Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: nesdkoMGJi1sCmEnP7BiY624QhSFymv2aNyYxQ0YhhI=
Subject key identifier: D4:F5:11:CA:F4:DA:C1:38:52:26:4F:76:D6:4C:FF:C0:40:05:F2:DA
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 01A13DB832FBDD2EBFAAE227677D18FB776A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 11DF
Signing time: Thu 15 Oct 2026 04:00:44 +0000
Manifest this update: Thu 15 Oct 2026 04:00:44 +0000
Manifest next update: Fri 16 Oct 2026 04:00:44 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: troh9B9CSdOfq7zJzWOLm2PQI9FSopLwTjo/HlCl43o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:32:fb:dd:2e:bf:aa:e2:27:67:7d:18:fb:77:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Oct 15 04:00:44 2026 GMT
Not After : Oct 16 04:00:44 2026 GMT
Subject: CN=d4f511caf4dac13852264f76d64cffc04005f2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:7f:12:f3:a6:d5:d0:a1:45:1a:a0:3b:a0:
6c:7a:8d:d4:70:c7:8e:69:c7:a2:a4:b6:c8:53:25:
71:b4:1e:e6:3c:0d:50:02:ff:ac:9c:f0:a5:a7:02:
b8:2a:6f:bd:b2:ab:31:df:4a:a6:df:2a:a4:a7:40:
ce:58:62:e2:b5:e0:9c:64:64:70:4e:e8:e3:0c:7a:
fa:d0:75:ec:63:55:90:95:e3:cc:d3:05:45:39:1b:
bc:6e:1b:44:a0:be:70:df:61:fa:a3:87:46:bb:e9:
b5:02:63:68:98:40:61:89:98:86:27:61:a1:d5:aa:
07:14:d8:e1:30:d8:ed:34:85:ca:ce:64:d2:a2:da:
a2:77:b6:e3:cc:8c:0b:ed:d4:95:7f:a1:30:1b:36:
91:e9:10:76:b6:85:a1:a4:f0:6a:78:56:cb:c1:19:
c4:9c:8e:03:96:9b:23:95:a7:61:99:bb:b9:2c:57:
bd:c6:df:c6:c6:9d:f6:80:10:01:7a:64:77:db:2f:
93:de:b6:79:bf:08:60:15:3b:f7:eb:5b:e6:b3:dc:
bd:bf:ee:6a:2a:d0:ae:f8:08:40:ea:1f:4e:06:40:
93:af:a8:f7:23:1b:b0:f1:fc:a5:cd:94:c1:54:bf:
a7:0f:cd:30:16:71:1d:bc:c1:73:3d:f9:f6:62:df:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:11:CA:F4:DA:C1:38:52:26:4F:76:D6:4C:FF:C0:40:05:F2:DA
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b6:55:1b:b2:ee:56:89:8d:66:94:18:6d:24:7a:29:34:21:
d9:92:1e:25:06:0e:69:7c:6f:9f:4a:ff:8b:e8:38:99:10:b4:
64:25:ad:06:78:64:01:58:96:84:28:79:d0:37:df:72:84:84:
a2:b6:cd:1c:8c:ae:ec:ab:68:f7:7c:af:0e:a2:b8:2b:9d:b1:
01:63:bc:6d:4d:09:6f:43:51:6c:55:2d:26:1e:05:8b:47:82:
3f:64:a9:00:70:73:e3:ab:ec:2a:31:95:a6:b0:3a:dd:c9:96:
ce:99:22:86:53:e6:68:1e:a0:4d:b0:d7:83:81:ce:85:0c:d0:
1c:d2:99:5d:b6:fb:7c:b9:0e:44:6f:76:27:0b:76:f9:95:ac:
e2:68:1f:db:41:c2:18:0b:c8:81:fa:fa:3f:55:8b:de:41:e0:
b2:18:f6:f6:45:96:31:25:a2:db:dd:25:e5:10:74:5a:36:40:
a3:f4:36:32:c6:70:24:48:4b:f4:6a:b1:12:b7:ac:64:9e:77:
b9:a2:52:8e:70:83:9a:72:f6:47:4d:6b:07:31:ec:b8:fa:2d:
8c:e4:88:87:74:29:0c:9f:7e:91:9c:11:81:0e:3a:1e:2e:86:
df:db:7f:d4:0d:8e:73:f8:93:0f:b9:54:47:4e:24:eb:7e:52:
ab:97:ff:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uDL73S6/quInZ30Y+3dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTkwZjU2MjA1MGQ5NzY5ZWQ1N2IwN2IxYmM5MzFlY2Rk
ZjEzOTcwHhcNMjYxMDE1MDQwMDQ0WhcNMjYxMDE2MDQwMDQ0WjAzMTEwLwYDVQQD
EyhkNGY1MTFjYWY0ZGFjMTM4NTIyNjRmNzZkNjRjZmZjMDQwMDVmMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvt/EvOm1dChRRqgO6Bseo3UcMeO
aceipLbIUyVxtB7mPA1QAv+snPClpwK4Km+9sqsx30qm3yqkp0DOWGLiteCcZGRw
TujjDHr60HXsY1WQlePM0wVFORu8bhtEoL5w32H6o4dGu+m1AmNomEBhiZiGJ2Gh
1aoHFNjhMNjtNIXKzmTSotqid7bjzIwL7dSVf6EwGzaR6RB2toWhpPBqeFbLwRnE
nI4Dlpsjladhmbu5LFe9xt/Gxp32gBABemR32y+T3rZ5vwhgFTv361vms9y9v+5q
KtCu+AhA6h9OBkCTr6j3Ixuw8fylzZTBVL+nD80wFnEdvMFzPfn2Yt/6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT1Ecr02sE4UiZPdtZM/8BABfLaMB8GA1UdIwQY
MBaAFANZD1YgUNl2ntV7B7G8kx7N3xOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAt
ZWNjNGMxYzM2YjBkLzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iMTAxNmMtMTIxYS00OTg4LWI4OTAtZWNjNGMxYzM2YjBk
LzEvQTFrUFZpQlEyWGFlMVhzSHNieVRIczNmRTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrZVG7Lu
VomNZpQYbSR6KTQh2ZIeJQYOaXxvn0r/i+g4mRC0ZCWtBnhkAViWhCh50DffcoSE
orbNHIyu7Kto93yvDqK4K52xAWO8bU0Jb0NRbFUtJh4Fi0eCP2SpAHBz46vsKjGV
prA63cmWzpkihlPmaB6gTbDXg4HOhQzQHNKZXbb7fLkORG92Jwt2+ZWs4mgf20HC
GAvIgfr6P1WL3kHgshj29kWWMSWi290l5RB0WjZAo/Q2MsZwJEhL9GqxEresZJ53
uaJSjnCDmnL2R01rBzHsuPotjOSIh3QpDJ9+kZwRgQ46Hi6G39t/1A2Oc/iTD7lU
R04k635Sq5f/EQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:54 2026 by rpki-client