Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: 4NTrpRATb17B0bnQN3G2hA7r3ctQtiGoMPFzWW3YnVg=
Subject key identifier: ED:F3:1F:8D:0D:DD:58:45:62:6E:C3:42:A8:A7:48:66:E0:BF:B6:41
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019F190C580C392E05CC260746FFE0616111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0DD7
Signing time: Tue 30 Jun 2026 15:01:07 +0000
Manifest this update: Tue 30 Jun 2026 15:01:07 +0000
Manifest next update: Wed 01 Jul 2026 15:01:07 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: C7jhw1ULdYtEEUqD3S0WLHyd6oZXJreXkW1t6dESE4g=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:58:0c:39:2e:05:cc:26:07:46:ff:e0:61:61:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Jun 30 15:01:07 2026 GMT
Not After : Jul 1 15:01:07 2026 GMT
Subject: CN=edf31f8d0ddd5845626ec342a8a74866e0bfb641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:aa:9c:2d:b0:c3:c0:ee:cc:ad:b8:0b:83:
ac:9f:a6:d1:8e:a3:e5:7f:65:3b:f5:aa:8c:70:e5:
5f:c6:26:5f:6f:9f:da:90:08:14:4c:f3:f0:cd:86:
77:74:3d:ab:92:9b:8c:61:a7:6c:36:89:6b:79:26:
43:cc:de:68:71:f7:a9:d0:79:82:c9:cf:69:fb:09:
8d:fa:c9:9e:07:26:fe:5c:94:d7:cb:7c:53:a5:29:
6e:b4:7b:9f:6d:b4:b6:35:3f:5d:49:1b:fc:16:11:
72:87:d0:12:f9:e8:77:ae:eb:3c:55:44:ca:6e:6f:
07:0e:2c:f9:51:a8:56:94:2e:4b:c2:ed:80:4c:f2:
17:e2:42:8a:a2:a5:a0:7e:87:4a:c6:a8:7e:c0:ed:
c6:74:16:9f:d4:4d:61:bf:50:61:b5:f7:15:da:23:
5d:02:67:8b:97:39:c2:e5:89:c2:e0:7c:11:bc:bb:
62:0a:07:37:08:cf:de:5c:7b:4f:08:16:58:e7:87:
3f:5c:b7:b5:49:d7:66:5a:e3:4a:b9:cd:ce:c7:5e:
f4:3b:b6:d9:ea:e2:ea:6f:5e:15:d9:22:58:14:e6:
68:f2:c8:71:de:10:66:f1:0a:a5:6b:20:84:8d:ef:
c5:27:22:90:9f:ef:0d:0b:0e:36:e3:97:58:14:29:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:1F:8D:0D:DD:58:45:62:6E:C3:42:A8:A7:48:66:E0:BF:B6:41
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:dc:23:c5:20:0a:ce:7a:d1:df:39:46:c2:dd:bf:93:ec:
49:ea:b9:d1:ad:e0:f3:a2:7f:c1:09:df:7a:92:01:93:07:24:
55:d1:70:7c:5f:e1:db:20:0d:ae:4a:21:cc:e8:60:76:25:8a:
28:de:18:13:ad:29:78:80:c6:db:c9:77:59:4c:0f:e1:4b:bd:
fd:f4:21:29:bd:b0:1a:a7:4a:9b:f3:cb:87:8e:97:dc:e3:ab:
80:b8:d8:4d:b5:31:13:37:4d:8c:51:d3:0f:84:5b:36:b5:48:
87:10:6e:ec:d4:d6:93:ad:59:c8:83:da:77:e6:37:76:0f:ca:
36:36:47:88:b3:b6:06:7d:61:e4:72:6d:c2:a1:44:c1:77:92:
d2:8c:88:b1:16:b1:f1:b3:8d:e3:43:ee:c9:03:bf:a1:ee:4a:
6c:37:d5:ac:df:38:f4:4b:a8:04:12:92:b3:9f:bf:c1:45:fe:
34:20:e8:12:f9:15:f7:84:fc:df:30:bc:af:da:92:b3:7d:f4:
ea:cf:2c:96:f1:0b:e1:f1:fd:85:d3:1c:ad:8b:0a:e5:54:c4:
e2:8a:cc:f0:7d:55:ff:ce:bf:53:0b:2c:be:09:4c:10:4f:23:
ad:82:af:6e:4d:b3:ac:ca:66:23:31:c7:fb:2a:f3:b3:dd:03:
5c:cb:91:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDFgMOS4FzCYHRv/gYWERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5
YWY1OWYwHhcNMjYwNjMwMTUwMTA3WhcNMjYwNzAxMTUwMTA3WjAzMTEwLwYDVQQD
EyhlZGYzMWY4ZDBkZGQ1ODQ1NjI2ZWMzNDJhOGE3NDg2NmUwYmZiNjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW+qnC2ww8DuzK24C4Osn6bRjqPl
f2U79aqMcOVfxiZfb5/akAgUTPPwzYZ3dD2rkpuMYadsNolreSZDzN5ocfep0HmC
yc9p+wmN+smeByb+XJTXy3xTpSlutHufbbS2NT9dSRv8FhFyh9AS+eh3rus8VUTK
bm8HDiz5UahWlC5Lwu2ATPIX4kKKoqWgfodKxqh+wO3GdBaf1E1hv1BhtfcV2iNd
AmeLlznC5YnC4HwRvLtiCgc3CM/eXHtPCBZY54c/XLe1SddmWuNKuc3Ox170O7bZ
6uLqb14V2SJYFOZo8shx3hBm8QqlayCEje/FJyKQn+8NCw4245dYFClnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3zH40N3VhFYm7DQqinSGbgv7ZBMB8GA1UdIwQY
MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt
ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw
LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEfcI8Ug
Cs560d85RsLdv5PsSeq50a3g86J/wQnfepIBkwckVdFwfF/h2yANrkohzOhgdiWK
KN4YE60peIDG28l3WUwP4Uu9/fQhKb2wGqdKm/PLh46X3OOrgLjYTbUxEzdNjFHT
D4RbNrVIhxBu7NTWk61ZyIPad+Y3dg/KNjZHiLO2Bn1h5HJtwqFEwXeS0oyIsRax
8bON40PuyQO/oe5KbDfVrN849EuoBBKSs5+/wUX+NCDoEvkV94T83zC8r9qSs330
6s8slvEL4fH9hdMcrYsK5VTE4orM8H1V/86/UwssvglMEE8jrYKvbk2zrMpmIzHH
+yrzs90DXMuRvg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:46 2026 by rpki-client