Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: Jiio9TZTcbESwB6f03MPjTWSPFs9jXJF/g5Gn+1+ldY=
Subject key identifier: 0C:5C:FC:23:06:C2:20:20:D8:2B:46:D2:5B:EA:E3:0D:1D:04:5D:BF
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019CA9462AF3E37829F20DB6DCE129358074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 07D6
Signing time: Sun 01 Mar 2026 12:01:13 +0000
Manifest this update: Sun 01 Mar 2026 12:01:13 +0000
Manifest next update: Mon 02 Mar 2026 12:01:13 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: w/+WcWY6srJr+lY6z45fPR4BeyYxKMwAvukEDsbs/Dc=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:2a:f3:e3:78:29:f2:0d:b6:dc:e1:29:35:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Mar 1 12:01:13 2026 GMT
Not After : Mar 2 12:01:13 2026 GMT
Subject: CN=0c5cfc2306c22020d82b46d25beae30d1d045dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:82:4c:61:99:90:15:a7:21:cd:f5:d9:dd:
f2:b4:e8:dd:c4:9d:db:73:f8:b5:a1:04:a3:2c:4d:
95:a9:74:1b:c3:28:8d:87:d9:c4:19:8a:4f:87:e1:
fa:b2:2e:25:0c:64:ce:2b:a5:68:c4:0b:df:3e:64:
db:5f:5a:6d:20:85:ad:5f:d9:49:9e:ce:94:d9:38:
98:b3:2b:2a:3c:01:ed:c7:02:86:35:1b:0b:46:69:
a0:82:bf:05:cd:b9:de:72:ea:f3:85:5f:5c:10:83:
10:87:db:80:f9:7f:57:22:a4:2a:d3:6f:76:00:a0:
91:24:31:ba:b1:38:fd:ce:cb:79:dd:0d:02:de:6a:
6f:31:9c:d0:22:86:79:3c:6f:01:7b:63:63:40:52:
26:da:c6:8c:f2:b8:0b:2e:98:b5:6a:8e:82:49:48:
6b:e0:ca:27:41:3d:2f:d1:8f:bd:b4:ea:06:be:ea:
64:e4:b8:b6:c5:71:e8:68:cc:be:a6:ea:99:8f:50:
00:ad:6e:cc:32:d4:8e:8a:1f:78:e9:d7:80:67:db:
53:85:fe:07:26:e8:83:0a:de:d5:a9:88:de:3a:69:
13:1e:2b:93:1a:f3:26:60:d3:82:97:55:e4:ff:ee:
55:c8:59:6f:ee:4c:0f:11:ca:ef:fe:58:5d:ba:57:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:FC:23:06:C2:20:20:D8:2B:46:D2:5B:EA:E3:0D:1D:04:5D:BF
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b6:49:14:d0:d5:37:00:c4:aa:b6:ec:26:f7:97:e1:ef:09:
30:97:0a:37:b5:0e:9c:64:97:c4:1d:76:d0:53:89:94:72:7d:
fa:7b:34:86:55:79:e9:1c:ae:12:09:e5:5c:b1:04:a3:82:82:
06:af:dc:8b:79:92:d1:1d:09:00:35:0e:a0:1b:4b:b3:db:91:
00:1c:44:e6:b2:7d:d1:05:a4:1b:8c:47:5c:75:fd:51:e3:8b:
2d:e1:85:f3:6f:c4:a8:a1:7c:0a:9f:2d:01:e8:40:cf:ab:d8:
85:5a:29:56:b5:8c:e2:3e:4a:fe:b2:11:31:76:5f:6a:d9:96:
0b:f0:d3:61:ed:b5:ec:03:c0:99:6b:8c:1c:5c:3c:ae:59:43:
28:c0:4d:8e:f6:b4:2f:89:b1:23:b8:d7:ab:2e:03:ad:7f:a3:
ae:5b:67:00:94:20:17:7b:d1:6f:1a:1a:64:a4:20:63:17:09:
fe:1a:f5:9c:e1:4e:15:06:7d:57:c0:5a:8c:2c:ab:20:91:35:
24:4a:9a:2a:84:66:b7:04:d0:11:eb:a6:57:0b:02:9b:fe:c2:
5b:e4:bb:d6:4a:9e:89:26:6b:fa:c0:5d:f3:2b:99:b5:e7:12:
86:20:59:1c:a1:46:dd:5d:7e:ce:80:07:99:3c:c9:13:66:6f:
56:7e:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:38 2026 by rpki-client