Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: NirkbXTjFOkuqpwug5kxFwboClj0Aju5NdjIQlYoLk0=
Subject key identifier: 0C:17:FC:E6:A1:98:B4:E5:C5:A8:B0:B9:DB:9B:17:6A:95:9F:EA:16
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019E905C85C1BAA49253F87DC658C571646E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1940
Signing time: Thu 04 Jun 2026 02:00:43 +0000
Manifest this update: Thu 04 Jun 2026 02:00:43 +0000
Manifest next update: Fri 05 Jun 2026 02:00:43 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: z6psuiWFOHYA9/kcejCDOIzKGkej/+S2Mp7TT5iVbAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:85:c1:ba:a4:92:53:f8:7d:c6:58:c5:71:64:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Jun 4 02:00:43 2026 GMT
Not After : Jun 5 02:00:43 2026 GMT
Subject: CN=0c17fce6a198b4e5c5a8b0b9db9b176a959fea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:28:61:9b:c9:3c:ac:52:f9:4f:78:b7:e3:
20:78:12:22:fc:97:22:81:c6:dc:29:57:04:d1:85:
7c:b9:4b:42:27:a3:c7:15:94:88:f5:b9:33:b6:c1:
88:55:53:f0:67:7a:8c:bd:e2:9b:73:f1:4d:88:8e:
2a:ff:ca:84:39:f5:38:07:2b:de:c6:59:a3:d3:42:
bc:e2:85:a8:7b:b4:10:07:1c:3c:d0:b7:13:77:05:
e2:a2:a0:03:74:09:32:fd:a0:e4:b8:8e:98:c8:f7:
d7:85:6f:88:29:c7:55:61:52:91:4e:dd:b3:57:a9:
47:9d:15:fc:95:34:e0:d4:1a:b5:60:7a:06:7e:6a:
39:35:ad:db:66:97:36:85:e9:37:a7:d8:ef:ad:bf:
a9:9c:18:c0:27:25:cc:03:6e:3b:82:45:15:86:3d:
85:47:45:c5:4a:26:d3:3e:a7:6b:30:d8:74:8c:99:
b9:13:cd:44:94:a9:4c:8c:1d:2d:b9:9c:86:1f:28:
20:6f:31:ff:16:d3:75:42:7f:db:b7:76:f3:be:6e:
1e:1c:10:da:67:b6:57:7b:71:eb:fc:5f:be:7e:0a:
8f:92:90:ab:84:a4:e7:52:e0:27:bd:2e:c5:47:9d:
5c:e8:9d:51:c2:d0:d8:22:5d:e9:e8:97:c3:48:b0:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:FC:E6:A1:98:B4:E5:C5:A8:B0:B9:DB:9B:17:6A:95:9F:EA:16
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5c:82:8c:3a:87:68:5b:7d:19:ce:81:1b:db:26:9f:22:bc:
1e:01:32:38:3d:6d:12:ab:45:9e:77:55:64:16:e0:57:29:62:
73:00:59:58:a0:2a:e4:df:c7:74:df:25:1f:b0:90:33:ca:6e:
4f:09:b4:ac:16:fa:8d:8e:8a:a5:5e:a5:ce:10:6c:4a:5c:42:
0a:96:da:a4:a3:64:da:42:60:22:81:94:33:3f:35:16:b5:d6:
1c:84:b8:3c:4d:07:08:8a:fa:c9:ac:50:a7:0e:f8:41:90:11:
be:9e:38:fc:b4:99:50:b6:e3:f1:dd:f3:f6:cb:b4:92:01:19:
05:89:ab:f3:5d:bf:b1:fa:f2:ee:d9:d1:2e:61:83:2f:44:75:
de:d7:c5:0d:ba:23:38:da:97:83:f2:1d:55:73:87:57:29:ca:
c3:bf:c1:02:fe:06:7c:be:eb:3b:f6:ee:09:0f:25:4c:2c:38:
23:9d:25:52:f4:b1:4d:c9:8f:54:e0:9b:2c:f1:ec:f4:a9:6e:
ac:5f:ee:c5:7f:7e:73:bb:9c:10:3a:b5:79:84:66:c3:b0:e8:
64:7d:80:67:4d:64:45:13:f1:bd:b8:c6:70:73:50:4a:b0:4b:
75:c8:e9:60:96:7c:0e:92:bd:00:0a:26:de:ae:20:55:ad:c2:
17:16:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:26:38 2026 by rpki-client