Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: NrFzw+HRZeXSH+yVCGvglyNMsJfvPPgym+ossR7T3Cc=
Subject key identifier: C0:D1:19:46:75:96:2D:38:3F:D4:49:C0:54:03:F6:41:30:B6:73:64
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019F17C26330C92F2595A4E9EBF99F22F210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 158C
Signing time: Tue 30 Jun 2026 09:00:43 +0000
Manifest this update: Tue 30 Jun 2026 09:00:43 +0000
Manifest next update: Wed 01 Jul 2026 09:00:43 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: CWFWzIAi+8FmQG/Yofoi7Sx9rX+quyUZ8OteJesPIgM=)
2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:63:30:c9:2f:25:95:a4:e9:eb:f9:9f:22:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Jun 30 09:00:43 2026 GMT
Not After : Jul 1 09:00:43 2026 GMT
Subject: CN=c0d1194675962d383fd449c05403f64130b67364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:88:8a:c3:91:c5:56:5f:df:59:dd:39:f2:
40:ad:66:3f:9d:34:bc:a2:a2:87:9f:7a:7d:56:5e:
1a:85:4a:48:cc:63:4e:e8:c3:69:be:60:81:cd:e5:
27:ee:bb:ca:ab:01:1a:51:80:a3:41:75:f7:99:39:
91:7d:9f:cf:38:d6:09:8b:4d:ac:96:28:c5:3e:54:
b6:f8:8c:3e:ee:fe:af:67:a4:bd:26:0d:c6:a4:09:
c7:ac:4a:e2:58:86:53:68:73:73:18:b8:e3:56:48:
b6:ed:da:f6:72:eb:73:cd:4a:08:31:23:a2:22:7a:
17:a3:25:96:b8:6c:ac:b3:bf:c7:f9:fc:57:38:b9:
45:c8:ea:e1:81:41:6f:2f:96:11:6b:dd:a4:b0:fe:
7e:72:5c:dc:cc:ed:26:1f:94:ea:88:a7:49:22:23:
1a:ca:45:cc:f3:06:d9:fa:60:3c:ad:c1:c2:8b:64:
fd:f4:58:2a:82:1e:f1:10:b6:86:e2:9c:40:8e:67:
ee:95:25:d8:d6:2a:6d:9e:35:aa:cd:7b:32:3b:79:
82:ba:fb:fe:48:da:bc:22:24:f0:75:ea:9f:90:4a:
25:e1:fc:63:48:e1:09:1a:33:a7:f1:29:c3:9f:dc:
44:e4:17:9d:a2:48:77:db:21:57:0a:5b:df:17:fe:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:19:46:75:96:2D:38:3F:D4:49:C0:54:03:F6:41:30:B6:73:64
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:76:59:22:c1:a3:05:64:d1:4a:4d:49:a2:58:81:65:48:80:
2c:cf:97:84:98:0d:3e:c6:b4:50:c2:d4:a9:a5:84:76:a3:d0:
71:07:ae:2b:a1:fa:c0:9d:9e:5d:a8:cc:f0:b8:07:31:36:3b:
7f:57:64:a4:1d:08:ec:3f:ee:16:0b:f7:76:31:da:20:2a:64:
9e:83:d2:dc:d0:45:85:db:01:fb:00:d3:71:ed:2b:85:5d:0f:
6e:15:d0:1e:32:fe:d4:34:e9:7e:26:9b:35:cb:7a:6b:89:41:
57:0f:47:34:78:94:81:5c:a7:c7:68:02:ab:d1:5e:b8:ed:27:
11:12:44:85:f2:c6:e4:5d:e2:95:5b:2d:b0:dd:52:f9:f5:14:
2a:9c:f7:b9:8e:08:25:2f:71:19:fe:10:47:e3:12:75:58:b3:
30:57:26:36:45:87:8b:e1:46:95:43:4b:ff:91:27:cd:d6:af:
d7:35:91:25:74:a7:ff:7d:d8:cb:ef:f1:84:aa:c9:17:4f:39:
34:75:de:fe:b5:a3:4c:91:24:19:74:f2:de:c9:d7:e2:26:34:
65:2b:59:0d:5a:00:42:db:04:2a:58:86:2c:39:18:87:3c:e9:
85:e6:01:b4:e5:fc:49:2c:98:5e:fc:8c:19:51:c4:3e:52:5c:
a6:a8:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client