
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: 1M1nIqxPr5Og2Qeoh7FWQbTA3QI40WdYIrRqn3isVLM=
Subject key identifier: 75:A4:75:6C:26:3E:23:1F:61:2C:94:07:7F:17:DC:72:80:FE:73:54
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019E314DD92EF078B00A09B66E7813CFDCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 08A1
Signing time: Sat 16 May 2026 15:00:45 +0000
Manifest this update: Sat 16 May 2026 15:00:45 +0000
Manifest next update: Sun 17 May 2026 15:00:45 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: Fh965+Ww8WCq5J79+KxaYjievPwNsNkO5neJN6Z/9jU=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:d9:2e:f0:78:b0:0a:09:b6:6e:78:13:cf:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: May 16 15:00:45 2026 GMT
Not After : May 17 15:00:45 2026 GMT
Subject: CN=75a4756c263e231f612c94077f17dc7280fe7354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:5c:b1:06:ec:5f:8a:4c:17:fa:68:d7:02:
f4:83:2b:5c:ed:1f:e7:0e:4d:43:00:f0:0b:fa:d8:
92:cf:83:91:a7:a5:1a:4d:20:ff:a8:10:cc:27:16:
f2:e2:0b:a4:22:4a:cc:39:30:68:15:0f:05:da:4e:
bc:59:81:92:a8:dd:8d:be:c9:02:50:99:61:d4:bd:
0b:f4:37:30:4c:2f:04:d9:7a:43:ed:0d:81:92:97:
40:e9:da:59:78:7a:a3:67:0d:55:c5:c6:d1:4b:37:
b8:44:6d:a6:07:e1:a6:56:fe:6b:31:35:99:34:a2:
6c:b3:74:b0:bf:78:46:cd:a3:d1:9f:d0:7e:13:ec:
19:9a:ff:e1:e2:ea:c6:fa:d2:ff:ac:a5:d3:ac:ee:
a9:33:d2:f4:c7:81:8b:fb:b4:3f:7c:05:00:aa:c9:
e8:ec:00:f2:7c:92:de:57:85:ab:1d:ab:e0:f9:fc:
a5:14:25:35:98:c5:e6:4c:ac:2c:8e:f7:5c:bc:63:
fe:07:99:60:d4:ec:c5:78:67:75:c4:55:72:c3:a7:
73:4a:4a:41:d1:1f:6b:b2:15:e0:df:57:5e:33:15:
d1:aa:7f:71:64:b6:d8:f0:b8:ea:19:ab:42:c5:9a:
6b:e0:aa:2a:c8:db:7c:10:e4:3e:a4:8c:50:8c:f7:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:75:6C:26:3E:23:1F:61:2C:94:07:7F:17:DC:72:80:FE:73:54
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:08:29:f2:c1:b2:30:2a:60:4d:27:3f:4a:1e:55:92:b2:
b0:84:e8:30:a7:d9:01:21:59:c6:dd:67:34:f2:06:60:82:fb:
66:ac:e9:61:84:ea:61:92:70:87:e8:17:ee:c1:be:33:08:56:
77:29:bc:6a:4c:8e:eb:70:e8:33:5a:aa:8d:50:a2:d1:f7:30:
7d:bf:75:1c:68:c6:1a:fd:c7:64:0f:2e:5c:22:ab:54:7b:f2:
66:71:9e:3f:b9:ce:d2:d6:7e:db:d7:42:69:c4:b4:fc:cf:1c:
44:12:05:aa:77:c8:dc:fa:b3:56:44:9e:d0:ce:8e:1a:9d:fe:
30:f1:e4:bc:a3:ae:3b:f0:e5:97:50:8d:be:aa:af:b9:5b:32:
6e:17:1d:f0:47:e8:96:37:84:84:9d:cd:00:0a:c2:ce:9d:d8:
e5:35:05:e7:f0:ea:ec:54:97:c7:86:06:e8:7d:95:40:35:11:
2b:23:f6:46:86:e4:21:11:6e:b0:cb:45:31:67:29:9f:8d:f6:
a9:6b:60:ff:0e:bf:81:51:99:b6:37:c0:80:0b:4b:08:99:f9:
10:13:98:64:15:81:87:3c:36:89:92:d7:eb:25:66:fe:07:c4:
aa:85:47:28:6c:c5:e2:c0:ed:2f:75:17:9a:55:e5:71:cb:96:
c0:0d:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:13 2026 by rpki-client