Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: KWsh4BCKLXOCAnYxAjLy/940ze173eyRPHWYu8pff2U=
Subject key identifier: BA:5F:12:4A:E8:EF:7B:54:CF:9E:68:5C:3C:E6:15:A0:F8:CE:15:17
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019FA82BD46168818F9DC7A4EF71DB3AFE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 110D
Signing time: Tue 28 Jul 2026 10:01:12 +0000
Manifest this update: Tue 28 Jul 2026 10:01:12 +0000
Manifest next update: Wed 29 Jul 2026 10:01:12 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: 4BGIIJDmgnHgt248iEhZEicDuJ/Le48lRcI7lt85Zr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:d4:61:68:81:8f:9d:c7:a4:ef:71:db:3a:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Jul 28 10:01:12 2026 GMT
Not After : Jul 29 10:01:12 2026 GMT
Subject: CN=ba5f124ae8ef7b54cf9e685c3ce615a0f8ce1517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:6e:60:15:d7:a7:ca:dd:00:a8:1a:ae:7b:
4f:b0:17:03:05:4d:08:f4:2a:01:fc:f7:59:94:eb:
09:87:3b:4e:dc:77:44:bf:ba:bb:48:ac:17:7a:f2:
f6:13:89:73:5c:6f:1f:cc:d0:d2:ad:17:ca:de:47:
ef:bb:c0:23:5c:e8:9d:99:0c:cb:74:4d:70:81:bb:
aa:3b:30:48:68:eb:da:d9:ea:c9:8e:c9:3a:73:9c:
4d:35:2b:c9:2a:8f:1e:42:14:40:40:d2:a6:4a:f2:
46:08:b1:f8:3f:ab:fa:bd:60:a4:59:6e:87:f4:f0:
a7:6f:dc:df:19:47:e8:47:7b:db:0d:a1:49:f2:a6:
cc:5f:ce:c4:88:02:8f:48:1c:56:84:6e:80:2c:a6:
07:08:76:27:43:0e:15:d8:da:d1:33:d1:63:22:c4:
1d:89:2a:6c:8d:8d:2b:e6:82:3b:bd:48:7b:7e:8a:
e6:c9:e9:73:d7:c4:f3:1c:a8:6d:07:51:0e:37:b8:
9e:53:ec:db:10:89:cd:33:c3:43:68:2f:bf:d7:ad:
bc:83:05:63:a8:23:65:da:0f:34:35:2a:a0:7a:82:
f0:c8:2a:cd:9f:ec:11:07:4e:37:d7:6b:46:85:17:
ce:ea:a9:9f:a7:73:70:dc:91:22:37:e2:f6:64:e5:
fe:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:12:4A:E8:EF:7B:54:CF:9E:68:5C:3C:E6:15:A0:F8:CE:15:17
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:02:bb:8d:8d:55:ea:0d:43:b6:5c:64:b5:56:66:99:89:64:
97:80:50:06:af:ef:ef:3c:ed:53:4e:ad:f6:d5:f6:e7:ed:cb:
8a:17:1c:43:1b:e8:6b:23:79:f9:a4:1e:1e:ab:12:55:fe:29:
9f:b7:b4:1b:d6:99:3f:24:db:7a:8d:b6:49:98:9e:18:ef:c4:
b0:f1:09:8f:d1:fe:0b:66:e0:7d:2d:83:ed:9b:44:52:cb:5e:
93:f8:d4:64:57:b2:9a:ee:56:04:71:59:c0:0c:4a:cd:f4:69:
db:66:d3:17:44:3b:2c:27:d7:b7:6d:66:e2:c7:4d:f1:f8:8e:
fa:d9:be:34:92:c5:0b:83:ec:fb:61:b1:5a:1e:d4:a7:b8:8a:
9e:da:08:7f:b3:b9:52:1b:52:51:62:5c:2c:b7:24:39:53:6b:
11:65:ac:4c:2f:a1:4f:a8:3a:f8:00:d8:ab:7e:e8:7c:d6:31:
ce:c3:aa:c5:e5:5d:fb:63:86:7c:34:9c:40:07:11:a6:62:a2:
30:b7:6f:d4:db:af:5f:8f:16:88:27:57:23:7d:42:c7:93:0b:
80:75:5e:ac:8a:4e:51:98:fd:8f:f0:f4:91:42:6f:6f:71:3f:
53:63:5c:b6:e0:2d:80:61:5f:85:39:e0:57:42:eb:c4:01:e0:
de:62:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:40 2026 by rpki-client