Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: pwyFXmDIhxopqylIEYULRYbyEPW0eLY8pM+d+lJJeBI=
Subject key identifier: 30:68:AA:41:50:8F:03:0F:C8:B8:47:F8:74:8F:1E:D5:AF:7B:18:19
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019D9AE2E0FA9DEFD47B0648D0F766AFB6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0FFD
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: A8EzvgEyYA9NNsOMvHHLvio+XWVE0JRQ77OPNy6K/nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:e0:fa:9d:ef:d4:7b:06:48:d0:f7:66:af:b6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=3068aa41508f030fc8b847f8748f1ed5af7b1819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:41:d1:4a:b5:8b:1f:e0:b5:a5:c6:82:fb:
0e:2c:84:95:dc:d5:30:eb:b3:21:99:c0:18:19:eb:
df:49:b3:f9:33:03:8c:ca:11:23:78:9b:74:00:1a:
97:99:e9:eb:ae:dc:03:3d:64:4e:8b:e5:f7:f0:c2:
98:f5:37:67:12:5c:fa:28:8c:9f:e5:c8:eb:25:36:
d5:0a:b1:fd:00:f6:4d:74:a2:4f:f1:7a:fc:8a:02:
eb:7e:6c:ae:d5:48:ab:55:72:f9:c2:db:75:7f:d7:
18:07:55:3c:80:e6:08:d5:ac:10:44:5b:a1:78:cc:
ab:97:40:76:88:63:98:e9:bf:f8:7c:65:b4:07:9c:
9f:17:19:40:ff:80:d1:7c:bb:fc:6c:55:8d:b4:aa:
25:e4:e1:34:36:32:bf:2e:0d:31:bc:eb:0d:a0:fc:
c0:0d:9c:a1:a7:52:31:44:00:c3:a8:11:9b:d7:6b:
5c:3f:7a:94:93:6d:8c:14:22:e5:ba:4a:d8:4c:9b:
91:6f:7f:65:45:94:b9:89:63:0f:ea:38:54:6e:30:
c0:f5:eb:56:9c:a7:82:86:0a:6a:f6:92:a6:d4:f2:
60:8c:c1:99:9f:5a:04:40:c6:d1:cc:6d:58:5f:87:
e6:0f:f2:90:e8:fc:05:14:d1:79:78:60:03:93:da:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:AA:41:50:8F:03:0F:C8:B8:47:F8:74:8F:1E:D5:AF:7B:18:19
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f4:66:1c:81:e3:65:0d:bb:df:d5:07:fd:4e:c7:59:b2:eb:
a7:12:d7:bb:5f:52:65:af:e2:dd:f9:8b:27:d7:2c:79:53:06:
c7:ba:ff:94:c6:10:9c:f7:bb:0a:49:e0:ab:05:18:40:df:ea:
4a:e4:3c:38:67:3b:80:38:ba:f0:da:d8:11:96:f5:10:42:0e:
55:13:58:63:84:4e:c0:23:7f:19:18:95:1f:2e:c0:3c:9c:1d:
02:2a:ed:f0:8f:b0:22:21:2f:88:2f:c9:b8:93:81:52:56:44:
d6:bf:e8:ab:77:c9:85:8e:14:3e:fd:c9:e3:0d:c9:42:ae:8d:
d9:b7:ea:3a:cf:ff:0b:85:e1:86:68:13:d9:0d:73:19:6e:98:
6d:7a:b2:42:c5:a3:ce:c1:ab:2a:70:80:01:86:13:44:fb:e8:
74:0a:3e:ef:a5:77:18:a9:2c:fe:f1:6c:f3:67:30:3b:c4:55:
af:69:ec:a4:65:ce:7b:fb:2d:7b:8b:37:b1:5d:52:b1:49:af:
81:93:47:2f:8c:37:63:45:41:0a:20:fd:8d:fa:48:64:e5:a8:
65:f4:5b:12:d5:11:b2:2b:ad:9d:ba:7b:b9:89:27:99:65:8e:
ad:b1:1a:b4:92:e4:08:5c:1d:65:cf:62:7d:2c:40:5f:85:6e:
a0:e3:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:45:40 2026 by rpki-client