Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: tJTX/BuTSag1mJN6/3ZmbZDjCZkwX2rWkRH2xW3osyE=
Subject key identifier: 42:E5:B0:8F:DD:B1:7B:51:FA:06:AF:72:4C:3E:1F:0F:08:A0:0D:20
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019D386602433ED5362AC2995EFEEE0F7B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0FCA
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: eye6CqOgPjnqFhfjG8F8on+VCmq+rztHCz1AlM5KtWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:02:43:3e:d5:36:2a:c2:99:5e:fe:ee:0f:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=42e5b08fddb17b51fa06af724c3e1f0f08a00d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:10:e4:2c:0b:e5:86:ce:56:9a:cb:c3:16:
38:77:1b:27:9a:c3:be:5e:27:ae:55:f0:3d:be:31:
26:e3:ca:4f:b7:1d:f9:4e:55:d3:8c:17:27:ed:95:
00:d2:23:3f:29:cc:e1:24:16:cd:59:a0:84:12:35:
fc:72:c9:2d:26:61:4c:59:f4:78:0b:7b:dc:0d:c8:
40:c7:ac:c4:86:25:32:b5:ca:7e:89:21:44:4e:5d:
2a:54:62:a8:88:72:5c:3d:38:ec:29:8b:78:1b:19:
58:7a:1d:09:83:ea:88:ef:af:a8:31:77:38:70:26:
5f:51:2e:9a:22:40:e6:03:e1:25:ae:4a:3f:e6:22:
38:25:d8:57:1e:61:7e:f0:69:af:a3:83:d3:a6:36:
90:b8:a4:39:d4:c6:d7:99:cf:c4:16:dc:ed:6d:9a:
1a:59:0b:f4:e1:80:13:a7:e7:a9:bb:2e:77:6d:75:
4f:4f:2d:24:9e:f0:3d:86:46:fd:3c:d0:ff:fb:bc:
db:df:ef:cd:a6:6f:74:23:5f:c5:2d:82:fb:a3:e6:
da:6f:3e:a8:9c:1b:29:91:be:bb:1b:b7:0e:af:9c:
0d:dd:58:f1:20:a2:69:a6:2d:9d:13:c2:16:50:24:
5f:08:f8:53:e3:5b:70:80:75:f5:d1:88:94:6c:54:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:B0:8F:DD:B1:7B:51:FA:06:AF:72:4C:3E:1F:0F:08:A0:0D:20
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:fa:36:04:41:f6:e7:8b:de:cc:40:65:d3:29:df:bc:76:
3f:6a:e4:6b:d7:6e:be:2f:d9:7c:cb:6c:b9:f0:d8:3a:e2:63:
38:50:46:fc:1a:b9:14:76:1a:fd:93:5c:98:ef:ae:dc:f8:f1:
9f:4c:b0:32:8f:3e:fa:17:c4:77:da:18:59:81:a7:f1:15:e9:
22:af:79:02:c7:b8:c4:0e:83:a1:dc:80:0b:13:92:20:ff:bb:
94:c3:ab:f8:d1:92:13:c6:c7:32:50:f3:55:34:bf:85:f8:86:
8d:39:c6:03:dd:db:63:7b:7c:92:1d:cf:0d:64:0a:30:a5:84:
2f:35:3c:5c:19:37:e0:53:28:3c:fc:6c:8a:20:b6:42:b5:96:
30:c3:92:d2:a1:5b:06:14:96:b2:e9:01:6d:e9:2e:11:79:8b:
b8:2f:ea:e5:ba:26:82:83:a0:d0:4f:52:24:eb:c8:46:26:8e:
48:61:82:7b:08:39:b4:17:8b:d9:92:20:8b:b2:20:1d:58:82:
96:32:27:79:b0:02:51:27:06:b1:6b:c8:b9:45:5c:ab:8a:36:
8f:d2:bf:c9:df:0f:93:f4:f0:04:16:2f:37:ab:e7:36:fc:60:
5e:c4:8f:1b:e9:29:83:10:0b:b1:ba:75:fe:4f:69:96:75:8e:
b1:48:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client