Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: l55iv9AQ9iLl7GN2MG57NtJbI9XHB8j6nd8QC3fvd3o=
Subject key identifier: A6:FC:C3:90:07:E8:F6:4D:3C:83:29:A8:05:0A:09:57:92:13:DB:81
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019EBF912E2A021155A40658C87E684B5DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 06:00:23 +0000
Manifest this update: Sat 13 Jun 2026 06:00:23 +0000
Manifest next update: Sun 14 Jun 2026 06:00:23 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: 7al7xYYXUW+TQqru389w9nHUa8rPxDCnSEUy4gI0Ih8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:2e:2a:02:11:55:a4:06:58:c8:7e:68:4b:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jun 13 06:00:23 2026 GMT
Not After : Jun 14 06:00:23 2026 GMT
Subject: CN=a6fcc39007e8f64d3c8329a8050a09579213db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:16:b3:ec:6b:e2:7d:07:6b:7f:87:41:02:
77:c3:26:e4:5e:4d:8f:d3:82:43:e8:c7:b4:a8:7a:
52:f0:f6:0a:2d:4c:1f:c6:57:61:07:9b:e9:3c:b3:
a9:14:24:45:fd:6a:b6:c4:86:64:3c:ba:45:85:d1:
e0:9f:0a:ce:a5:04:25:d0:c1:59:34:2c:2f:c7:10:
08:12:f0:4a:b0:39:c8:06:ea:ee:4b:28:5c:95:c6:
8a:f5:36:60:83:66:46:78:85:d8:7a:43:13:80:53:
44:93:65:b6:8e:e7:26:68:71:bc:34:03:53:ff:2f:
cc:d5:26:fb:b0:01:d5:6d:8c:73:06:c8:fd:4a:56:
c2:4a:63:03:aa:41:9e:2a:cd:db:75:18:f4:81:a8:
7b:98:d6:c2:80:5e:ef:69:30:b2:0c:e3:df:a8:93:
9b:57:94:e6:5d:4d:8d:98:ea:45:21:e6:59:48:94:
39:1b:e3:0d:c2:99:0a:70:95:29:86:60:00:5a:51:
76:43:3f:4f:9c:27:20:55:1d:4e:2f:da:2c:32:2f:
44:58:e6:30:18:6b:81:96:3e:63:02:ff:62:da:22:
86:63:e3:62:bf:7e:72:89:db:04:f2:6c:1f:4b:68:
ad:da:dc:c8:92:49:80:a8:1a:92:b0:bb:77:0d:d0:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FC:C3:90:07:E8:F6:4D:3C:83:29:A8:05:0A:09:57:92:13:DB:81
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:22:63:ef:2a:ca:c5:0f:6f:6a:63:e5:b0:32:93:77:c2:db:
1c:a0:f7:02:49:02:eb:dc:15:c4:fd:c6:4c:4a:03:e6:ee:f7:
a5:37:e1:bc:ef:1f:48:72:62:99:c6:fc:cd:b7:c9:ad:c0:44:
ad:35:85:b1:78:74:a0:bd:2e:f1:b6:aa:0f:c1:7f:80:20:8f:
88:ed:b4:e7:26:ee:01:f1:9b:a6:25:da:f1:86:d0:a0:b6:2e:
12:07:1a:76:2f:99:38:7e:a0:0b:de:78:93:00:b7:1f:95:2e:
bc:eb:4e:5c:48:76:32:2e:e6:15:50:21:ae:64:82:fc:38:7e:
06:ed:6a:56:71:d0:5f:b1:00:67:3f:1d:90:19:94:1d:5b:94:
a1:44:08:0f:6d:f8:a6:e7:3d:33:e0:28:13:22:c6:db:75:89:
6b:19:03:cb:e4:fd:15:7e:1d:2e:a4:83:db:b6:ce:9b:4f:81:
b4:b6:0a:55:94:27:7f:6c:c4:11:af:d6:02:9f:42:ea:c4:4f:
d3:4a:09:1a:50:6e:13:21:94:bd:9f:04:aa:83:13:86:11:27:
b2:de:9c:7e:7c:84:c0:9a:08:12:bc:ca:b7:b9:da:67:9c:d0:
51:be:e9:a2:db:6a:0d:e8:8d:dd:d4:ae:58:31:f5:d3:99:79:
da:4b:e8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:02:37 2026 by rpki-client