Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: /19DirwoqvQkETOtAKnU/PSyjUVOPUb84zeu7GVVh0c=
Subject key identifier: 0A:08:74:D3:38:95:3B:DC:38:B9:5B:AE:4C:66:72:02:42:02:00:EC
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019D9B1990F71ABB9725012902F758F0DD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 11:00:37 +0000
Manifest this update: Fri 17 Apr 2026 11:00:37 +0000
Manifest next update: Sat 18 Apr 2026 11:00:37 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: lxFmgRjfy2ZxO1679jlNxkiXJWrpDdwJdolVztwSouA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:90:f7:1a:bb:97:25:01:29:02:f7:58:f0:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Apr 17 11:00:37 2026 GMT
Not After : Apr 18 11:00:37 2026 GMT
Subject: CN=0a0874d338953bdc38b95bae4c667202420200ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:82:ed:bf:c5:72:fb:ff:ba:6b:0d:91:51:
c6:56:a1:36:94:39:7c:bb:4f:a4:2b:32:72:51:c4:
58:61:32:0b:db:8d:94:c5:86:d8:11:ec:4a:23:45:
7a:86:52:11:9e:ea:50:90:e3:c7:22:6b:71:67:0d:
59:3f:81:ef:87:a6:a5:b4:3b:69:63:65:60:77:5b:
d3:62:81:9e:80:89:7d:3e:6b:c2:f0:8d:1c:9e:6b:
cb:d4:76:74:60:d2:3c:62:5d:87:58:bf:22:75:88:
6c:7a:34:d3:92:47:76:08:cf:1f:34:93:99:c4:03:
50:c6:da:88:d8:3c:e8:3b:08:af:ea:e7:cf:9a:d3:
14:a3:dd:fb:4f:46:17:aa:03:fc:6d:2d:08:2c:d5:
74:a2:7a:09:dc:3b:24:3d:54:5a:d1:52:ad:93:be:
e9:61:00:f8:a1:c6:ff:ef:48:b0:06:5e:d8:52:b3:
2d:1d:15:f9:64:db:df:68:df:be:70:b4:47:a4:68:
0c:aa:e2:0c:c9:4a:15:42:8f:2c:54:04:b2:e5:d1:
cd:4c:12:06:04:8c:07:49:f1:fa:d9:59:5f:29:cd:
2a:5b:2d:27:42:2e:22:72:d9:f1:4f:7f:5c:cd:92:
4f:97:62:e5:2c:f3:54:29:a0:80:5a:50:70:e8:e7:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:74:D3:38:95:3B:DC:38:B9:5B:AE:4C:66:72:02:42:02:00:EC
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:78:d0:1a:40:fa:d5:a2:c0:31:cb:9c:cb:7d:f9:f7:e7:
50:ea:af:1b:19:26:03:86:82:16:d2:9c:f2:91:3f:79:2e:76:
10:ce:11:28:6e:8f:dc:c9:29:79:48:f1:15:86:3c:ff:e5:27:
f5:8c:4b:c1:2d:52:69:d4:90:79:eb:a5:b8:85:b0:b4:e0:70:
08:2a:65:25:43:30:7e:db:af:b5:43:34:71:97:fd:cc:9d:dc:
ee:3e:23:7d:7a:e9:f3:87:25:9d:e6:9c:f0:00:07:89:ac:d9:
15:fb:93:5b:a9:95:2c:da:a5:22:3b:82:2e:8d:35:d0:a1:36:
9a:cf:5a:4d:ea:d8:2a:b4:20:4e:dd:19:ca:01:6b:e7:4e:c1:
c8:5e:dc:81:ab:49:4a:9b:6d:ff:7d:9e:03:ec:ce:0f:f1:34:
1e:1a:63:99:cb:2e:89:f3:ad:4a:e9:c6:21:81:1a:60:4b:fe:
a5:0e:23:6b:27:32:80:3f:23:b5:7f:f9:07:f6:96:35:5d:3f:
6c:19:6f:72:55:1c:11:74:8e:57:2f:8b:5f:d7:6d:4f:d4:e8:
f3:61:fa:09:60:93:00:0f:43:41:95:ee:8d:a0:6a:71:48:57:
8a:eb:84:c8:b1:d9:53:b6:a8:6c:52:8d:79:b6:d4:13:15:98:
d8:de:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:33 2026 by rpki-client