Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: CvsmeZTlFh15zSeFv+nkIjnbxzE3fVRmKY3Mx4pg3Ac=
Subject key identifier: 76:94:4F:B4:12:52:C8:95:8C:4E:E5:C7:5E:E2:27:A2:39:DF:B8:2F
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019F0E889DA85C5219C8B6FBFA44FF278EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1987
Signing time: Sun 28 Jun 2026 14:01:01 +0000
Manifest this update: Sun 28 Jun 2026 14:01:01 +0000
Manifest next update: Mon 29 Jun 2026 14:01:01 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: AdsOGTGA1cKvyv61RUvqy5KiyrgADRpGvQeV5njJu1Y=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:88:9d:a8:5c:52:19:c8:b6:fb:fa:44:ff:27:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jun 28 14:01:01 2026 GMT
Not After : Jun 29 14:01:01 2026 GMT
Subject: CN=76944fb41252c8958c4ee5c75ee227a239dfb82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:56:c6:68:f7:83:46:32:bf:7d:78:62:98:
b3:a1:a9:8d:82:c2:a9:a6:75:1f:db:54:f8:3f:88:
09:7f:e3:e3:d7:47:db:cb:4b:3f:9c:19:b2:a8:ec:
09:cd:60:4c:96:5f:ce:e7:26:93:9e:d9:2d:cb:3c:
d2:dc:fc:c1:7d:c2:13:08:10:2f:d0:03:4c:e4:fe:
10:c9:79:1e:07:da:2b:5b:b4:0a:5f:cd:26:88:a9:
f9:bf:1c:cf:a7:b1:14:59:09:c8:4e:4c:42:ae:e0:
ff:57:40:db:9e:d9:af:6b:18:ee:25:3b:91:b2:97:
5d:65:92:8e:fe:5f:a6:0f:5e:97:29:5d:46:55:c9:
0d:43:85:c8:12:e3:84:ca:a9:f3:77:65:94:f4:74:
3c:3b:c2:ee:fc:f3:c5:7c:6d:04:06:de:f7:32:b3:
aa:63:2d:02:8b:60:1b:fd:34:88:ab:c6:3e:94:40:
e9:b3:ba:c5:dc:a7:55:63:34:d9:eb:54:70:22:30:
b8:e4:c4:db:6b:92:d7:c4:54:fb:bd:c2:b7:ae:a4:
73:6e:9a:45:ce:65:16:20:4d:48:16:48:c3:80:7e:
a6:46:b5:07:74:84:b6:ad:fd:4b:6c:9c:0e:49:be:
20:30:55:64:3b:65:22:14:ae:0b:42:9d:b3:88:99:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:4F:B4:12:52:C8:95:8C:4E:E5:C7:5E:E2:27:A2:39:DF:B8:2F
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:03:42:35:d0:56:2c:e7:09:6c:64:de:bf:a0:e3:62:52:76:
6f:76:db:d7:f4:18:3b:65:d4:18:b7:3c:b4:f8:67:16:5a:97:
46:00:93:ce:d7:82:74:8a:27:a8:eb:6f:2c:41:11:43:f5:78:
16:51:04:46:bf:03:ec:63:10:54:cb:cb:b5:07:2d:4f:5c:1a:
b1:cd:92:59:af:34:dd:28:db:b0:be:3d:e6:27:c2:6c:e8:82:
89:af:d2:a2:44:fe:ad:08:3b:c2:a0:b3:b1:8f:cd:40:30:38:
22:a3:95:94:2d:3e:f7:47:a4:25:c1:a5:7e:17:b1:99:45:75:
38:77:65:49:4a:99:6d:5b:dc:12:d4:cf:93:3b:8a:f1:ee:d6:
e2:57:cf:9e:52:fc:94:8d:46:90:ef:5d:43:f5:dc:f1:bf:f4:
18:c2:f8:70:aa:8a:3c:cd:12:7b:0f:d5:87:54:13:5a:2f:46:
c0:2e:0e:52:3f:e5:fb:a6:b6:14:e2:59:05:c2:9a:43:0d:ac:
fc:77:7d:1f:65:55:d8:e5:70:4e:a2:d0:7c:95:1c:a6:43:36:
48:e7:ac:98:e9:67:45:5d:37:5e:fc:9d:7c:ed:46:ad:7a:d2:
2d:94:9c:18:3e:51:b7:ec:24:7a:87:33:8c:7a:04:80:88:e0:
27:64:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:52:05 2026 by rpki-client