Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: ftSGdeOODbcDWTtgxiLvP2zqYzWab1YvCbzjz17RIts=
Subject key identifier: A3:E4:19:F3:06:6E:A1:76:13:FB:79:D1:5B:C8:4D:B2:CD:72:45:6F
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 01A13D80FF4AEDFE43DD1A964E6ACD06202D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0A35
Signing time: Thu 15 Oct 2026 03:00:26 +0000
Manifest this update: Thu 15 Oct 2026 03:00:26 +0000
Manifest next update: Fri 16 Oct 2026 03:00:26 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: +IRgrPQXU6OzQhvY8rP7BS+Oi/0YKxIXf5bF4gY6wOs=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ff:4a:ed:fe:43:dd:1a:96:4e:6a:cd:06:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Oct 15 03:00:26 2026 GMT
Not After : Oct 16 03:00:26 2026 GMT
Subject: CN=a3e419f3066ea17613fb79d15bc84db2cd72456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:22:19:f8:99:c2:b2:b3:47:68:17:05:81:
ba:b5:a8:c8:eb:76:aa:42:54:e4:32:05:4c:16:31:
31:99:17:ae:a7:bb:95:c3:44:0d:db:6b:e2:e8:ab:
2e:5e:ef:87:24:46:d5:9a:96:52:fa:f2:c1:51:c9:
5c:9e:23:c4:a3:ca:d1:7e:34:06:1e:bb:df:e2:d8:
c8:02:46:de:3e:30:93:7b:06:a2:b0:f4:55:74:34:
c3:d1:2c:94:a0:a6:59:ce:cc:23:47:7b:c5:22:28:
e2:a3:ea:fc:46:d5:58:b5:69:59:46:b1:06:8a:21:
57:d7:f4:2f:a7:15:2b:ec:4f:13:83:22:5c:a4:e1:
41:6a:1d:da:df:71:de:53:1d:1e:f7:25:f6:31:f2:
7a:93:96:6f:fd:83:82:63:ad:37:04:21:23:c5:f9:
05:dd:22:b6:1d:41:e0:d7:d8:d8:be:a5:d5:ea:40:
d0:08:57:41:eb:b5:ba:77:d6:14:b2:4d:cf:d0:47:
0f:ad:9b:82:0c:a3:5b:1f:50:6e:73:6a:b2:65:21:
ed:18:b5:23:a3:3e:a9:f6:60:90:0d:9e:70:7b:5e:
53:85:f2:bf:07:ac:06:6c:af:f1:f4:95:35:9c:38:
e8:c8:af:59:94:54:1a:87:44:ec:f1:63:b7:92:6e:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E4:19:F3:06:6E:A1:76:13:FB:79:D1:5B:C8:4D:B2:CD:72:45:6F
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ec:f6:d3:6b:b3:96:d2:78:b3:83:d8:b4:89:2e:d9:cc:55:
5e:25:f7:ce:3f:53:a4:76:09:9f:94:69:69:bc:a4:49:ee:e3:
3f:db:b0:0f:2d:de:de:0e:4b:66:4e:9a:a1:6d:c9:38:ce:7b:
83:d4:72:24:e7:dc:f3:2c:e7:7b:20:f3:b3:3f:7b:c0:23:50:
5f:1e:34:da:dc:ad:62:fb:18:96:5c:ca:a1:83:d5:ef:b0:3a:
b4:36:aa:3d:66:a6:34:47:1d:95:66:a0:8f:7b:6c:ce:65:da:
e7:45:95:21:2d:dc:24:3e:d2:6d:e2:25:1b:f1:de:b8:37:fd:
c0:8a:11:4a:f5:da:18:09:96:9f:ce:bb:2c:2c:be:ff:b8:49:
f0:30:ea:db:4e:75:07:b7:00:5d:f8:ad:27:5f:31:6d:e3:86:
88:27:82:12:bf:0e:59:82:0d:59:26:5e:ed:16:c1:58:a5:b8:
2a:2d:c4:f3:08:a3:03:4c:bb:0d:1b:be:56:a1:a7:82:62:1a:
47:b7:2d:1e:72:d0:5a:2b:87:8b:52:77:14:a1:ce:2b:28:d5:
ce:16:20:b1:66:e6:3d:80:0e:d2:af:01:4c:86:35:1b:81:11:
46:c1:46:9d:ed:69:c8:74:3d:a7:d1:2c:b8:83:8c:79:0b:d8:
11:eb:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:07 2026 by rpki-client