Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: sO0410zWFjIEGOzR8r2KmYjiKFbIr0zWT3hfbvVasUs=
Subject key identifier: 1D:EC:F4:A4:E5:A6:18:67:DE:E2:D4:71:88:70:77:99:66:C9:DF:1B
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019FA9E265580E2FB0D6D5EF3D571DA6573A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0964
Signing time: Tue 28 Jul 2026 18:00:14 +0000
Manifest this update: Tue 28 Jul 2026 18:00:14 +0000
Manifest next update: Wed 29 Jul 2026 18:00:14 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: C+ogx//NFEaC2hQBcQNzLGcNyO3cNPKQYjN9AjEROuI=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:65:58:0e:2f:b0:d6:d5:ef:3d:57:1d:a6:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jul 28 18:00:14 2026 GMT
Not After : Jul 29 18:00:14 2026 GMT
Subject: CN=1decf4a4e5a61867dee2d4718870779966c9df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:12:db:e6:3b:2a:23:f5:38:af:0f:92:1e:
4b:3a:53:00:0e:52:f7:b4:66:ef:b1:b5:6a:70:cf:
99:70:a6:6a:41:49:ad:bd:25:52:f5:4c:d5:8c:ac:
3e:9e:b6:b7:b6:01:de:01:e5:d2:2a:03:e5:b4:47:
b2:4a:21:a2:29:da:3a:59:f0:e1:8d:77:18:26:5d:
67:9e:91:b8:c3:49:d4:b9:1e:1c:13:55:a5:9a:b1:
37:c4:1d:9c:d2:9c:3b:1f:de:e9:89:3d:90:3f:69:
79:44:a1:f9:39:d2:77:31:b8:da:c0:7d:52:0f:37:
ea:db:58:7a:ba:97:23:06:14:4a:1d:43:af:8f:2f:
d0:2c:01:87:6d:f4:44:c0:3d:56:cf:7d:ba:29:72:
fd:c9:2b:2a:fc:05:a8:fb:f2:6f:18:d2:5b:0d:f6:
24:2c:8c:24:c9:f3:b7:0f:df:e1:0f:bb:72:63:50:
47:f1:01:57:d6:87:81:58:62:7c:04:ff:92:a6:16:
e0:44:d8:e5:33:72:7e:a2:7b:ad:e7:ca:fa:21:70:
63:63:79:ae:72:14:77:65:48:30:97:69:c8:dc:8f:
8c:b4:d3:08:f3:71:ae:f1:ae:40:e5:0a:93:e3:1a:
04:d2:3c:45:46:a7:20:d0:39:bd:7a:11:d9:c8:50:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:F4:A4:E5:A6:18:67:DE:E2:D4:71:88:70:77:99:66:C9:DF:1B
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:3a:cd:d0:8c:cc:a1:f0:82:59:aa:0d:62:5a:29:a3:bc:
ac:0f:67:e9:d8:61:00:82:a2:ed:1a:2c:ad:f9:6f:56:2f:e6:
93:d1:0e:5b:13:36:d1:e9:41:89:42:4f:d2:37:1e:b0:40:56:
88:2c:10:72:9d:f7:8a:6c:41:be:e8:0d:0a:de:92:b6:e1:30:
89:ed:63:6a:e8:c5:bb:ec:b5:87:2f:cd:64:25:a9:8b:36:2f:
6f:2b:f7:f8:fb:93:d5:c2:5a:f0:69:b5:bd:cb:96:34:2c:6a:
6c:0b:33:71:fc:fd:e8:09:72:90:9a:5d:08:7b:61:b5:54:8d:
0e:fe:f3:ed:c1:38:c0:72:6e:51:d3:e2:2f:0d:e9:15:95:dd:
f0:c3:99:aa:43:73:62:08:b1:54:b6:c2:cb:fd:78:d1:ff:1e:
3e:af:92:ea:77:d6:8e:7b:28:47:c5:df:92:f1:bd:53:92:fd:
b1:21:2e:7d:c9:0f:e1:dd:b1:dd:0c:19:20:9e:dd:7a:5a:8e:
35:4a:27:86:08:f9:b2:c0:16:b5:78:0f:b1:f5:dc:a7:29:8a:
49:92:c6:07:6b:fa:f2:76:f2:84:9f:5b:9c:0b:3a:2b:2d:74:
f7:94:86:4e:67:a8:9f:bc:d4:bb:9c:dd:39:e9:99:a7:06:44:
11:b2:c9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:13:06 2026 by rpki-client