Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: jn4FF+TM3+H1HLtNMt4jNAKF0BCfF5c4wlOpFhF5WwM=
Subject key identifier: 9C:62:60:79:C0:97:C0:6A:DF:0B:76:3E:89:E8:CC:B4:0B:73:E9:35
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019D98BDD27E280E7312DADA75C719D7AFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0852
Signing time: Fri 17 Apr 2026 00:01:09 +0000
Manifest this update: Fri 17 Apr 2026 00:01:09 +0000
Manifest next update: Sat 18 Apr 2026 00:01:09 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: pRKNuaSpmO2RtH4nyfBvtybqEXIfpCyHqNdWiF3sctc=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d2:7e:28:0e:73:12:da:da:75:c7:19:d7:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Apr 17 00:01:09 2026 GMT
Not After : Apr 18 00:01:09 2026 GMT
Subject: CN=9c626079c097c06adf0b763e89e8ccb40b73e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:02:85:f6:eb:fa:ac:e1:76:d8:e3:b6:d8:
75:39:98:f7:50:99:c0:6b:f7:ec:b5:15:cb:fa:15:
c6:5a:39:00:9c:3f:19:34:5e:ee:57:25:17:67:36:
cc:05:cd:b0:12:de:16:dd:1d:e3:dc:6d:e9:32:97:
0e:d8:a4:d8:34:78:13:ed:2f:85:de:21:1b:12:b1:
7e:ad:2c:cd:f7:8d:3d:fd:ce:23:e8:80:77:de:3a:
6e:a7:77:9c:27:3e:eb:c9:17:94:7f:17:88:2d:08:
2c:3e:24:f1:cc:31:47:aa:01:83:0b:b4:6c:6e:5c:
dc:05:a2:2b:ad:54:9a:fd:79:b0:93:dd:1d:0a:89:
a1:68:52:b6:fb:e0:eb:a9:a1:2f:37:03:97:0c:5a:
67:72:81:91:09:37:b0:96:d3:54:62:22:4a:ac:92:
e8:60:6d:35:24:88:9b:9d:6e:68:b6:3c:dc:d6:f6:
0e:02:56:13:16:73:f0:0f:81:3e:5b:bf:ec:77:2a:
6b:cc:71:f0:7e:f2:3a:a5:d5:49:4c:66:c6:8b:e8:
11:56:6a:d1:4b:69:a0:6e:bd:bc:d1:8b:2e:90:4a:
10:ee:a2:46:7f:7d:99:4a:0f:d6:23:6e:e3:c9:e8:
1d:65:c1:d6:a3:a3:9c:7b:37:7d:69:33:64:4f:ab:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:62:60:79:C0:97:C0:6A:DF:0B:76:3E:89:E8:CC:B4:0B:73:E9:35
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:99:58:53:99:8c:38:72:ff:b5:9e:24:e5:99:41:98:6a:32:
72:f2:08:81:ea:d1:80:cf:2f:e5:b4:5e:31:b5:5d:1d:71:c5:
b6:74:30:80:ed:1d:d9:2b:8a:59:83:39:fa:e4:45:a6:f2:d7:
c8:5f:cc:1c:b0:ca:cc:65:ac:45:35:c4:cb:75:b7:35:5c:86:
81:ad:5f:9c:e6:ff:ad:37:50:b4:5e:30:4f:b5:a1:37:06:01:
88:ec:07:34:02:bf:b2:15:57:f9:93:26:62:d5:e0:30:0f:a4:
9a:76:d5:84:9c:0c:17:aa:dc:21:01:9a:3b:dc:f3:93:54:18:
e9:63:33:b0:58:f3:df:8d:46:3b:8f:3d:79:6f:0d:75:76:c5:
fb:59:e0:8a:d3:ca:05:a8:f2:04:89:34:3e:61:df:ab:6a:a2:
23:2b:fd:74:32:75:7a:2a:27:10:ee:9e:a4:14:e4:cc:f0:01:
ff:d1:25:6e:8f:aa:54:dc:3d:48:04:4c:b9:30:a1:e5:74:2c:
57:69:33:69:d0:27:dc:2f:7e:21:3d:22:27:aa:ab:57:c4:ed:
59:55:72:0b:cd:ef:f1:5b:0c:8a:da:85:d7:e6:e4:fb:f2:b3:
85:ea:01:ef:78:14:29:d0:4b:dd:78:54:41:ba:60:19:e5:d5:
83:11:7a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvdJ+KA5zEtradccZ16/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTg0NWY4NmNiYzNjZmE5ZTBlNzk4N2EwMzgyZDVkMGRk
N2NlM2UwHhcNMjYwNDE3MDAwMTA5WhcNMjYwNDE4MDAwMTA5WjAzMTEwLwYDVQQD
Eyg5YzYyNjA3OWMwOTdjMDZhZGYwYjc2M2U4OWU4Y2NiNDBiNzNlOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A4Chfbr+qzhdtjjtth1OZj3UJnA
a/fstRXL+hXGWjkAnD8ZNF7uVyUXZzbMBc2wEt4W3R3j3G3pMpcO2KTYNHgT7S+F
3iEbErF+rSzN9409/c4j6IB33jpup3ecJz7ryReUfxeILQgsPiTxzDFHqgGDC7Rs
blzcBaIrrVSa/Xmwk90dComhaFK2++DrqaEvNwOXDFpncoGRCTewltNUYiJKrJLo
YG01JIibnW5otjzc1vYOAlYTFnPwD4E+W7/sdyprzHHwfvI6pdVJTGbGi+gRVmrR
S2mgbr280YsukEoQ7qJGf32ZSg/WI27jyegdZcHWo6Ocezd9aTNkT6tWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxiYHnAl8Bq3wt2PonozLQLc+k1MB8GA1UdIwQY
MBaAFANYRfhsvDz6ng55h6A4LV0N184+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAt
M2I4NGQ3OWFiZGFmLzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAtM2I4NGQ3OWFiZGFm
LzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZlYU5mM
OHL/tZ4k5ZlBmGoycvIIgerRgM8v5bReMbVdHXHFtnQwgO0d2SuKWYM5+uRFpvLX
yF/MHLDKzGWsRTXEy3W3NVyGga1fnOb/rTdQtF4wT7WhNwYBiOwHNAK/shVX+ZMm
YtXgMA+kmnbVhJwMF6rcIQGaO9zzk1QY6WMzsFjz341GO489eW8NdXbF+1ngitPK
BajyBIk0PmHfq2qiIyv9dDJ1eionEO6epBTkzPAB/9Elbo+qVNw9SARMuTCh5XQs
V2kzadAn3C9+IT0iJ6qrV8TtWVVyC83v8VsMitqF1+bk+/KzheoB73gUKdBL3XhU
QbpgGeXVgxF6WA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:23 2026 by rpki-client