Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: lpDiFa49qYTqc9nvoThMmfulDyauU6MS0TIitmcrqC8=
Subject key identifier: D1:23:2C:6F:8C:9D:29:F2:AB:C4:F6:25:A2:28:F3:0B:89:3F:1B:93
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 019D9BBE5C5D105554BC593A1520CC38D389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 09A1
Signing time: Fri 17 Apr 2026 14:00:37 +0000
Manifest this update: Fri 17 Apr 2026 14:00:37 +0000
Manifest next update: Sat 18 Apr 2026 14:00:37 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: D80i+1Gj816GCsiGloNujeSjQ7SpJ/EszWwvJcLwql8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:5c:5d:10:55:54:bc:59:3a:15:20:cc:38:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Apr 17 14:00:37 2026 GMT
Not After : Apr 18 14:00:37 2026 GMT
Subject: CN=d1232c6f8c9d29f2abc4f625a228f30b893f1b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:54:4c:1c:16:bf:5d:28:06:08:f9:59:ad:
fe:80:b8:5b:9e:db:9d:56:04:29:50:9e:ce:d9:58:
bf:4f:2b:d9:c0:2e:b6:2d:91:c4:bd:37:be:25:76:
50:8f:01:ef:f7:17:b0:87:5d:a1:c9:32:dc:85:99:
56:69:77:23:c7:bb:28:1f:af:c3:09:ae:e9:6c:d3:
0f:74:ed:b0:ca:74:ab:7b:97:c8:a4:18:d1:e6:4d:
df:e0:75:e6:f8:85:e4:c1:0f:4b:f0:70:59:6f:bc:
d1:ee:18:f9:fd:65:87:41:47:49:03:4f:65:55:6a:
4a:cb:0b:0f:f5:16:1f:2b:85:64:c4:7c:a0:44:9d:
03:cc:05:e6:57:c5:e7:09:d1:10:cd:f9:e6:cc:e8:
e4:74:38:5a:64:7b:c2:f1:35:3e:20:ca:f8:e9:a9:
8d:30:d6:44:06:69:cc:1c:e8:22:c5:70:62:99:7e:
17:6e:23:e4:eb:35:b9:10:46:18:f7:94:1e:ab:7e:
72:e2:db:00:cd:67:56:93:08:b1:b7:de:19:3e:b2:
d3:ff:f2:dd:4c:2a:84:3a:e5:ff:01:be:05:78:e2:
a0:42:a9:a5:64:78:90:f6:59:a4:0a:5d:1b:7f:f6:
54:3e:14:6b:64:15:60:5d:6f:8b:db:ce:d6:9d:c7:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:2C:6F:8C:9D:29:F2:AB:C4:F6:25:A2:28:F3:0B:89:3F:1B:93
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:09:cb:aa:46:8b:82:1a:a6:7d:38:f2:25:ae:ef:7c:3d:e9:
26:b3:90:9b:9c:fb:54:7a:65:12:4c:8e:19:2b:9c:e0:8f:23:
53:d8:c1:1d:82:59:4b:d7:18:7b:ba:7b:b2:85:38:4f:d4:fe:
c7:06:30:b9:76:67:83:5c:1e:20:5e:fc:7b:be:ae:12:c1:5d:
79:c0:78:37:1f:7a:07:89:9d:68:2b:76:da:38:2a:28:84:87:
cf:37:61:36:8f:a5:8e:d1:99:73:90:99:21:2b:85:71:81:be:
90:a9:ac:2e:db:4f:4d:87:84:36:25:34:ce:1d:44:52:7a:6f:
0b:5d:63:80:3d:ce:bf:9f:68:2a:bc:21:9f:9a:75:ee:a9:df:
f4:e8:3b:ca:44:e4:3b:45:58:c8:89:d7:b7:38:5e:9d:80:7b:
ea:87:47:d0:ea:e1:9f:fe:87:53:ce:86:b4:43:1d:06:0a:f8:
40:44:1c:3c:66:19:8d:0b:a0:2e:a3:66:92:ce:fa:a3:40:be:
1a:51:0d:e3:84:91:c6:ed:c8:e6:66:3b:8c:47:f2:9c:57:b4:
00:98:2d:04:c1:0d:9e:c0:b0:b1:f7:42:e1:5a:3a:9b:70:e9:
7a:65:5c:fa:1e:ea:db:d3:ca:0a:76:ef:4d:f1:c1:f0:6c:5e:
c0:4a:1c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvlxdEFVUvFk6FSDMONOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYWQ2MzY1MjMxZWQ3OTM5Njk0MDkyMDE0OWRmNzFjMGFh
MDhlMWYwHhcNMjYwNDE3MTQwMDM3WhcNMjYwNDE4MTQwMDM3WjAzMTEwLwYDVQQD
EyhkMTIzMmM2ZjhjOWQyOWYyYWJjNGY2MjVhMjI4ZjMwYjg5M2YxYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVhUTBwWv10oBgj5Wa3+gLhbntud
VgQpUJ7O2Vi/TyvZwC62LZHEvTe+JXZQjwHv9xewh12hyTLchZlWaXcjx7soH6/D
Ca7pbNMPdO2wynSre5fIpBjR5k3f4HXm+IXkwQ9L8HBZb7zR7hj5/WWHQUdJA09l
VWpKywsP9RYfK4VkxHygRJ0DzAXmV8XnCdEQzfnmzOjkdDhaZHvC8TU+IMr46amN
MNZEBmnMHOgixXBimX4XbiPk6zW5EEYY95Qeq35y4tsAzWdWkwixt94ZPrLT//Ld
TCqEOuX/Ab4FeOKgQqmlZHiQ9lmkCl0bf/ZUPhRrZBVgXW+L287Wncc6iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEjLG+MnSnyq8T2JaIo8wuJPxuTMB8GA1UdIwQY
MBaAFAOtY2UjHteTlpQJIBSd9xwKoI4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTkt
NDE0OWRlNTI4ODMzLzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yMzM5NDgtZjlhMy00YjQ0LWE0YTktNDE0OWRlNTI4ODMz
LzEvQTYxalpTTWUxNU9XbEFrZ0ZKMzNIQXFnamg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAnLqkaL
ghqmfTjyJa7vfD3pJrOQm5z7VHplEkyOGSuc4I8jU9jBHYJZS9cYe7p7soU4T9T+
xwYwuXZng1weIF78e76uEsFdecB4Nx96B4mdaCt22jgqKISHzzdhNo+ljtGZc5CZ
ISuFcYG+kKmsLttPTYeENiU0zh1EUnpvC11jgD3Ov59oKrwhn5p17qnf9Og7ykTk
O0VYyInXtzhenYB76odH0Orhn/6HU86GtEMdBgr4QEQcPGYZjQugLqNmks76o0C+
GlEN44SRxu3I5mY7jEfynFe0AJgtBMENnsCwsfdC4Vo6m3DpemVc+h7q29PKCnbv
TfHB8GxewEocMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:48 2026 by rpki-client