Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: mMpabxmg+L+Lrj17BZdpB8gRRmjZqYGrpy0+tFa9gGo=
Subject key identifier: FA:6E:9B:08:78:BE:C1:72:23:20:52:22:C1:48:B4:61:B8:2C:82:43
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019D382E2A224A46AEEEFBD09867E4B9221D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0CDE
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: x3tvAiWVZMuqxjXQYoG9o8ebYf/q2QcWPDINwnlHV+k=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2a:22:4a:46:ae:ee:fb:d0:98:67:e4:b9:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=fa6e9b0878bec17223205222c148b461b82c8243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:09:f1:3d:51:b8:19:f2:b3:bb:63:47:b1:
f0:96:d2:28:c0:b9:27:ee:14:8d:d6:6a:47:cc:72:
bd:01:17:29:dd:21:0a:09:56:02:71:8f:b3:35:d2:
59:a3:ee:d0:04:47:22:77:b0:25:4f:6a:95:c8:46:
93:d7:35:3b:8b:7a:28:32:74:e4:88:33:37:de:77:
a4:2b:01:b9:60:5e:46:54:7f:dd:ab:30:b8:97:e2:
1e:6f:ec:53:a8:9a:ec:b7:e9:0d:17:7d:0f:6b:80:
1d:29:3e:ba:db:10:85:6f:ac:01:5c:a4:d0:25:60:
69:f5:d6:03:0e:a3:49:f1:9d:fc:78:1a:8c:c2:46:
21:02:36:f2:f7:b8:69:ff:24:56:6e:5f:7a:60:99:
c5:8c:51:6a:87:b7:0a:07:fa:24:1c:5b:f8:25:e5:
27:e8:8d:9a:49:6f:76:f5:63:64:bd:99:7e:3e:4c:
4e:8f:aa:54:d5:64:6d:3f:da:43:53:b5:94:73:63:
39:82:ca:8b:e0:15:c1:39:57:2b:62:13:ae:85:f6:
35:b0:39:1c:2a:27:46:b0:07:ae:75:eb:dc:28:ec:
43:5a:bc:b9:ba:f9:ce:17:00:d4:3b:9e:fd:cb:47:
80:aa:14:04:25:8e:24:48:74:61:c3:a0:60:8b:41:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:9B:08:78:BE:C1:72:23:20:52:22:C1:48:B4:61:B8:2C:82:43
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:73:51:06:66:9c:5b:f4:08:5d:a9:20:bc:0e:a3:b1:ca:
7b:93:67:42:f6:88:c7:f9:27:82:55:c9:b6:c9:4f:d9:04:ca:
6b:0c:1b:16:e4:09:d3:9c:b9:77:72:97:23:78:5a:07:51:f3:
31:eb:83:6b:8e:8d:ec:38:32:bf:44:b9:25:ef:c3:7d:67:79:
89:06:ce:0a:70:ef:2d:b6:7f:97:e6:b5:e9:e6:43:52:0e:5c:
1c:b0:91:88:d2:64:1b:2a:c5:f0:47:67:24:b4:60:be:00:35:
e7:5a:13:6a:b6:39:7d:86:4c:eb:be:7d:99:c2:69:e0:a0:40:
0b:75:7c:8b:e8:bd:53:26:10:88:85:8d:c9:3d:32:55:8a:0f:
04:a1:dc:5e:f9:91:1c:ee:26:41:70:18:64:c1:8c:30:1d:b2:
ac:06:0b:bb:d6:a4:5e:ad:83:8b:d6:a2:06:f0:44:40:29:8e:
27:09:f5:c5:73:62:63:a5:1f:54:d1:55:e4:78:c3:5c:03:00:
b4:e4:4d:8a:15:d2:33:72:cc:7e:c1:13:90:8d:cd:0e:aa:be:
1f:e4:f8:f0:40:55:bf:54:5d:b7:3b:24:3a:21:54:a0:dd:af:
4f:37:4e:4f:3b:67:97:de:73:59:79:6b:00:94:62:af:3d:dc:
1d:47:2a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LioiSkau7vvQmGfkuSIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5
YWY1OWYwHhcNMjYwMzI5MDYwMDQyWhcNMjYwMzMwMDYwMDQyWjAzMTEwLwYDVQQD
EyhmYTZlOWIwODc4YmVjMTcyMjMyMDUyMjJjMTQ4YjQ2MWI4MmM4MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTgJ8T1RuBnys7tjR7HwltIowLkn
7hSN1mpHzHK9ARcp3SEKCVYCcY+zNdJZo+7QBEcid7AlT2qVyEaT1zU7i3ooMnTk
iDM33nekKwG5YF5GVH/dqzC4l+Ieb+xTqJrst+kNF30Pa4AdKT662xCFb6wBXKTQ
JWBp9dYDDqNJ8Z38eBqMwkYhAjby97hp/yRWbl96YJnFjFFqh7cKB/okHFv4JeUn
6I2aSW929WNkvZl+PkxOj6pU1WRtP9pDU7WUc2M5gsqL4BXBOVcrYhOuhfY1sDkc
KidGsAeudevcKOxDWry5uvnOFwDUO579y0eAqhQEJY4kSHRhw6Bgi0GSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpumwh4vsFyIyBSIsFItGG4LIJDMB8GA1UdIwQY
MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt
ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw
LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8FzUQZm
nFv0CF2pILwOo7HKe5NnQvaIx/knglXJtslP2QTKawwbFuQJ05y5d3KXI3haB1Hz
MeuDa46N7Dgyv0S5Je/DfWd5iQbOCnDvLbZ/l+a16eZDUg5cHLCRiNJkGyrF8Edn
JLRgvgA151oTarY5fYZM6759mcJp4KBAC3V8i+i9UyYQiIWNyT0yVYoPBKHcXvmR
HO4mQXAYZMGMMB2yrAYLu9akXq2Di9aiBvBEQCmOJwn1xXNiY6UfVNFV5HjDXAMA
tORNihXSM3LMfsETkI3NDqq+H+T48EBVv1RdtzskOiFUoN2vTzdOTztnl95zWXlr
AJRirz3cHUcqYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:48 2026 by rpki-client