Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: 7P7gBhb1Ry2MlvyYtHijmxp5HYv0cLf2CtVQekJSves=
Subject key identifier: A6:65:02:2D:82:00:1F:58:97:B3:DB:D2:E8:70:F7:9E:F9:DB:18:01
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019CABD9677F4764815D125E644C47FDC9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 144B
Signing time: Mon 02 Mar 2026 00:01:17 +0000
Manifest this update: Mon 02 Mar 2026 00:01:17 +0000
Manifest next update: Tue 03 Mar 2026 00:01:17 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: 6R1MqwtA2J0St4p6wZq9qU+AqJAJI1nzBX3mMTUBg3k=)
2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:67:7f:47:64:81:5d:12:5e:64:4c:47:fd:c9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Mar 2 00:01:17 2026 GMT
Not After : Mar 3 00:01:17 2026 GMT
Subject: CN=a665022d82001f5897b3dbd2e870f79ef9db1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:e1:39:17:93:ca:12:83:07:fd:40:9d:21:
34:52:a3:c8:33:90:6e:7f:8a:13:86:5e:b1:c9:4f:
4b:f3:d3:a8:47:0d:8a:89:da:49:be:50:5f:a6:62:
40:22:af:b0:1a:83:63:58:6c:78:da:5e:29:c5:bb:
14:15:b5:97:19:f9:ad:9b:13:44:87:51:79:e7:63:
b9:3a:6a:0f:27:8c:50:6d:3a:5b:ee:87:1b:69:0d:
3c:91:b6:63:30:76:16:5e:94:b2:35:ee:43:12:32:
d4:ac:5a:76:bf:6f:5b:b2:ca:1f:16:09:57:2d:bf:
3d:29:81:7e:bd:ce:95:cb:98:7b:b3:49:16:83:c5:
60:85:16:63:58:0f:58:e2:de:56:82:35:b2:d0:60:
16:03:3a:73:6f:08:9f:4f:e3:c1:ee:52:b6:51:8c:
c1:85:d0:85:a8:a5:da:e7:9f:64:c4:2b:8e:25:a6:
9f:9a:64:72:8b:2f:fc:91:57:9a:fb:f0:82:4e:90:
0a:d8:a0:3f:bd:a5:f0:15:bb:3f:95:70:8f:f3:21:
30:67:79:c4:e5:8f:1d:6b:82:7d:51:7d:ec:90:7c:
2e:b3:49:d1:2e:a5:75:95:d8:77:21:bb:5a:af:29:
02:ce:48:ad:7d:98:ed:95:d1:b4:f3:24:d2:0a:d6:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:02:2D:82:00:1F:58:97:B3:DB:D2:E8:70:F7:9E:F9:DB:18:01
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c9:e7:01:ea:c8:1e:3b:a3:6e:ee:c1:0b:76:c5:89:51:d3:
13:ec:de:f0:51:f8:e3:c5:1a:b4:00:e2:20:44:17:ca:72:f4:
dc:f7:d7:31:f3:f6:5a:fb:63:f8:0e:51:83:15:ce:cc:17:75:
74:2a:4a:02:61:7c:3b:94:51:db:6a:fa:a2:d8:90:bd:c7:1e:
15:16:4e:1a:fa:29:3a:ff:4f:2e:f3:ff:9d:31:17:2c:57:cc:
f8:c0:5d:40:fe:d0:99:d1:67:de:cc:d6:8d:da:9b:36:0f:f4:
de:04:63:b9:ba:3f:3f:69:52:a3:61:1b:59:f0:50:e4:1a:ba:
13:2a:c4:f2:4a:b0:7c:21:43:2a:3f:7d:c3:d5:3e:0c:40:fa:
04:fd:cb:d9:83:16:ad:a2:77:ed:55:ee:a7:de:c5:f0:ff:f6:
9f:8c:ad:c9:d8:6c:72:fc:bb:ed:90:d6:ed:b0:bf:78:7b:c7:
38:62:57:11:e1:19:f9:db:34:2a:02:90:fd:23:16:96:19:82:
f5:24:7b:3a:57:11:fc:71:d6:03:40:79:67:0f:27:c6:3f:c5:
a8:e0:90:1b:f6:77:de:fd:64:99:0f:a1:0e:08:b7:10:d5:65:
01:26:27:37:48:70:08:a0:9f:47:b8:55:c4:8b:74:d8:1e:5b:
39:38:52:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Wd/R2SBXRJeZExH/cmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNDg1ZmJkYjBiMWEwNGQ1MmU4MWRjZGI5NTg1ODkxNmEx
ZGRhZTQwHhcNMjYwMzAyMDAwMTE3WhcNMjYwMzAzMDAwMTE3WjAzMTEwLwYDVQQD
EyhhNjY1MDIyZDgyMDAxZjU4OTdiM2RiZDJlODcwZjc5ZWY5ZGIxODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVDhOReTyhKDB/1AnSE0UqPIM5Bu
f4oThl6xyU9L89OoRw2KidpJvlBfpmJAIq+wGoNjWGx42l4pxbsUFbWXGfmtmxNE
h1F552O5OmoPJ4xQbTpb7ocbaQ08kbZjMHYWXpSyNe5DEjLUrFp2v29bssofFglX
Lb89KYF+vc6Vy5h7s0kWg8VghRZjWA9Y4t5WgjWy0GAWAzpzbwifT+PB7lK2UYzB
hdCFqKXa559kxCuOJaafmmRyiy/8kVea+/CCTpAK2KA/vaXwFbs/lXCP8yEwZ3nE
5Y8da4J9UX3skHwus0nRLqV1ldh3IbtarykCzkitfZjtldG08yTSCtb++wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZlAi2CAB9Yl7Pb0uhw95752xgBMB8GA1UdIwQY
MBaAFANIX72wsaBNUugdzblYWJFqHdrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDkt
NDQ5MTg0NWRjZDQ3LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81MjRlNWItYThhZS00NWFiLWJiZDktNDQ5MTg0NWRjZDQ3
LzEvQTBoZnZiQ3hvRTFTNkIzTnVWaFlrV29kMnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMnnAerI
Hjujbu7BC3bFiVHTE+ze8FH448UatADiIEQXynL03PfXMfP2Wvtj+A5RgxXOzBd1
dCpKAmF8O5RR22r6otiQvcceFRZOGvopOv9PLvP/nTEXLFfM+MBdQP7QmdFn3szW
jdqbNg/03gRjubo/P2lSo2EbWfBQ5Bq6EyrE8kqwfCFDKj99w9U+DED6BP3L2YMW
raJ37VXup97F8P/2n4ytydhscvy77ZDW7bC/eHvHOGJXEeEZ+ds0KgKQ/SMWlhmC
9SR7OlcR/HHWA0B5Zw8nxj/FqOCQG/Z33v1kmQ+hDgi3ENVlASYnN0hwCKCfR7hV
xIt02B5bOThS2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:37:55 2026 by rpki-client