Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: +SYBXV3AVbaVAcxxgbdNnaAFUM9M3oNVRzNRcxre2wA=
Subject key identifier: A3:4B:CE:2D:65:A6:BC:A4:CB:63:64:AF:B5:F0:C4:DE:CF:0E:A5:BB
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 01A13F70258E24B464FEE096F74C31C2428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0EF4
Signing time: Thu 15 Oct 2026 12:01:16 +0000
Manifest this update: Thu 15 Oct 2026 12:01:16 +0000
Manifest next update: Fri 16 Oct 2026 12:01:16 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: yO31NtKKNJCRTg/FvJSaQ4BxW/nf+sUEWc1vHSlVRFU=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:25:8e:24:b4:64:fe:e0:96:f7:4c:31:c2:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Oct 15 12:01:16 2026 GMT
Not After : Oct 16 12:01:16 2026 GMT
Subject: CN=a34bce2d65a6bca4cb6364afb5f0c4decf0ea5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:8e:70:54:df:2b:2f:8a:9b:ad:fb:8e:23:
25:45:fa:66:64:ec:2e:7c:35:a6:e7:4c:a8:92:c3:
ca:2f:0c:b1:2b:80:0c:60:e9:d8:c2:1e:e6:42:de:
a1:b0:eb:51:76:1c:00:f2:d9:a5:5c:84:e4:a7:bf:
a2:01:c3:dc:1f:64:26:9c:87:8d:1c:af:cc:4f:17:
0f:6f:f8:a9:c9:e1:a1:cb:a5:50:da:ea:7c:03:dd:
b1:aa:ef:98:01:95:b9:1a:df:91:be:3a:3d:8b:57:
59:8a:c5:7a:32:bb:e3:ec:0a:8d:76:1a:54:d3:63:
a0:a8:71:84:5c:54:a7:88:df:08:4d:95:f4:e6:2d:
1e:7e:e5:93:ff:d5:7d:70:12:f1:ba:ea:71:b7:d0:
6c:f1:94:7c:51:05:9b:09:c1:d6:1e:a9:7a:5a:51:
f2:8c:5e:08:46:7a:24:d6:70:8f:cf:ae:77:f9:16:
4e:be:9b:1f:4f:a3:d1:25:a1:49:6f:0f:ab:b8:de:
8d:55:01:59:f7:84:06:ef:95:20:6c:c9:2f:28:ae:
74:1d:01:a0:d5:2c:dc:16:63:e7:ec:35:9d:c3:b2:
87:66:e5:a7:3c:6b:e5:a8:e9:84:5f:68:50:d2:e6:
13:87:f1:dc:d2:34:2d:ed:a2:62:24:34:a3:35:b0:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:CE:2D:65:A6:BC:A4:CB:63:64:AF:B5:F0:C4:DE:CF:0E:A5:BB
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f2:44:bb:07:0a:cc:bd:ce:c0:22:25:e4:55:84:d4:11:83:
49:5f:d6:6c:13:73:ed:f1:ef:ab:43:fe:fd:83:a0:2e:e5:c5:
b9:a9:fd:f9:14:54:a4:58:8c:d0:65:28:2a:01:20:63:44:08:
f7:dc:76:93:2f:9a:c0:66:de:b6:f2:f6:1e:f7:ba:60:9c:f6:
7c:41:12:34:b2:f6:7c:69:52:8d:57:00:76:8f:1c:1e:54:a1:
91:93:a1:9c:a8:84:50:81:3d:a0:1b:50:a9:ac:e2:fb:9a:d7:
cd:19:62:8e:44:f3:c4:7c:58:14:4c:14:ab:0e:0e:9e:35:81:
52:fd:02:99:b4:1c:31:91:36:85:53:14:fc:d9:13:a4:8a:14:
91:cf:61:72:e9:12:d8:89:e5:c6:e2:b6:31:ff:b1:4f:9b:31:
42:8b:0d:24:fa:53:c1:90:41:8c:17:63:63:ba:d1:6b:4e:20:
70:e4:7d:15:03:c0:b7:43:38:e1:f0:fc:0f:7c:5e:8a:14:0f:
2d:2f:70:82:fb:6d:6f:90:76:d4:85:06:15:e4:18:9c:02:56:
51:1e:f4:bf:b6:2c:ec:8b:6e:f1:1c:d2:4f:87:71:d1:06:84:
9b:39:00:e8:c4:b9:1d:e6:3f:eb:2e:63:f9:4b:31:b1:38:ce:
46:ad:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:57 2026 by rpki-client