Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: v/whmFgQXXwU9LrXMXaLhgmXjp/iyL99nDj2LRMVbvo=
Subject key identifier: A8:D1:55:52:39:F7:CA:B8:1B:19:6C:01:0B:17:82:F6:9D:C8:84:CF
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019CAB3472CF0090924E1CF871185299B436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0C95
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: dBph/niY1l2iR6v21N3WMKQZzHCAUtUql2k+SgzOh7w=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:72:cf:00:90:92:4e:1c:f8:71:18:52:99:b4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=a8d1555239f7cab81b196c010b1782f69dc884cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:af:9f:fa:ec:27:bd:53:75:e7:29:00:56:
56:06:cd:40:65:22:ec:be:5c:13:f0:ef:88:82:63:
2a:b2:97:b3:be:cd:0a:aa:5d:e8:60:40:88:aa:e8:
ee:74:70:7c:60:33:5a:cd:5f:96:3f:91:d8:ec:99:
28:11:1b:f8:22:06:e0:d8:12:b8:9f:30:fe:83:ba:
bc:02:54:2d:6c:9a:51:55:df:21:0b:ac:60:9a:dd:
c8:ca:7d:67:d6:80:29:8b:af:c7:e9:f0:54:47:cc:
a9:d5:34:51:74:96:33:e0:9b:c2:05:16:e4:76:d2:
44:97:7a:b9:a1:cd:d5:82:7a:d1:9a:4b:32:0a:a0:
a9:b0:ad:ca:84:33:59:99:85:e8:dd:4c:43:a2:b5:
15:39:11:48:79:a2:b5:ec:6a:a5:20:cd:60:e6:d0:
56:29:58:28:51:94:e2:5e:a5:41:ab:19:14:df:58:
78:17:1f:8d:e9:74:92:31:56:82:aa:e3:0b:75:93:
15:48:2d:1c:24:a0:a0:ed:d1:ff:58:9c:df:c1:d0:
7d:57:67:91:fa:0c:46:f4:02:84:54:bd:e9:8d:25:
e8:01:d2:b6:51:25:8e:cd:a2:d6:49:8f:d1:a1:99:
9f:c8:0b:ce:bc:28:03:3a:4e:d8:6f:2e:2f:d8:6c:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:55:52:39:F7:CA:B8:1B:19:6C:01:0B:17:82:F6:9D:C8:84:CF
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:26:11:9f:b7:17:a3:8f:41:5b:60:43:8f:67:62:41:c2:47:
45:09:e6:c9:6c:06:e8:18:bc:1a:cb:9b:4a:36:02:cd:55:6d:
e5:27:28:ab:49:5d:dc:89:94:e7:31:0e:82:df:9a:72:a5:1e:
97:8b:aa:67:1f:3c:87:04:00:a0:4a:8c:69:27:46:7a:ab:9d:
cc:15:5a:66:31:08:32:6d:21:6e:99:4e:69:a5:3b:50:d6:7d:
9a:94:6d:39:82:c0:c7:0a:26:00:40:6a:5b:25:94:4b:7a:e5:
a0:1c:ce:df:7f:22:68:4f:50:a4:f0:19:07:7e:bd:ab:4a:02:
26:b9:08:cd:71:76:31:d2:37:6c:26:06:c7:fd:76:20:3e:7c:
35:d4:d7:e4:53:4a:0e:2a:97:e2:88:27:d7:a5:41:a2:9b:8f:
0d:93:d9:6d:25:92:9b:7f:3d:e4:c6:bc:5d:32:90:89:37:e8:
5c:b3:05:1e:89:e8:07:46:ae:d3:dc:d7:3a:d8:0c:41:78:15:
0f:1e:73:3e:fc:56:7d:17:ad:33:ef:0a:4d:84:97:59:19:63:
5e:9f:a9:27:1e:d7:c5:45:33:fa:59:de:61:cd:40:fc:8e:28:
28:cd:4f:b0:ef:35:ee:4b:7a:c4:6a:23:f8:1b:c4:17:d6:1b:
bf:1e:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:41 2026 by rpki-client