Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: 3Sg5M2muVQHnG8iQaHZTADeo9jiYkshyx8NeQuoYRR8=
Subject key identifier: B2:E3:37:83:F0:9E:D7:AE:44:87:EA:5D:C0:35:32:7B:75:34:59:04
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019D14FDC67C0BE819FE52DC09C172678AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 17AF
Signing time: Sun 22 Mar 2026 10:01:08 +0000
Manifest this update: Sun 22 Mar 2026 10:01:08 +0000
Manifest next update: Mon 23 Mar 2026 10:01:08 +0000
Files and hashes: 1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: aMUwDIJ2/VmndqCyRZJnaBX8bJtW20nuq6oIcxfwNn8=)
4: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:fd:c6:7c:0b:e8:19:fe:52:dc:09:c1:72:67:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Mar 22 10:01:08 2026 GMT
Not After : Mar 23 10:01:08 2026 GMT
Subject: CN=b2e33783f09ed7ae4487ea5dc035327b75345904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:71:44:3f:10:af:9f:ae:b8:07:a8:41:f2:
e5:a8:c6:bd:49:09:ae:b9:47:18:b0:e8:03:e6:18:
70:a8:73:64:14:42:e8:86:14:c7:2d:98:53:b6:a9:
84:5d:ee:a6:05:ce:b3:30:d5:8a:81:bf:30:b1:7c:
c7:c2:94:c1:02:e6:18:7e:7f:05:5e:d1:91:c7:68:
a4:ce:e9:ca:69:af:01:a1:4c:c7:5c:56:be:1b:ba:
3c:d6:be:02:0b:02:0c:36:06:c7:71:e5:1f:d9:31:
0e:07:d5:d5:0d:33:2f:d9:e6:dc:25:2c:47:a3:e6:
39:c2:83:5c:6a:01:29:ec:4b:c7:4f:6e:3a:bd:44:
11:9f:ce:38:b7:26:59:b8:83:af:07:23:1a:77:fd:
0c:c8:ce:20:21:d3:ac:85:c6:34:48:cd:6c:70:61:
a3:36:3e:8e:49:03:4a:7c:d6:75:b0:54:96:c8:0a:
b7:76:ee:97:1b:a2:9e:c2:45:25:29:66:27:7c:6e:
8f:ba:36:08:5d:b8:96:b6:74:80:5e:57:a1:d7:bc:
db:16:50:51:ec:59:19:1b:40:db:a0:eb:ea:e2:d1:
7e:cf:10:29:3f:27:55:b5:2a:bd:4d:fb:ff:b9:95:
9c:1f:06:95:5e:42:73:59:45:04:c5:9d:d0:66:30:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:37:83:F0:9E:D7:AE:44:87:EA:5D:C0:35:32:7B:75:34:59:04
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:8b:5b:fa:75:97:60:3c:df:26:f3:82:a0:8d:ec:f8:1c:
79:c3:87:19:52:9a:5f:49:4f:b7:12:cc:5d:97:2e:5d:c2:1b:
12:b5:c6:ee:9a:07:60:97:e3:42:7f:d2:99:d7:5d:78:16:60:
fd:1f:cb:9d:2c:db:c5:6e:ac:6e:e4:39:05:8f:57:17:9e:09:
4f:e9:9e:8c:a8:0e:60:d2:80:c9:b6:ba:0d:6a:57:1f:73:ba:
53:35:42:f1:3b:9a:1e:15:ad:b5:94:5e:48:e1:e8:82:22:61:
37:c4:ee:f6:08:dd:bf:98:01:0c:1d:7a:0d:6e:68:f5:ed:df:
b1:64:d5:cc:9f:a1:e5:27:a3:2c:79:f7:85:1a:65:1d:e8:d2:
8f:33:62:4f:4d:ee:85:8a:bd:ee:66:82:68:99:a0:5b:ea:f6:
ba:b1:af:48:3c:1c:71:ac:90:39:5c:f3:a7:36:b6:1b:aa:c7:
d1:ec:30:cb:2d:19:5d:c2:a3:c6:6b:25:be:aa:d7:3e:62:60:
2f:e4:c0:2f:c7:9f:73:b7:b2:2b:95:71:52:f3:2c:33:d8:a0:
90:16:65:94:7f:b2:36:0d:21:d0:63:82:05:95:5b:f0:09:53:
86:4a:76:d3:68:87:82:0b:35:75:b5:5e:63:a7:44:66:6b:29:
5d:ac:d3:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0U/cZ8C+gZ/lLcCcFyZ4rvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx
NzY4MWYwHhcNMjYwMzIyMTAwMTA4WhcNMjYwMzIzMTAwMTA4WjAzMTEwLwYDVQQD
EyhiMmUzMzc4M2YwOWVkN2FlNDQ4N2VhNWRjMDM1MzI3Yjc1MzQ1OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ZxRD8Qr5+uuAeoQfLlqMa9SQmu
uUcYsOgD5hhwqHNkFELohhTHLZhTtqmEXe6mBc6zMNWKgb8wsXzHwpTBAuYYfn8F
XtGRx2ikzunKaa8BoUzHXFa+G7o81r4CCwIMNgbHceUf2TEOB9XVDTMv2ebcJSxH
o+Y5woNcagEp7EvHT246vUQRn844tyZZuIOvByMad/0MyM4gIdOshcY0SM1scGGj
Nj6OSQNKfNZ1sFSWyAq3du6XG6KewkUlKWYnfG6PujYIXbiWtnSAXleh17zbFlBR
7FkZG0DboOvq4tF+zxApPydVtSq9Tfv/uZWcHwaVXkJzWUUExZ3QZjAq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLjN4PwnteuRIfqXcA1Mnt1NFkEMB8GA1UdIwQY
MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et
ODRlZTIyYTNlZTViLzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi
LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrmLW/p1
l2A83ybzgqCN7PgcecOHGVKaX0lPtxLMXZcuXcIbErXG7poHYJfjQn/SmdddeBZg
/R/LnSzbxW6sbuQ5BY9XF54JT+mejKgOYNKAyba6DWpXH3O6UzVC8TuaHhWttZRe
SOHogiJhN8Tu9gjdv5gBDB16DW5o9e3fsWTVzJ+h5SejLHn3hRplHejSjzNiT03u
hYq97maCaJmgW+r2urGvSDwccayQOVzzpza2G6rH0ewwyy0ZXcKjxmslvqrXPmJg
L+TAL8efc7eyK5VxUvMsM9igkBZllH+yNg0h0GOCBZVb8AlThkp202iHggs1dbVe
Y6dEZmspXazT8w==
-----END CERTIFICATE-----
Generated at Sun Mar 22 13:08:01 2026 by rpki-client