Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: W4zmSIpu9tbNfx8FLHOMj7Pgluet5r80cdNNH+oGqx4=
Subject key identifier: C7:45:59:64:2C:3A:B7:DE:E4:49:08:F7:50:A2:67:A2:1D:4D:4E:60
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019D9962FE3C4F94FD195B976B20F411E141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 14C6
Signing time: Fri 17 Apr 2026 03:01:34 +0000
Manifest this update: Fri 17 Apr 2026 03:01:34 +0000
Manifest next update: Sat 18 Apr 2026 03:01:34 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: Z2Fp/tArGMZCZ3j4zBQlQ3PCQ6vhTRF2aa7Ul9s84M8=)
2: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fe:3c:4f:94:fd:19:5b:97:6b:20:f4:11:e1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Apr 17 03:01:34 2026 GMT
Not After : Apr 18 03:01:34 2026 GMT
Subject: CN=c74559642c3ab7dee44908f750a267a21d4d4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:fc:25:df:e6:e5:a1:78:a8:3b:d6:be:c9:
4c:0c:ab:4a:82:04:25:03:92:3c:b6:28:d2:4d:e7:
0f:fb:af:e8:bf:4e:cf:97:a8:44:61:47:a8:b4:1e:
9d:28:f8:9b:db:62:7e:33:95:4d:8c:4e:9a:9c:4b:
63:ac:50:c9:4b:58:c6:09:1d:88:c9:1e:f7:d7:55:
04:fa:e3:50:83:23:70:65:16:bb:8f:e6:6d:14:56:
12:51:c4:e5:f9:42:e4:a5:f0:a3:63:30:02:8f:be:
91:e9:18:2a:c3:0e:8f:eb:ab:18:74:30:b3:7e:90:
f7:c3:32:84:47:d0:23:fa:ae:9e:7e:4e:89:0c:a3:
25:76:0c:05:a7:1c:e6:14:ba:b1:3c:f9:52:e3:a7:
4d:ed:10:af:78:7e:80:56:10:ec:69:e1:31:ef:46:
30:04:39:5c:be:05:62:91:c8:f9:34:9c:a2:72:06:
67:0d:56:25:d5:85:ba:ea:08:73:27:c6:87:31:f8:
fb:6c:e9:a9:ea:2c:f7:1e:07:4e:e3:9d:8d:f5:01:
2b:2e:a3:ba:ca:ed:d2:5c:d6:b6:ee:fa:ae:98:f8:
58:22:19:81:a5:07:39:f1:09:44:03:aa:91:90:69:
72:f8:a5:c1:57:2f:88:00:e6:0b:dc:76:c5:10:40:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:59:64:2C:3A:B7:DE:E4:49:08:F7:50:A2:67:A2:1D:4D:4E:60
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:17:f2:9a:79:21:aa:55:c8:a8:3b:a8:b9:db:be:69:ab:
af:06:f4:b9:63:cc:02:a9:23:42:ea:db:a2:10:2b:5e:e1:6b:
63:a1:2a:f0:ef:f2:ef:e7:18:58:9a:3e:68:f4:04:a8:b6:02:
0f:02:8c:e7:01:c1:e9:8d:35:ac:2c:74:c1:ba:c5:0e:db:3d:
d0:d8:5e:f1:7a:fa:3a:7d:13:74:cc:a3:2f:3b:fc:c5:7c:5b:
77:ad:66:83:dd:31:a5:0f:05:2c:26:d0:c3:85:ac:58:54:86:
88:c9:b5:e1:41:49:10:87:26:15:07:3d:0f:6c:bb:8d:9a:1d:
50:4c:6c:f0:19:af:d2:f2:31:df:64:83:e7:a4:83:4f:0b:6e:
d1:f4:36:c0:63:ce:bb:2c:5c:cc:db:3e:a1:95:06:0e:61:97:
25:da:43:e6:44:30:3b:98:ba:89:da:cd:f9:6d:c5:2b:f3:e9:
7d:4d:86:41:82:74:ad:3d:e6:7a:2c:28:07:e7:98:15:55:f7:
d1:d8:72:63:62:44:01:91:46:cb:73:99:19:92:3a:e9:19:bd:
c2:4f:9a:52:44:bf:b6:12:2a:43:31:1b:4d:5d:82:eb:ea:ef:
22:64:2b:86:ce:88:4f:a0:d1:c5:5b:88:49:e0:95:97:7d:25:
6c:64:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:39 2026 by rpki-client