Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: aVSc/A2qzAY+0zYhvfsCgVhA8073zhyg5sQXZfaPMXY=
Subject key identifier: 8F:E3:3E:DA:DF:F9:79:BE:CE:2F:E7:6A:C1:7D:26:A7:3F:CE:D9:FC
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019DA89E49F7B08F8E7CAB9BA97C3C1123A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 18C8
Signing time: Mon 20 Apr 2026 02:00:39 +0000
Manifest this update: Mon 20 Apr 2026 02:00:39 +0000
Manifest next update: Tue 21 Apr 2026 02:00:39 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: +hDb+Om1iBX2mE62F/imyKMh3D8VqrXaKwW2Dk6wcto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:49:f7:b0:8f:8e:7c:ab:9b:a9:7c:3c:11:23:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Apr 20 02:00:39 2026 GMT
Not After : Apr 21 02:00:39 2026 GMT
Subject: CN=8fe33edadff979bece2fe76ac17d26a73fced9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:ba:a9:bf:a1:8f:46:02:54:74:5a:c7:f1:
85:a4:ea:28:0f:ac:2e:38:90:b2:7c:4d:97:30:0a:
3e:48:1f:f8:da:4a:9a:3d:b0:42:0e:af:80:a8:fc:
98:d5:72:27:25:d3:b7:18:0c:b6:f8:48:1d:7a:19:
98:f3:a9:47:12:ad:0b:e1:91:0c:d5:2d:2b:c6:20:
7e:fd:0f:80:10:5b:c5:ae:42:d6:24:ab:ef:7c:40:
45:e8:e4:cc:c9:68:5b:ee:5a:d2:45:b4:d9:75:94:
7d:ef:cd:2f:c3:2d:ea:a8:cd:5d:f4:40:d4:a2:44:
b3:33:3f:74:99:cf:60:d1:62:0f:d8:a7:43:ef:41:
94:40:90:4c:98:77:d7:36:17:e7:5d:c1:aa:76:6c:
8a:fa:35:67:ff:ee:ce:35:70:2b:b9:03:d0:56:31:
68:c8:c5:16:77:4b:f3:9f:25:33:6c:11:a7:20:66:
70:40:af:57:19:13:01:90:09:29:18:ea:0c:64:f7:
1b:97:6c:d4:70:02:9e:0e:7e:8c:47:76:ec:3d:7d:
b3:86:de:7b:82:f1:94:29:03:2d:2f:47:04:58:af:
53:6a:ba:5f:58:2c:6d:08:c4:5f:b2:94:b7:e1:29:
8a:b2:e0:46:65:c9:d2:d3:4e:c2:4e:9f:bb:eb:f0:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:3E:DA:DF:F9:79:BE:CE:2F:E7:6A:C1:7D:26:A7:3F:CE:D9:FC
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:7f:15:21:ad:a8:f0:57:13:47:ff:56:8a:4d:6d:b3:c1:
44:35:0c:f1:86:a3:53:a9:ba:5d:65:f9:63:54:28:11:13:ef:
07:02:e6:06:ca:e0:fd:78:50:80:07:c9:12:38:dc:20:ee:33:
e9:fd:3b:62:88:0e:53:fa:a7:12:7f:bf:67:af:89:3c:0e:41:
c3:a5:f1:17:ef:68:a1:33:50:8a:98:7b:b8:a4:31:8f:c0:fd:
c1:f7:5b:b1:a3:30:11:3b:d0:af:e1:1a:3b:a9:6f:2b:fe:17:
4d:f1:9c:9a:26:5f:c9:8a:5b:6b:bc:ce:ad:57:68:51:5b:a1:
7c:fd:ee:04:e3:9d:22:30:4c:9c:6c:45:67:0a:fc:4a:40:91:
fd:18:16:43:3f:1e:be:48:b7:e3:1b:d7:c2:cb:56:7b:ca:6c:
e3:50:aa:f0:33:d9:c7:e2:e4:2f:49:2f:38:21:f3:18:8a:1f:
a4:a4:6f:94:ad:24:27:f7:b5:58:6b:a7:11:4a:d9:8c:de:49:
3e:c7:c2:69:48:53:c6:5d:97:87:9e:6a:ec:76:16:6a:07:3b:
e5:26:c3:97:52:2f:99:a8:bf:fa:7a:d0:ef:2b:dc:9f:5e:5d:
32:98:e0:43:71:36:bb:63:f0:14:77:4a:b0:9d:18:d6:43:34:
c2:95:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:55:45 2026 by rpki-client