Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: 6RX/V1oNwIE3reJk5pzYYi0/EsfZ3Eqjgai1CwixCl8=
Subject key identifier: B3:57:1D:C9:F1:AA:0F:AF:F4:C7:D5:DB:0C:A7:35:8F:5A:81:11:B5
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 01A196C5353E5EBE4EBD929FA6E7B5E692F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1AD1
Signing time: Sun 01 Nov 2026 11:01:08 +0000
Manifest this update: Sun 01 Nov 2026 11:01:08 +0000
Manifest next update: Mon 02 Nov 2026 11:01:08 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: 9HmHbfIwPFllkV7Kt6zuFqr9qlvzkNVFdbKI5nMpwII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:c5:35:3e:5e:be:4e:bd:92:9f:a6:e7:b5:e6:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Nov 1 11:01:08 2026 GMT
Not After : Nov 2 11:01:08 2026 GMT
Subject: CN=b3571dc9f1aa0faff4c7d5db0ca7358f5a8111b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:65:32:32:f3:cc:b4:6e:66:81:34:67:05:
db:65:bf:5b:f7:f1:2c:96:b0:d6:af:05:bc:02:50:
05:4d:29:65:91:29:15:b8:bc:0a:ec:d5:6c:30:78:
80:6c:cb:fd:4a:c1:24:1f:33:7c:7a:82:62:c9:8b:
89:17:dc:5f:73:c4:95:09:e7:02:db:55:3d:a6:22:
07:15:30:36:64:5f:90:e0:47:e9:44:c2:a1:7e:aa:
c8:f3:9a:30:87:47:eb:32:a5:ae:77:96:de:4b:cf:
ab:11:3f:4c:c6:91:f2:23:2a:cb:de:c6:f0:6c:a8:
45:ad:3d:d8:0d:a4:39:97:49:9d:65:39:45:60:99:
b8:49:7b:50:34:46:e2:6e:44:f4:58:98:b5:06:eb:
0f:27:c7:4a:20:91:db:ab:ee:47:97:ed:2b:59:df:
54:cc:2a:c3:71:db:d6:ae:b5:fd:2a:87:70:95:86:
d3:47:d1:09:2f:45:f9:82:ca:48:98:74:e4:a8:a5:
98:cb:8a:50:df:69:da:8b:50:87:be:74:95:f9:c9:
37:68:1b:ba:47:f4:d7:d7:a3:b8:ee:bb:aa:7b:d1:
10:22:be:13:49:3c:c5:58:3c:99:7b:0b:60:0c:94:
a3:2e:04:50:f8:b4:81:d0:5a:f4:5b:b1:31:91:50:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:1D:C9:F1:AA:0F:AF:F4:C7:D5:DB:0C:A7:35:8F:5A:81:11:B5
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:44:e8:4e:6e:8c:18:32:5a:51:df:2f:22:33:fb:18:48:b6:
87:10:82:ac:f2:4c:58:e8:08:12:2e:34:35:57:93:07:b9:b4:
a4:a2:92:a7:f3:be:76:a6:82:fe:75:9b:24:64:f0:30:43:61:
7d:2f:8b:0a:50:0a:72:38:4a:30:63:27:1e:c5:93:c4:29:ed:
c0:62:7d:91:6f:02:e2:28:63:15:07:2b:b8:60:2a:27:a4:90:
e1:c3:1e:68:d0:65:60:40:f1:1f:3a:7f:48:1c:f8:62:de:e2:
95:fc:35:fd:07:06:25:14:5b:51:1f:b2:08:4a:41:32:21:a6:
d6:94:80:54:02:ad:06:4f:82:57:37:7b:98:80:05:f6:cc:94:
9a:39:36:4b:ee:b4:1c:49:da:4f:88:b5:9a:e2:97:25:99:ad:
3e:da:8c:e6:15:fe:97:c7:39:dc:f8:2d:c9:77:cc:c0:e1:d9:
10:9b:d0:50:a3:e0:c0:0a:76:2f:91:5d:06:0b:a0:c8:68:04:
95:28:36:f5:78:b2:08:6f:7b:03:a0:ae:cc:4b:4b:f6:00:b2:
6d:d8:5b:15:d7:37:49:8a:40:8a:ba:58:73:ef:e9:46:fd:f3:
1e:08:6d:07:be:95:06:0c:48:fa:85:4a:56:2a:b3:a5:7e:14:
07:db:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:39:54 2026 by rpki-client