Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: 2qiCONcI7WdLtoLo4YAHwd3YzxDlS6q4BNB6bdz59bg=
Subject key identifier: 29:BF:DD:34:3E:51:22:A7:A6:68:39:40:7A:47:92:FA:B5:37:F9:F2
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 01A0D34A741FB6B6763F74F27776FA9DA023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0EBC
Signing time: Thu 24 Sep 2026 12:01:06 +0000
Manifest this update: Thu 24 Sep 2026 12:01:06 +0000
Manifest next update: Fri 25 Sep 2026 12:01:06 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: MxpIL91v2eSqbTUJy2sQowjIz92aek2L3eC8cryr8S0=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:74:1f:b6:b6:76:3f:74:f2:77:76:fa:9d:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Sep 24 12:01:06 2026 GMT
Not After : Sep 25 12:01:06 2026 GMT
Subject: CN=29bfdd343e5122a7a66839407a4792fab537f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:04:e4:36:c1:63:fe:4e:de:a3:16:6d:74:ac:
17:2a:92:d5:d4:aa:1d:86:44:b1:83:fc:9c:64:4e:
c8:e8:78:83:d8:03:19:16:51:e6:1e:f7:92:8f:bb:
76:ca:b1:d3:53:8d:2f:e9:96:5c:b8:c6:97:96:b4:
0a:e2:9e:7f:1c:f1:50:f0:dc:b4:ae:15:9c:e0:f7:
11:29:8f:73:e2:90:75:c7:d4:e4:dd:d6:3c:41:27:
c1:a9:04:76:6d:91:84:d5:92:a1:8c:06:32:4f:95:
0e:98:1f:9a:33:fc:d3:45:e6:7b:a6:09:68:c7:b6:
93:8c:fb:35:5d:c8:0b:79:6c:21:74:3c:2d:e4:b6:
a3:ba:2c:8f:16:43:30:2f:76:69:ce:02:db:2f:f6:
42:9e:7a:86:83:ea:53:5f:9d:74:93:00:d6:f1:43:
63:51:27:68:4c:51:bf:97:d2:43:95:2b:31:e7:5b:
04:14:df:8f:40:d6:cf:a1:70:bc:51:72:03:5f:f9:
a2:7b:60:8d:e5:9e:ee:4a:94:4e:ec:ff:2c:90:c3:
e6:33:0f:e2:9c:8e:4c:90:c7:74:09:3c:e0:aa:1d:
61:6a:9e:85:ec:3e:b3:8a:21:a1:ab:b3:3b:8c:77:
7a:db:2a:f7:1e:c3:0b:2f:49:3d:7e:aa:2d:62:88:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:DD:34:3E:51:22:A7:A6:68:39:40:7A:47:92:FA:B5:37:F9:F2
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:37:8e:2e:26:55:50:b9:f9:ec:92:8e:d1:fb:bb:89:d4:
3c:a1:17:8f:16:ce:47:af:e9:8d:8c:c7:9e:02:9b:aa:f3:82:
c6:d0:8d:fb:c1:1f:7d:ba:b3:ab:aa:46:42:a3:8b:9b:c2:0a:
7f:a6:a2:85:63:04:84:bf:db:34:27:01:99:24:a7:4d:43:ee:
10:a5:77:30:77:e2:c8:9e:e7:6f:ff:14:77:b5:b3:98:e7:40:
87:fd:e6:63:7f:9d:69:cd:08:fd:69:3f:df:1c:08:32:13:e1:
3e:ac:11:ae:d3:aa:80:7d:5f:c2:ad:42:8e:2e:e0:43:90:73:
8d:cf:ce:3c:2c:46:cd:54:c8:8d:9b:7e:79:1e:42:e4:0f:d6:
30:d1:21:f2:8f:47:f9:4b:44:85:5b:5d:cd:da:e9:b0:2a:39:
28:dc:8f:ce:43:6a:83:2c:61:6c:97:9b:3c:ea:f7:2a:0c:79:
16:ae:0e:70:d1:08:14:94:b9:a5:ed:8d:d8:dc:a2:af:27:41:
24:b6:4b:e8:66:c9:fe:bc:76:94:34:37:d8:55:de:02:9f:82:
42:c7:7d:40:02:a6:7c:c0:13:45:a5:87:37:90:76:6d:26:55:
99:89:6e:07:54:56:34:da:82:4a:b3:da:1c:f3:03:e2:96:50:
5d:98:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:04:19 2026 by rpki-client