7:06
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:0c:54:8f:b5:8c:8d:4c:b8:5e:7f:8e:7b:b3:89:bb:81:
28:ea:74:26:42:61:3f:3b:89:b3:62:21:2f:2d:26:35:fd:56:
5e:a4:49:d7:aa:56:b8:31:29:b1:76:8d:6e:07:a8:7c:97:a5:
a0:81:35:81:44:65:03:60:9a:bb:bf:86:3c:45:6c:ae:f5:95:
16:24:57:b1:14:1b:f2:bc:d9:0b:18:75:40:54:6e:fe:11:6f:
fc:c9:24:5e:a0:a2:59:b0:2a:d0:16:07:f5:ed:f8:1e:13:8d:
ff:7f:36:9d:1c:57:c5:fb:19:f2:89:dc:8a:7a:ab:14:cc:93:
bd:01:03:2e:bd:28:c0:22:f4:2f:57:43:de:1f:41:97:c2:f9:
67:97:bc:57:10:cd:ba:62:8c:87:90:d9:89:43:84:d6:0e:db:
40:a3:80:f9:f7:fd:3f:f9:a5:a6:f3:be:a7:a6:24:f4:4c:79:
59:36:5e:02:a3:1b:05:d9:e6:be:23:c2:25:a1:3e:b5:ee:88:
48:71:fb:72:6b:16:a3:87:19:e8:2c:28:14:9c:2a:18:83:1a:
4b:7e:2d:8e:5a:a1:60:6a:41:3f:79:e8:cf:d5:07:1d:ba:84:
ac:c6:b5:84:03:f5:d4:6a:3b:cd:07:7a:80:8b:88:ac:e2:72:
91:23:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:22 2026 by rpki-client