Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: WYvrj5+UQx9zqWLYx++Mm3KjdEQgGLMiRPGF+la4oWY=
Subject key identifier: FA:11:AE:7A:63:49:D0:1A:FD:5E:A0:DA:A1:77:27:7D:88:DB:20:AC
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 01A000CA88D1B1156F5CD071DC69CBC9EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0991
Signing time: Fri 14 Aug 2026 15:01:08 +0000
Manifest this update: Fri 14 Aug 2026 15:01:08 +0000
Manifest next update: Sat 15 Aug 2026 15:01:08 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: X8aj1ceZZtjrfFLfaCuGpKyhrUb9u+cY2h8lqm5yoWw=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:88:d1:b1:15:6f:5c:d0:71:dc:69:cb:c9:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Aug 14 15:01:08 2026 GMT
Not After : Aug 15 15:01:08 2026 GMT
Subject: CN=fa11ae7a6349d01afd5ea0daa177277d88db20ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:df:9d:fb:be:3b:d1:23:8d:1f:d3:85:b5:
2a:8b:f1:db:c9:94:db:5e:b3:cc:13:43:f6:10:32:
d8:65:c0:18:fa:0b:96:83:c1:91:e2:42:9d:37:a3:
63:6a:f5:e8:34:71:54:e0:64:32:4e:c2:64:f0:e3:
13:ce:3b:51:01:a7:cf:a3:27:64:a6:3d:05:6c:1f:
cb:77:85:34:f0:f7:e1:3e:0c:ca:70:4f:90:29:6d:
12:ef:24:ff:87:5d:c6:d9:e5:38:89:b6:c6:1b:94:
e5:42:aa:6f:7f:5c:ca:bb:ca:f3:5a:73:7c:93:56:
73:ea:3a:53:54:b2:c2:9c:d9:97:8b:57:ae:b1:5b:
68:2f:d6:a5:91:cd:99:e9:6a:06:6b:36:1a:20:7b:
de:6f:54:0b:37:38:ba:0f:03:b1:f3:1e:4d:2b:2e:
8a:88:ae:04:44:cf:b8:93:6f:24:ef:ae:15:f5:33:
84:18:b0:73:c5:26:73:14:ce:b5:16:b8:32:2d:d2:
1e:88:65:30:60:f5:e2:a5:d1:db:e9:48:c8:eb:d3:
81:63:f6:4a:21:00:11:86:7f:7f:ad:d5:f9:72:ca:
e9:8d:f1:dd:0b:f5:7d:a2:10:e6:12:2d:4a:0b:c0:
ea:00:e7:f9:54:5f:24:4a:6e:d4:96:94:ca:ab:ce:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:AE:7A:63:49:D0:1A:FD:5E:A0:DA:A1:77:27:7D:88:DB:20:AC
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:3f:f5:7e:d9:c8:40:7f:52:1b:90:2d:fc:4f:8b:33:f4:
ac:7a:c7:66:0c:90:3b:de:af:22:4c:d5:43:0d:b9:70:06:61:
4e:47:f5:c9:7a:e5:54:0a:a1:52:47:cf:1e:af:c8:2e:fc:8a:
36:59:b7:96:75:ad:85:88:f3:d8:fb:8c:b9:1a:16:16:c3:52:
f9:8b:d6:4a:31:c3:f6:eb:4b:86:f0:40:fc:cf:48:6b:6f:64:
ec:08:2a:3e:d2:3c:b8:c9:8e:23:b7:dc:c1:b8:9f:53:ef:67:
42:d4:26:d4:04:6d:a0:00:9f:57:b1:bb:0c:2d:36:3c:76:c8:
8b:0e:bd:7b:9b:cc:30:ab:a3:23:a7:a3:98:b5:52:7c:01:c4:
60:90:11:57:61:0d:a5:5a:f5:57:a2:70:60:8f:ca:7d:5f:65:
e3:30:01:88:09:41:32:6b:f6:b1:15:bd:c5:ed:29:5d:71:35:
98:d3:38:c3:7d:d1:ce:f6:26:66:39:08:9b:cf:36:3c:f3:8a:
38:0e:d2:d5:33:6b:48:a8:46:21:b7:3b:38:c0:a4:77:5d:f5:
41:c0:74:af:09:e2:4b:20:68:50:6f:55:3c:d6:5b:c4:1a:07:
6b:1c:9b:37:4a:28:d4:87:3e:6e:c9:e3:32:22:27:a3:74:40:
34:1c:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:30 2026 by rpki-client