Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: 4/rKO3qBJBwQu5smz32GIyyFIgi8Oi2x6BwjZeftL98=
Subject key identifier: B7:88:CD:EE:F5:F2:E7:F6:37:66:1A:BA:0D:56:99:A3:2D:05:3F:D8
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019FA93E6D6E20821DED9006F380A92F0ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 15:01:08 +0000
Manifest this update: Tue 28 Jul 2026 15:01:08 +0000
Manifest next update: Wed 29 Jul 2026 15:01:08 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: mbIGAF08kWID2TcMkbHVtGe/Xqme2Elp/NiOXmOCXrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:6d:6e:20:82:1d:ed:90:06:f3:80:a9:2f:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jul 28 15:01:08 2026 GMT
Not After : Jul 29 15:01:08 2026 GMT
Subject: CN=b788cdeef5f2e7f637661aba0d5699a32d053fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:c5:11:e9:cb:00:fd:79:c3:95:b0:d7:6b:
1f:3a:ad:9e:6e:7a:6d:ee:be:0b:01:83:e6:2a:24:
11:40:5e:9d:ea:4e:4c:52:a7:ef:40:6c:3c:ce:9f:
d1:16:2b:3a:bb:4b:ed:d4:18:1c:9c:c5:f9:ff:11:
31:ce:78:6a:1c:eb:fb:72:78:51:1c:6e:53:3a:28:
ee:2d:a6:4f:93:cf:91:b9:63:69:fd:ca:8f:ab:b6:
03:76:aa:ba:f2:ee:87:14:8f:50:ca:ed:01:d8:03:
e8:cc:4b:ef:5b:e5:de:32:6b:8d:ee:21:0b:9a:71:
91:c5:7b:ac:9e:fb:af:70:1c:94:83:b9:c2:ad:10:
77:9a:ae:66:b1:99:ce:53:90:da:3c:77:c0:73:01:
8b:e8:c7:ff:ae:41:87:c8:3e:b8:5a:d7:c3:e6:9a:
98:c1:1d:69:22:17:2c:9f:9c:8b:17:0e:d8:3e:e5:
1c:57:cd:d1:bc:3b:98:fb:5c:de:c3:3c:0c:e7:2a:
52:5f:83:33:68:4e:2e:94:0f:fe:68:30:86:fc:f9:
80:a2:46:b6:2b:5f:d3:29:4f:0b:b1:fc:d5:af:ce:
57:1e:94:09:f5:f9:a7:d3:ca:29:08:e0:71:97:ac:
05:c4:3a:ab:64:9d:93:87:e9:df:0a:e2:92:e0:55:
a8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:88:CD:EE:F5:F2:E7:F6:37:66:1A:BA:0D:56:99:A3:2D:05:3F:D8
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:be:f6:36:ff:d8:43:81:97:0d:2e:02:1a:38:0e:f2:e0:80:
7d:fa:bb:3e:bd:57:88:63:88:01:5d:1b:e4:18:d6:07:9f:64:
de:dc:4b:76:7b:3b:1d:de:45:24:95:c9:76:3c:3c:cd:95:28:
fc:0e:45:00:26:e2:36:58:65:e7:5f:13:f4:25:e6:39:7e:a4:
7e:e4:b1:69:85:ff:b8:c4:92:42:b1:2d:ff:90:dc:f4:40:e1:
10:c4:f4:73:d9:dd:b5:24:ed:5b:d0:59:bd:ca:ee:fc:17:86:
6a:b8:fa:d1:aa:e4:0b:23:3b:c7:2f:3c:82:f8:c7:dc:76:d6:
e2:dd:22:86:0c:bc:84:81:07:32:d8:53:cc:8b:fa:b9:9c:eb:
d2:cd:03:e8:76:42:b6:15:c2:82:17:0e:d1:00:27:d2:a4:ba:
3d:bd:6a:6e:0f:80:08:3d:ec:75:ef:6f:23:f0:7a:9c:27:84:
a1:98:26:02:8c:9e:4f:97:3e:44:76:92:67:bf:82:b3:52:f1:
97:b8:2f:77:07:ee:d0:cf:db:57:6f:89:11:56:88:e6:f2:a8:
fe:ab:3f:dc:9f:6e:bf:94:bd:99:90:72:33:b9:93:53:77:82:
ee:22:b0:61:2a:63:5b:ff:cd:a3:2d:b6:90:41:23:56:9b:58:
6c:6b:f5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPm1uIIId7ZAG84CpLw7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTM2ZTFhNjhlOTQ0YjIzNDc5MDhiOGJkZmU3NzQwZDhl
OGFhNDMwHhcNMjYwNzI4MTUwMTA4WhcNMjYwNzI5MTUwMTA4WjAzMTEwLwYDVQQD
EyhiNzg4Y2RlZWY1ZjJlN2Y2Mzc2NjFhYmEwZDU2OTlhMzJkMDUzZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXnFEenLAP15w5Ww12sfOq2ebnpt
7r4LAYPmKiQRQF6d6k5MUqfvQGw8zp/RFis6u0vt1BgcnMX5/xExznhqHOv7cnhR
HG5TOijuLaZPk8+RuWNp/cqPq7YDdqq68u6HFI9Qyu0B2APozEvvW+XeMmuN7iEL
mnGRxXusnvuvcByUg7nCrRB3mq5msZnOU5DaPHfAcwGL6Mf/rkGHyD64WtfD5pqY
wR1pIhcsn5yLFw7YPuUcV83RvDuY+1zewzwM5ypSX4MzaE4ulA/+aDCG/PmAoka2
K1/TKU8LsfzVr85XHpQJ9fmn08opCOBxl6wFxDqrZJ2Th+nfCuKS4FWo3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeIze718uf2N2Yaug1WmaMtBT/YMB8GA1UdIwQY
MBaAFANTbhpo6USyNHkIuL3+d0DY6KpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzkt
NWEzNzdjODc5MWY1LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNTRlYTItOTc0Zi00NGIxLWIyMzktNWEzNzdjODc5MWY1
LzEvQTFOdUdtanBSTEkwZVFpNHZmNTNRTmpvcWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL72Nv/Y
Q4GXDS4CGjgO8uCAffq7Pr1XiGOIAV0b5BjWB59k3txLdns7Hd5FJJXJdjw8zZUo
/A5FACbiNlhl518T9CXmOX6kfuSxaYX/uMSSQrEt/5Dc9EDhEMT0c9ndtSTtW9BZ
vcru/BeGarj60arkCyM7xy88gvjH3HbW4t0ihgy8hIEHMthTzIv6uZzr0s0D6HZC
thXCghcO0QAn0qS6Pb1qbg+ACD3sde9vI/B6nCeEoZgmAoyeT5c+RHaSZ7+Cs1Lx
l7gvdwfu0M/bV2+JEVaI5vKo/qs/3J9uv5S9mZByM7mTU3eC7iKwYSpjW//Noy22
kEEjVptYbGv1/A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:02 2026 by rpki-client