Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: W55z7L9gOF3RbQX/h5z03U0lBNrgcv2NUjzGd2Ih6rA=
Subject key identifier: 34:8A:23:21:30:04:5C:1E:79:96:3D:2B:C6:C2:83:03:D5:A8:FE:56
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01A002140E758E5C1D1668E0D8AC7256D5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:01:03 +0000
Manifest this update: Fri 14 Aug 2026 21:01:03 +0000
Manifest next update: Sat 15 Aug 2026 21:01:03 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: i+hNwcuY3PuAYAWfXEeNd8dNs7wlyj6GDacqvXEKZtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:0e:75:8e:5c:1d:16:68:e0:d8:ac:72:56:d5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Aug 14 21:01:03 2026 GMT
Not After : Aug 15 21:01:03 2026 GMT
Subject: CN=348a232130045c1e79963d2bc6c28303d5a8fe56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:c8:27:63:99:ce:b9:ff:31:0d:9d:16:39:
21:32:a0:68:82:c5:d9:76:28:cc:66:29:34:4d:1d:
8a:01:a7:a5:0f:8e:13:7a:aa:30:57:62:0b:e1:4b:
31:c7:8e:59:ad:d6:ee:5e:a9:fb:d4:d0:f2:c9:c4:
ed:0e:77:ce:f5:70:c7:73:c7:28:09:e3:22:5d:29:
8d:98:cc:ba:e2:90:4c:5e:79:41:10:05:aa:f2:dd:
1a:ed:27:60:d4:f0:c3:23:85:98:25:cf:09:7b:a2:
64:0e:89:82:93:91:89:a3:c0:93:27:4d:ed:47:3b:
36:42:61:d8:12:b7:69:92:4b:c2:e6:9a:f5:54:fd:
56:78:8a:1d:0b:a6:35:94:c8:93:95:9d:ff:e7:9f:
d7:0d:f3:cb:08:1d:33:7d:54:17:af:08:9f:cf:d4:
bb:0c:db:3f:c2:ab:25:c3:4e:af:41:bf:6c:c1:fd:
10:2f:73:c8:57:bf:8f:16:4c:49:ac:3a:93:6c:c5:
ca:c4:4c:37:af:9d:b6:ca:9f:84:7f:d0:3c:4c:26:
e2:ec:fe:73:20:84:41:58:22:9f:75:65:1e:90:f0:
4f:74:91:95:93:4d:97:8a:e8:46:5c:68:49:8b:e8:
08:5f:12:3f:93:fe:35:23:8d:66:d8:50:70:a2:cd:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:23:21:30:04:5C:1E:79:96:3D:2B:C6:C2:83:03:D5:A8:FE:56
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:71:48:ab:fb:22:3d:41:a7:01:7a:47:58:f6:da:28:b0:6a:
9f:2f:e4:12:17:35:e8:0f:15:0f:4a:40:8a:2d:c4:fc:0b:a8:
88:4b:1f:cd:07:ff:49:f6:9e:68:69:0f:31:90:00:9b:d3:61:
ae:f8:75:9a:26:e8:3e:cb:ec:3c:3d:6c:7f:bb:99:03:24:a5:
3c:30:c1:12:ac:0e:a3:86:29:3d:de:ba:2d:3f:8b:26:24:45:
c8:fb:1f:e2:21:45:ca:95:19:eb:c8:26:80:1a:40:b6:4d:ad:
c4:73:52:7e:16:05:d4:c9:7d:3d:c7:a8:e8:d3:04:c5:ae:97:
7a:d5:5f:99:bc:b9:6f:b3:02:97:55:eb:15:4c:b9:77:d0:d6:
a6:a6:20:b2:18:07:32:5c:81:79:b3:c3:f9:98:8a:44:41:33:
f6:9f:e7:93:e2:85:8b:ee:7a:3a:d6:c1:d5:12:ac:02:ed:5a:
da:a9:bb:b8:f3:92:2e:81:19:23:00:b0:a6:af:53:32:84:8c:
68:25:f8:dc:84:e2:8e:46:81:4e:2f:45:af:ec:bc:f5:fb:65:
60:b8:63:48:83:7a:5b:0d:a3:5c:44:0d:3e:1e:ac:bf:ce:b3:
26:c8:31:f0:12:76:4a:77:92:9f:cb:3b:9d:f7:38:b7:bd:c0:
a4:2b:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:20 2026 by rpki-client