Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: Lf7ELaIIDiVU17XmK1OkOAHpVqnUinItJ5PG2+Zh5CY=
Subject key identifier: 7D:3E:65:34:B2:19:C5:12:EE:AA:5C:B8:79:86:F3:11:03:C5:9A:B1
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019D130FD1BE50EECA98832EB96FBDBEED7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 17AE
Signing time: Sun 22 Mar 2026 01:01:36 +0000
Manifest this update: Sun 22 Mar 2026 01:01:36 +0000
Manifest next update: Mon 23 Mar 2026 01:01:36 +0000
Files and hashes: 1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: koGdp+mY9RytPgyVyY9AZjUEYCQocakfNAvNNcLt+ik=)
4: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:0f:d1:be:50:ee:ca:98:83:2e:b9:6f:bd:be:ed:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Mar 22 01:01:36 2026 GMT
Not After : Mar 23 01:01:36 2026 GMT
Subject: CN=7d3e6534b219c512eeaa5cb87986f31103c59ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:40:84:77:d4:ed:d3:91:cd:62:e4:80:55:
47:e4:b0:e2:93:ea:0f:3b:70:dc:1c:85:d5:c9:18:
1f:b8:75:fa:df:a0:8a:77:a8:ee:7f:8c:e4:0d:9a:
c7:03:fc:23:b5:2a:79:4b:6b:5f:cd:a9:68:b2:c9:
e8:06:40:0c:c0:84:97:a8:6a:60:7e:b6:5c:69:ac:
5a:e1:fa:ab:6d:62:3c:d9:e8:ce:7e:45:cf:7e:0a:
62:c0:c0:3f:0d:c6:7d:1c:25:bf:d7:c8:08:a0:1f:
f1:b8:d4:15:f4:cb:72:15:3b:58:a6:90:90:22:40:
b4:03:f0:95:18:03:b0:69:30:82:85:60:92:e2:87:
8d:5f:f7:69:03:ed:33:1d:e4:4c:38:47:bd:19:4c:
1b:38:96:a2:3c:ac:a2:c0:e8:f4:ef:cd:88:93:9d:
7c:65:74:94:e0:49:e0:25:ed:ec:82:08:1b:88:69:
ec:93:2f:8e:b0:09:08:ba:1f:b0:2b:b7:43:3a:fd:
17:a1:8a:ce:1c:ed:ec:31:4d:34:4c:be:ff:cd:cb:
0b:7c:f6:53:a9:3d:13:4e:1c:d6:4f:9d:12:14:50:
5d:fa:19:f6:de:a5:ad:21:38:a8:31:30:55:a9:4e:
36:c5:94:f0:6a:1d:d2:76:1b:b1:98:a2:7e:13:85:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:65:34:B2:19:C5:12:EE:AA:5C:B8:79:86:F3:11:03:C5:9A:B1
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:34:df:32:ea:ea:6e:fc:36:46:91:db:59:3b:43:c1:61:db:
2a:97:c8:8a:43:c5:99:a5:62:d6:32:69:04:aa:8f:dc:c8:cd:
a1:b6:5b:a2:43:90:ed:41:d8:c2:7a:b6:90:44:c7:92:82:52:
7c:6c:2c:3c:27:53:b5:4a:4b:95:3a:1b:e7:6a:2d:e1:f0:e4:
1d:90:ad:0e:a9:aa:df:2d:94:15:34:38:31:ae:20:6b:66:29:
ce:e2:cc:04:14:00:3d:b9:07:1d:97:78:6c:15:49:7f:56:48:
a9:ec:d4:a2:78:fe:22:a2:35:b5:6e:ef:be:12:e1:b5:aa:e3:
78:2b:dc:14:41:34:48:6c:cb:eb:a6:ea:bf:51:7b:d8:f0:fc:
ed:fd:ff:1b:5f:99:56:76:be:56:94:f3:e1:81:02:69:dd:d2:
4f:15:a3:a3:0e:0c:d3:54:cd:b8:07:17:ca:b4:10:ed:39:f4:
7c:f4:1b:ce:62:ea:44:57:f1:07:c9:58:4d:03:6b:d7:4e:00:
0b:8e:04:df:b7:33:ca:35:4e:a3:b6:5c:4b:ba:53:b0:62:66:
17:e9:84:53:6e:41:9d:5b:39:2a:47:80:48:f4:26:78:5c:bf:
31:ec:d6:e3:1d:a1:5e:46:7e:a9:12:f8:1e:81:17:f9:a8:43:
a9:22:b9:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0TD9G+UO7KmIMuuW+9vu19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx
NzY4MWYwHhcNMjYwMzIyMDEwMTM2WhcNMjYwMzIzMDEwMTM2WjAzMTEwLwYDVQQD
Eyg3ZDNlNjUzNGIyMTljNTEyZWVhYTVjYjg3OTg2ZjMxMTAzYzU5YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszlAhHfU7dORzWLkgFVH5LDik+oP
O3DcHIXVyRgfuHX636CKd6juf4zkDZrHA/wjtSp5S2tfzalossnoBkAMwISXqGpg
frZcaaxa4fqrbWI82ejOfkXPfgpiwMA/DcZ9HCW/18gIoB/xuNQV9MtyFTtYppCQ
IkC0A/CVGAOwaTCChWCS4oeNX/dpA+0zHeRMOEe9GUwbOJaiPKyiwOj0782Ik518
ZXSU4EngJe3sgggbiGnsky+OsAkIuh+wK7dDOv0XoYrOHO3sMU00TL7/zcsLfPZT
qT0TThzWT50SFFBd+hn23qWtITioMTBVqU42xZTwah3SdhuxmKJ+E4UL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0+ZTSyGcUS7qpcuHmG8xEDxZqxMB8GA1UdIwQY
MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et
ODRlZTIyYTNlZTViLzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi
LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjTfMurq
bvw2RpHbWTtDwWHbKpfIikPFmaVi1jJpBKqP3MjNobZbokOQ7UHYwnq2kETHkoJS
fGwsPCdTtUpLlTob52ot4fDkHZCtDqmq3y2UFTQ4Ma4ga2YpzuLMBBQAPbkHHZd4
bBVJf1ZIqezUonj+IqI1tW7vvhLhtarjeCvcFEE0SGzL66bqv1F72PD87f3/G1+Z
Vna+VpTz4YECad3STxWjow4M01TNuAcXyrQQ7Tn0fPQbzmLqRFfxB8lYTQNr104A
C44E37czyjVOo7ZcS7pTsGJmF+mEU25BnVs5KkeASPQmeFy/MezW4x2hXkZ+qRL4
HoEX+ahDqSK5Zw==
-----END CERTIFICATE-----
Generated at Sun Mar 22 12:05:46 2026 by rpki-client