Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: xIrhbSWPlP/LxyUouqUF0unH62CP9/4gzVFAJ3LRbGk=
Subject key identifier: 4F:40:75:4B:37:84:26:0A:C9:D3:F7:A2:6F:F2:67:1A:35:99:05:1E
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019D9818A38836E579B3001C542285A36B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:44 +0000
Manifest this update: Thu 16 Apr 2026 21:00:44 +0000
Manifest next update: Fri 17 Apr 2026 21:00:44 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: XpJ3szvH4ESby92V/GEr4P4vh/rVlFO6n99sk39zrh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a3:88:36:e5:79:b3:00:1c:54:22:85:a3:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Apr 16 21:00:44 2026 GMT
Not After : Apr 17 21:00:44 2026 GMT
Subject: CN=4f40754b3784260ac9d3f7a26ff2671a3599051e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:36:66:70:9c:b5:7f:cc:f6:cd:63:ed:41:
2f:6b:e3:71:0c:e7:18:fb:3c:26:ef:27:d3:46:ab:
9f:8c:17:77:7f:74:5e:f6:56:90:99:40:3e:3a:39:
a2:3b:f7:cd:1d:e8:61:a4:27:f8:a4:e0:bf:f6:92:
44:b6:e9:ef:57:b7:7b:1b:6d:34:7a:cf:46:f5:62:
e0:d8:d3:bd:d3:26:d8:61:45:9a:1a:6a:c8:01:98:
be:be:56:92:61:aa:7f:b4:ab:be:00:26:e2:48:d6:
2a:20:9c:ec:82:1b:51:fb:2d:1e:c0:83:44:83:8a:
e3:e1:ff:61:20:9b:74:fe:cf:4f:5c:14:f8:6e:b2:
9e:21:c8:6f:5b:7d:22:12:fe:82:ef:53:1f:38:dc:
c5:4f:89:c7:75:ea:bf:b1:1d:43:f2:79:67:05:d9:
63:af:a0:27:00:76:20:62:c8:43:76:b7:c3:46:ac:
3c:4f:97:9a:40:f8:d7:1e:b4:66:2c:7f:65:be:c8:
aa:13:4c:75:0b:09:d0:1a:36:22:83:1e:29:9b:4d:
db:6e:4f:f0:c8:0c:df:54:1d:ea:bc:f8:a1:bc:49:
ac:b9:fa:56:cb:c7:62:34:82:2b:bf:38:e7:fc:60:
33:f9:27:d0:c0:4a:4b:7b:2c:b7:6b:45:01:cf:29:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:75:4B:37:84:26:0A:C9:D3:F7:A2:6F:F2:67:1A:35:99:05:1E
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1e:51:9d:81:b8:2f:47:66:98:85:ff:a2:33:5f:b9:e4:78:
06:94:da:3b:da:90:8a:33:b1:5d:01:51:3d:c9:00:85:6b:b5:
00:12:30:07:65:19:6d:04:d2:09:91:eb:87:e2:51:74:80:2f:
ba:eb:d2:1e:1e:0f:7f:4f:93:6d:af:69:4c:11:14:34:73:3f:
b2:82:dc:7c:74:4c:bc:70:a3:cd:19:d6:31:fe:f0:ea:8b:71:
09:1b:1c:b4:39:d3:65:d8:3a:ec:52:29:b4:75:3b:1c:8e:eb:
40:b2:14:12:cf:19:01:ef:38:3f:8d:e2:f6:f8:74:f8:9c:67:
fb:d3:cf:d2:2c:69:08:3c:e3:33:9b:59:53:73:2e:27:af:24:
18:9a:d8:be:a8:eb:e2:9e:6f:33:71:c9:aa:a8:31:6e:50:c9:
bf:7c:36:ee:27:ff:45:da:ec:a5:22:50:b3:00:f9:9a:10:be:
49:56:10:1e:82:1d:af:e8:77:4c:73:f9:b6:3b:6c:86:b2:89:
e7:1c:87:c3:34:cd:83:cf:35:9c:bb:72:2a:41:e9:d8:61:62:
b0:45:0b:f3:56:9b:36:88:aa:98:1e:ba:ec:33:b3:07:0f:a1:
32:49:ec:a7:c6:0b:fe:ad:e2:bc:e3:9a:d8:b8:81:2f:76:87:
a9:94:1d:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGKOINuV5swAcVCKFo2suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjYwNDE2MjEwMDQ0WhcNMjYwNDE3MjEwMDQ0WjAzMTEwLwYDVQQD
Eyg0ZjQwNzU0YjM3ODQyNjBhYzlkM2Y3YTI2ZmYyNjcxYTM1OTkwNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA02ZnCctX/M9s1j7UEva+NxDOcY
+zwm7yfTRqufjBd3f3Re9laQmUA+OjmiO/fNHehhpCf4pOC/9pJEtunvV7d7G200
es9G9WLg2NO90ybYYUWaGmrIAZi+vlaSYap/tKu+ACbiSNYqIJzsghtR+y0ewINE
g4rj4f9hIJt0/s9PXBT4brKeIchvW30iEv6C71MfONzFT4nHdeq/sR1D8nlnBdlj
r6AnAHYgYshDdrfDRqw8T5eaQPjXHrRmLH9lvsiqE0x1CwnQGjYigx4pm03bbk/w
yAzfVB3qvPihvEmsufpWy8diNIIrvzjn/GAz+SfQwEpLeyy3a0UBzykdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9AdUs3hCYKydP3om/yZxo1mQUeMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyR5RnYG4
L0dmmIX/ojNfueR4BpTaO9qQijOxXQFRPckAhWu1ABIwB2UZbQTSCZHrh+JRdIAv
uuvSHh4Pf0+Tba9pTBEUNHM/soLcfHRMvHCjzRnWMf7w6otxCRsctDnTZdg67FIp
tHU7HI7rQLIUEs8ZAe84P43i9vh0+Jxn+9PP0ixpCDzjM5tZU3MuJ68kGJrYvqjr
4p5vM3HJqqgxblDJv3w27if/RdrspSJQswD5mhC+SVYQHoIdr+h3THP5tjtshrKJ
5xyHwzTNg881nLtyKkHp2GFisEUL81abNoiqmB667DOzBw+hMknsp8YL/q3ivOOa
2LiBL3aHqZQd8w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:15 2026 by rpki-client