Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: Eb0qxpJi6JZ12ULdMLFvimuHOp1Cjp64sN75p7DmiAE=
Subject key identifier: 20:EA:8C:75:0C:3C:9F:1A:86:A4:BC:79:D8:97:57:A2:1E:E6:E3:46
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019CC0E0578D16D4B7CD765C774F3B01A247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1850
Signing time: Fri 06 Mar 2026 02:00:53 +0000
Manifest this update: Fri 06 Mar 2026 02:00:53 +0000
Manifest next update: Sat 07 Mar 2026 02:00:53 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: 0yzhwxSxyCD26KnsnzU8yTDcEZ9mxcl0/ifm9fXxVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:e0:57:8d:16:d4:b7:cd:76:5c:77:4f:3b:01:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Mar 6 02:00:53 2026 GMT
Not After : Mar 7 02:00:53 2026 GMT
Subject: CN=20ea8c750c3c9f1a86a4bc79d89757a21ee6e346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:43:0a:d9:ba:53:5b:4d:2d:30:ac:16:2f:
3b:87:b9:04:02:58:bc:1e:4c:22:76:1c:90:f1:e1:
93:27:fd:88:cb:dc:74:41:6d:ad:16:6d:6c:da:da:
13:3f:bf:60:9b:42:ca:d6:cd:9b:2f:9d:dc:4c:16:
76:86:4e:e5:b0:6b:e5:99:89:e6:cd:58:62:c9:8d:
98:73:de:e9:80:73:4f:56:ee:51:f9:1c:4d:82:74:
ba:fe:50:9e:e2:0f:a8:20:f6:5b:a9:a4:37:7a:17:
97:6f:9d:32:60:b4:bc:c3:4a:b5:bb:31:20:93:aa:
0f:fe:a3:d3:a2:3c:b2:16:41:59:50:d5:2f:b3:47:
e8:06:0b:79:f4:2a:91:b9:c8:f9:0a:61:2b:d0:b6:
fc:77:95:73:fd:c1:50:2c:ab:92:09:65:79:0f:00:
75:90:5a:62:f8:95:5c:9b:21:06:ec:3d:33:8a:31:
d5:1f:c0:3f:8f:9b:0a:0f:1b:fd:fd:da:5c:ce:44:
47:03:ae:6d:bd:97:a7:16:8b:d5:5d:77:dd:1e:07:
3c:af:ec:ad:b1:b3:a0:fa:2b:ce:b4:b4:df:65:cc:
44:ee:62:a5:a1:23:7b:a6:f4:56:36:09:be:32:ba:
8f:35:d6:f8:bb:3c:9c:ef:d0:e5:94:85:b8:6d:d5:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EA:8C:75:0C:3C:9F:1A:86:A4:BC:79:D8:97:57:A2:1E:E6:E3:46
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:e5:76:ca:40:99:88:50:e7:ca:74:f2:65:3b:95:74:23:
5e:b9:93:fb:b3:6e:bb:69:18:6f:87:ee:62:8e:62:82:f6:cf:
a9:85:33:4b:f5:74:f6:02:97:6f:79:d7:0c:b3:ff:eb:ba:ad:
17:37:d1:8c:0e:b2:9e:2a:c7:b4:8f:cd:1e:71:bb:95:39:19:
25:b0:cd:90:0c:c7:d7:3b:72:2e:5f:03:5c:fe:8f:9c:f9:70:
ab:38:60:8b:bf:73:af:3c:e4:92:b6:37:cf:3d:8e:c4:8b:d8:
5f:c0:9e:38:10:26:e5:22:8e:6e:e5:73:3a:2c:6e:d1:07:40:
24:f1:6f:13:d6:5d:52:da:2b:3f:52:13:c5:c0:a1:05:a2:a2:
f7:f6:03:20:11:bc:84:fb:3e:5e:2e:b8:dd:47:8d:79:e2:c1:
df:1e:bc:0b:eb:de:47:ea:39:be:24:93:9f:fb:db:a3:58:97:
2c:7f:22:37:a7:21:95:b8:59:75:92:07:8e:ce:80:bd:2f:0d:
db:d1:34:b0:5c:a5:e5:00:35:97:6f:57:1a:13:63:67:69:d4:
19:09:67:9c:36:af:d6:bc:4f:b1:a9:52:50:0d:f0:b6:4f:29:
5e:34:62:ce:7b:a9:d7:11:5e:ff:83:da:0e:57:19:82:c9:5f:
e7:e3:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:48:26 2026 by rpki-client