Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: CPqxGAK8Rsl2h0qzQihTx+38/i7xtu3i3gqGkKk8vEo=
Subject key identifier: DC:16:12:A0:4D:F0:58:3B:B7:CE:7F:7F:21:38:4F:3F:4D:E4:EE:7A
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019FA9E2DF3E4A44311F2E1A9375081A7BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0E22
Signing time: Tue 28 Jul 2026 18:00:45 +0000
Manifest this update: Tue 28 Jul 2026 18:00:45 +0000
Manifest next update: Wed 29 Jul 2026 18:00:45 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: bJ974uUb+ZbM4q17AXmIgxG6zjS2EKJmZr1UJHa2Vsg=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:df:3e:4a:44:31:1f:2e:1a:93:75:08:1a:7b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Jul 28 18:00:45 2026 GMT
Not After : Jul 29 18:00:45 2026 GMT
Subject: CN=dc1612a04df0583bb7ce7f7f21384f3f4de4ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:1f:90:5d:ed:07:e5:99:f1:46:79:36:1b:
75:1a:b5:4c:56:0f:6e:e1:7c:88:07:a2:f2:ae:9f:
05:a0:80:16:75:5e:d8:09:3f:4d:13:6c:b8:e3:76:
a6:a7:25:4d:b1:95:93:dd:d4:55:9e:82:35:93:72:
42:64:44:e6:d4:35:b4:f1:a4:23:4f:7b:2a:f6:94:
a7:79:dc:b5:42:e0:35:94:88:d4:d8:57:52:71:fe:
ab:76:f2:31:51:0c:ac:fc:16:3a:d1:6b:c9:a2:95:
5c:00:01:32:5c:fb:25:ae:0e:9c:78:d3:c9:22:4e:
4b:c0:ee:57:21:cf:8c:89:a6:d5:74:af:0d:23:0e:
66:8e:73:89:e0:00:3c:f2:23:6e:62:10:ba:44:b5:
16:98:43:26:10:eb:1c:8a:90:77:e7:d1:7e:82:6d:
64:2f:70:94:63:fc:90:c2:62:65:af:b3:db:68:59:
b7:c4:cb:36:cf:86:24:c8:2f:04:f2:31:ec:49:04:
91:c0:29:99:12:ef:60:a5:4f:30:d2:e0:f5:4f:13:
c5:f3:5d:3b:ee:16:02:4d:e2:a2:75:16:65:43:5e:
2e:20:a2:0f:44:1e:b7:4e:29:7d:2f:bc:84:e9:09:
ed:ea:2f:bb:86:b2:a9:43:2f:bf:2a:98:cd:82:85:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:16:12:A0:4D:F0:58:3B:B7:CE:7F:7F:21:38:4F:3F:4D:E4:EE:7A
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:82:ae:0a:bb:42:b4:dc:77:fa:ab:8c:c9:2c:44:e7:04:82:
57:11:b5:96:99:d6:77:c5:51:c6:a9:4f:23:93:ad:7c:f9:52:
b8:cf:05:37:5c:28:70:32:e5:18:e6:50:d6:ab:07:4c:12:65:
79:c8:05:e6:5a:b9:a9:07:12:56:42:66:bf:93:84:eb:be:9f:
9e:22:a4:c7:02:9b:b6:80:9e:79:93:22:cb:e3:e9:31:08:8b:
47:f3:fd:f1:24:4c:a9:b3:44:c4:08:08:e8:0f:9a:23:e4:2c:
04:82:ca:31:0b:da:b3:f8:76:e8:ba:10:cb:a9:ae:a0:ec:a3:
92:29:4f:a9:1d:69:7c:d8:5c:cd:f5:e8:dd:ad:7c:54:12:54:
8e:86:80:75:39:d0:1a:13:96:95:e0:9d:05:7b:a2:55:bf:4d:
c3:6a:40:56:ae:0d:4f:02:69:70:77:5b:04:41:2b:76:7f:f9:
0c:65:8c:05:e2:55:e6:1a:44:55:25:89:16:57:0a:b6:31:b0:
d1:bf:69:ee:5c:50:0e:f2:31:d3:0b:77:fd:8c:93:a5:74:b1:
4f:ba:1a:b9:ab:fb:3e:aa:3b:5b:62:1c:77:c0:fc:a5:7c:47:
25:78:8b:e2:51:d9:53:93:ad:a4:1f:ef:3b:7b:f0:39:3a:61:
40:4c:ff:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:57:06 2026 by rpki-client