Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: ZEPLajyV7QU7TcRBPyntdYC8naHiee5DmHVL5UuRt/0=
Subject key identifier: AC:69:30:70:6A:A7:6B:35:06:CD:61:29:0C:47:C0:33:AB:39:2D:E3
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019CAC7E28DE2C09085B042F1FFE917BF207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: dHVlT4EXOLWuCZJRhcSWjfN5TMmEkYeZW2QSsuAazKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:28:de:2c:09:08:5b:04:2f:1f:fe:91:7b:f2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=ac6930706aa76b3506cd61290c47c033ab392de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:b0:87:03:06:ab:4e:4d:5c:5f:a0:28:af:
d3:7b:69:19:9a:ec:bb:95:9b:38:c7:58:01:74:ae:
84:a0:ec:f8:0f:1c:17:75:38:1a:0d:b8:d7:93:1d:
02:d4:0a:19:cf:69:02:c7:32:4c:1f:6d:63:a8:e9:
0b:9f:9e:fe:bb:f2:d0:9d:43:bb:2f:45:f5:71:10:
a0:16:5b:2e:95:99:e6:0e:fb:66:12:3a:8b:5e:fc:
ee:4b:0b:66:fa:c0:85:5d:a4:50:f4:60:d4:36:02:
1d:c1:bc:7b:58:ab:a6:ff:d9:a6:7a:6f:d9:a5:3a:
41:b5:32:ed:8b:86:a1:c5:06:d8:95:89:07:03:ab:
11:9f:c6:1c:e3:12:ac:d0:30:65:ef:0e:42:b4:2f:
8d:99:4d:44:a0:52:f6:55:28:3f:e3:a5:13:5b:bc:
27:74:ed:57:02:ff:a9:73:0d:bc:8e:ef:92:5d:b3:
69:53:44:f4:ff:c9:5e:df:1e:3e:35:c9:f8:dc:07:
53:29:3e:6a:a6:11:cb:ec:b5:be:42:2b:f3:db:46:
92:f4:46:37:a6:b9:59:0b:68:cf:8c:7b:21:61:f3:
58:39:a3:d8:9a:13:5f:69:19:fa:5d:d8:bf:86:34:
5b:8c:42:06:3d:e1:90:57:d3:d3:53:0c:cf:3b:45:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:30:70:6A:A7:6B:35:06:CD:61:29:0C:47:C0:33:AB:39:2D:E3
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:34:b0:7d:53:79:97:f6:60:a3:c7:3e:33:21:20:2d:09:3f:
20:42:df:a3:89:d7:eb:71:c9:9b:cb:5c:64:19:d6:0e:bf:0e:
22:8d:af:21:cb:7a:07:9e:4a:3a:3c:24:e8:08:ad:71:a6:da:
df:da:a7:77:1b:ae:d6:1e:a0:db:fc:74:35:b4:5f:a5:fc:a5:
65:b3:c3:6b:14:f5:ab:f2:9e:9f:27:d4:f1:1e:5b:d4:e3:bc:
53:0a:4b:fb:32:1c:7c:e9:0a:1f:b9:f5:e0:84:60:6c:d5:04:
90:97:c2:d8:75:32:b2:d1:2f:88:31:87:9d:67:ee:21:09:e8:
0b:9e:70:66:68:51:44:7b:c5:8e:64:4e:88:94:22:28:0b:66:
99:5a:b6:b6:b6:f3:8b:c2:c8:1c:5d:24:37:8f:9e:f0:39:6f:
1c:67:ee:77:88:27:d7:ef:d5:a5:e0:88:ef:2d:13:57:63:5d:
ed:b7:a6:85:d8:96:f7:e6:c8:07:bf:d5:11:f2:30:48:d8:b6:
1d:ae:0a:28:d7:ca:f3:6b:04:b4:83:d5:1b:7c:0a:bf:6e:73:
99:33:c2:49:6e:67:96:d2:78:35:a0:56:e6:d9:c0:6e:4d:7f:
ab:ce:8b:6c:44:76:1d:dc:c7:60:30:0b:1f:24:79:97:2d:57:
6d:67:15:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfijeLAkIWwQvH/6Re/IHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjYwMzAyMDMwMTE0WhcNMjYwMzAzMDMwMTE0WjAzMTEwLwYDVQQD
EyhhYzY5MzA3MDZhYTc2YjM1MDZjZDYxMjkwYzQ3YzAzM2FiMzkyZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx2whwMGq05NXF+gKK/Te2kZmuy7
lZs4x1gBdK6EoOz4DxwXdTgaDbjXkx0C1AoZz2kCxzJMH21jqOkLn57+u/LQnUO7
L0X1cRCgFlsulZnmDvtmEjqLXvzuSwtm+sCFXaRQ9GDUNgIdwbx7WKum/9mmem/Z
pTpBtTLti4ahxQbYlYkHA6sRn8Yc4xKs0DBl7w5CtC+NmU1EoFL2VSg/46UTW7wn
dO1XAv+pcw28ju+SXbNpU0T0/8le3x4+Ncn43AdTKT5qphHL7LW+Qivz20aS9EY3
prlZC2jPjHshYfNYOaPYmhNfaRn6Xdi/hjRbjEIGPeGQV9PTUwzPO0WyjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxpMHBqp2s1Bs1hKQxHwDOrOS3jMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDSwfVN5
l/Zgo8c+MyEgLQk/IELfo4nX63HJm8tcZBnWDr8OIo2vIct6B55KOjwk6Aitcaba
39qndxuu1h6g2/x0NbRfpfylZbPDaxT1q/KenyfU8R5b1OO8UwpL+zIcfOkKH7n1
4IRgbNUEkJfC2HUystEviDGHnWfuIQnoC55wZmhRRHvFjmROiJQiKAtmmVq2trbz
i8LIHF0kN4+e8DlvHGfud4gn1+/VpeCI7y0TV2Nd7bemhdiW9+bIB7/VEfIwSNi2
Ha4KKNfK82sEtIPVG3wKv25zmTPCSW5nltJ4NaBW5tnAbk1/q86LbER2HdzHYDAL
HyR5ly1XbWcVUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:32 2026 by rpki-client