Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: E4iLBtAdAVVvc+9E7+ndd4irUoYK8yYwwRcz3/5zznw=
Subject key identifier: 04:6D:B7:5B:6F:EC:B7:65:2C:66:5A:87:F2:D5:23:19:E0:34:BC:94
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019D375324E4912919EDB6060604EBAD11A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:28 +0000
Manifest this update: Sun 29 Mar 2026 02:01:28 +0000
Manifest next update: Mon 30 Mar 2026 02:01:28 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: vlaucj1LIeFoFFaMZzL9lh9rZuY3m6UU2Rbwj6TaIu0=)
2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:24:e4:91:29:19:ed:b6:06:06:04:eb:ad:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Mar 29 02:01:28 2026 GMT
Not After : Mar 30 02:01:28 2026 GMT
Subject: CN=046db75b6fecb7652c665a87f2d52319e034bc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:45:84:43:ae:6f:25:62:16:76:4f:93:07:
9f:62:b4:3c:77:96:e0:73:6d:1b:a7:9a:ce:04:9a:
bb:9b:a6:5f:ee:b9:37:ae:91:b8:7b:fc:d1:8e:58:
be:00:8c:57:93:78:16:a6:af:68:9b:e2:fc:04:62:
d3:db:0f:fc:2c:70:6d:c2:7a:0a:f7:da:04:52:05:
3d:e1:af:8e:74:b3:74:4f:89:11:f8:f7:48:55:8b:
38:0c:03:ff:16:56:53:f2:5e:5a:fd:a2:1b:7a:45:
24:51:b0:4d:39:08:4e:c1:e8:d8:78:4b:c2:8d:20:
c9:f9:f1:0b:72:66:bc:81:05:98:01:ed:6c:1c:0d:
55:96:98:36:4e:73:0d:41:2a:5d:2f:0e:b6:fc:50:
4c:74:a7:cc:64:15:b5:2b:11:d0:9c:8a:f4:0b:74:
67:ad:4c:62:53:18:df:a7:14:6a:46:e1:83:3a:b3:
ef:35:4a:e3:72:eb:b6:4b:b1:1d:56:4c:c9:4e:28:
45:2b:e0:53:86:2b:75:84:64:15:5a:25:67:46:b1:
26:47:42:4b:bc:9b:fa:df:51:6c:fd:ce:fe:65:84:
ec:96:65:bf:60:fb:12:c3:91:21:3d:8e:03:cd:e0:
e7:13:c2:24:0f:df:69:d8:3b:73:ff:00:e4:85:1c:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:B7:5B:6F:EC:B7:65:2C:66:5A:87:F2:D5:23:19:E0:34:BC:94
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:b9:a9:6c:1f:1b:2c:d0:04:3f:e7:3d:49:b7:8b:d2:1a:
36:70:30:ba:8f:cd:6b:7d:21:ee:3a:5d:f3:32:25:4a:db:40:
b7:0e:44:8a:62:f7:21:5d:cc:56:bf:58:a0:e8:7b:a0:ca:82:
db:32:55:5d:e6:f6:bd:0d:e6:2b:55:a5:e7:21:31:82:c7:16:
3c:fa:c4:cf:e5:2e:cc:0e:58:3c:88:77:df:74:4b:aa:1b:c0:
89:b2:5f:6c:3f:a9:0b:36:f9:32:09:fc:de:88:70:0a:58:eb:
a9:b8:5b:fb:0f:eb:09:ca:17:0d:ab:28:dc:be:e2:b9:a2:79:
e0:57:9b:9c:9e:b8:14:1b:42:25:af:84:06:15:a5:b8:b9:43:
47:e7:5a:60:33:86:c9:a0:c1:cb:28:05:b5:1b:84:a6:a9:d8:
38:19:d9:92:94:7c:89:68:41:56:5a:08:4d:04:97:88:3f:7e:
e4:ff:e2:6e:14:b8:4c:b7:96:fd:2a:52:4b:ca:85:b3:e3:ad:
e0:e5:67:c1:2c:ad:ed:84:de:ae:6c:4d:4b:6d:6c:92:be:ee:
2a:75:7e:26:7c:63:08:33:fe:54:d7:de:44:34:7e:e9:82:88:
ad:82:df:35:56:ba:7c:8b:97:a4:64:19:9b:47:52:31:44:30:
ea:78:76:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UyTkkSkZ7bYGBgTrrRGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNWU1Mjg1ZGVkYzM1YWI2MzUyNzA0OGIzNjZlZTU1Mzgw
NmNlMDQwHhcNMjYwMzI5MDIwMTI4WhcNMjYwMzMwMDIwMTI4WjAzMTEwLwYDVQQD
EygwNDZkYjc1YjZmZWNiNzY1MmM2NjVhODdmMmQ1MjMxOWUwMzRiYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkilFhEOubyViFnZPkwefYrQ8d5bg
c20bp5rOBJq7m6Zf7rk3rpG4e/zRjli+AIxXk3gWpq9om+L8BGLT2w/8LHBtwnoK
99oEUgU94a+OdLN0T4kR+PdIVYs4DAP/FlZT8l5a/aIbekUkUbBNOQhOwejYeEvC
jSDJ+fELcma8gQWYAe1sHA1Vlpg2TnMNQSpdLw62/FBMdKfMZBW1KxHQnIr0C3Rn
rUxiUxjfpxRqRuGDOrPvNUrjcuu2S7EdVkzJTihFK+BThit1hGQVWiVnRrEmR0JL
vJv631Fs/c7+ZYTslmW/YPsSw5EhPY4DzeDnE8IkD99p2Dtz/wDkhRwUxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARtt1tv7LdlLGZah/LVIxngNLyUMB8GA1UdIwQY
MBaAFANeUoXe3DWrY1JwSLNm7lU4Bs4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmIt
MmMyNzA3NzM2ZmRiLzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mMTk0NGItMTAxYS00MTgxLWEzNmItMmMyNzA3NzM2ZmRi
LzEvQTE1U2hkN2NOYXRqVW5CSXMyYnVWVGdHemdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYW5qWwf
GyzQBD/nPUm3i9IaNnAwuo/Na30h7jpd8zIlSttAtw5EimL3IV3MVr9YoOh7oMqC
2zJVXeb2vQ3mK1Wl5yExgscWPPrEz+UuzA5YPIh333RLqhvAibJfbD+pCzb5Mgn8
3ohwCljrqbhb+w/rCcoXDaso3L7iuaJ54FebnJ64FBtCJa+EBhWluLlDR+daYDOG
yaDByygFtRuEpqnYOBnZkpR8iWhBVloITQSXiD9+5P/ibhS4TLeW/SpSS8qFs+Ot
4OVnwSyt7YTermxNS21skr7uKnV+JnxjCDP+VNfeRDR+6YKIrYLfNVa6fIuXpGQZ
m0dSMUQw6nh2Ow==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:04 2026 by rpki-client