Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: uUYXm9lY/5HYEP3TPu8QUjSmrzyMxCrluiG+jtrf5rY=
Subject key identifier: 0F:7D:FB:07:C2:30:8F:C6:E1:BC:57:C2:30:C0:21:92:D7:80:6F:26
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019CAB6AD66F2B3BFF72851C267069337172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0F7F
Signing time: Sun 01 Mar 2026 22:00:31 +0000
Manifest this update: Sun 01 Mar 2026 22:00:31 +0000
Manifest next update: Mon 02 Mar 2026 22:00:31 +0000
Files and hashes: 1: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: kab6ahBS3ZOJxEUrtAopIlzkm5OwtjeYe6KfjMmYgvY=)
2: oMQuRCoxL-6bEDFKF42iZlXxZyM.roa (hash: d0Ky8A74nhXB4jJ/jzKdX0aqd/0D99oCVxcWYNjjXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d6:6f:2b:3b:ff:72:85:1c:26:70:69:33:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Mar 1 22:00:31 2026 GMT
Not After : Mar 2 22:00:31 2026 GMT
Subject: CN=0f7dfb07c2308fc6e1bc57c230c02192d7806f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:90:ca:0f:d2:65:c0:cf:7b:6a:37:e8:dd:
24:77:a5:bd:24:ba:1c:b9:47:0e:86:be:46:b3:ab:
d3:ca:2b:b7:f5:d6:7c:01:9b:d2:59:7b:e3:52:da:
f4:64:e0:14:c8:a4:5a:3c:6b:85:4d:ed:c6:b3:9b:
47:05:fb:c2:be:85:b2:e0:67:98:eb:81:df:0c:03:
2b:ac:50:d4:93:c1:3d:78:18:5b:98:5f:ae:e2:fe:
39:85:a3:7b:f5:2f:56:9d:33:c9:ba:9e:6b:4b:cf:
2e:85:a5:60:14:c0:f6:89:0b:90:d2:0b:1f:ed:5e:
f4:79:80:01:ee:10:5e:46:16:a1:09:96:0a:ba:cb:
62:da:1a:8b:d9:1b:9f:89:5c:61:89:67:ae:4e:38:
0b:d6:27:fe:61:8b:62:5c:ee:27:fb:cc:31:f0:57:
28:ba:3e:53:00:96:88:a5:f9:d3:76:3b:76:03:19:
b7:b8:5f:ba:76:11:72:3e:2b:11:77:b7:f6:35:c1:
b9:e3:60:47:cb:1e:0f:92:d7:cd:eb:45:14:d0:9a:
02:0b:c1:8b:af:07:01:66:cf:17:65:76:51:56:c3:
00:15:db:5c:7a:a1:e9:04:e8:92:b7:1b:69:97:08:
91:ba:1c:b9:3f:91:8b:67:66:0e:3f:f3:d7:3a:e0:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:FB:07:C2:30:8F:C6:E1:BC:57:C2:30:C0:21:92:D7:80:6F:26
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9a:b9:40:7c:2f:13:de:8f:64:d1:ca:76:d2:c3:98:2d:e5:
32:93:55:25:e5:9e:91:92:7d:98:62:a0:13:d1:ba:c5:35:5e:
7f:3e:16:8d:b6:a1:c8:29:5a:81:a3:0f:85:45:27:ea:f9:24:
1d:48:76:27:da:31:62:7f:c4:bf:98:2b:5f:a1:c7:12:c4:c7:
b4:91:af:f0:a9:c6:a5:0e:c5:75:4f:c6:df:06:97:e9:ce:8e:
15:b6:42:39:67:51:a6:43:cd:72:9a:aa:3d:8d:6f:a3:24:f8:
48:48:60:e1:40:05:9c:21:de:2c:1a:93:9c:ab:d7:2a:9f:b5:
f3:61:7e:97:a9:2f:da:2e:e1:78:0f:8d:2d:f7:9b:a7:57:62:
5e:cb:54:05:07:de:a8:4d:7e:f3:07:50:14:6e:e4:b3:3a:97:
30:21:f5:48:5a:bd:4b:e3:95:88:93:32:21:61:7b:89:ec:43:
b8:af:49:dd:ae:2b:3f:32:49:f6:4c:87:19:6d:e0:b2:d3:eb:
80:cb:20:84:8e:49:ea:8d:af:15:23:0c:fe:d6:c8:00:73:68:
f8:3a:72:b0:76:05:75:e3:9a:45:1a:3b:a8:a1:38:31:e0:37:
a1:56:e2:88:87:bf:d6:6c:30:76:62:2e:e5:72:ae:06:19:88:
eb:53:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:38 2026 by rpki-client