Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: eoHOk4xK5nmraf723XYKM446d/CO8VWicL5k8QxKr10=
Subject key identifier: F3:B8:C9:1B:10:41:4C:7C:91:2A:D1:9D:44:E0:FD:64:09:87:37:94
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019CAD90A5EE55E9CB1116E0D2A567A255CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 08:01:03 +0000
Manifest this update: Mon 02 Mar 2026 08:01:03 +0000
Manifest next update: Tue 03 Mar 2026 08:01:03 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: 4tFfPwG7OLm69TikpoGSBGzfeVMKIxmNyM+Tm0w3WYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a5:ee:55:e9:cb:11:16:e0:d2:a5:67:a2:55:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Mar 2 08:01:03 2026 GMT
Not After : Mar 3 08:01:03 2026 GMT
Subject: CN=f3b8c91b10414c7c912ad19d44e0fd6409873794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:d0:8a:fa:a4:c2:75:41:92:5b:97:b5:db:
13:a9:01:35:87:69:ff:6f:2f:ee:f9:f8:b2:25:b5:
d3:7f:85:4c:d0:d5:04:1a:d4:fa:a9:6d:cb:6e:17:
45:f5:0e:f7:27:63:3f:a4:cf:83:ca:9b:80:ef:ab:
b8:df:83:74:f3:d0:86:0f:40:49:ee:fc:bf:83:f7:
53:e0:ea:b1:b6:9b:80:00:a6:c5:1a:5a:91:c9:f2:
a0:c3:28:35:5f:e6:99:65:86:32:87:83:62:55:6c:
e6:79:f2:3f:7a:56:77:4b:2b:e0:19:d9:a8:4a:de:
35:3f:22:8d:36:01:99:2e:1e:39:61:08:5d:de:57:
8f:40:c0:4f:da:8a:6d:f9:e7:c6:bb:24:58:b4:4b:
21:ff:8c:9a:90:14:c7:16:34:3a:bd:4d:38:2d:ec:
fa:67:d4:ba:10:60:8a:7e:da:d4:05:c2:67:7d:b2:
cf:f1:01:70:a2:66:38:55:46:72:df:3d:38:d0:7d:
32:d1:88:cb:ba:da:13:49:2e:eb:c1:f9:fc:23:61:
34:89:9c:1d:69:8a:14:0f:3b:93:3b:a9:44:b5:ac:
f1:6f:92:a6:30:b9:b1:7b:f6:ac:46:60:dc:36:12:
0a:0a:ff:7b:78:0b:52:51:3a:ce:52:c4:a5:e0:c9:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:C9:1B:10:41:4C:7C:91:2A:D1:9D:44:E0:FD:64:09:87:37:94
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:a5:9d:fa:7a:10:79:ea:14:c2:5c:fc:e1:a1:c8:71:dd:
5c:5e:47:22:4a:75:a3:d1:ac:50:8f:81:c0:6d:78:d1:79:f3:
d6:fa:d0:18:67:2d:2f:0e:30:c8:39:05:b3:40:7a:9a:32:49:
86:2b:b2:31:ca:33:89:32:fc:00:67:fe:7e:fc:6d:db:ee:bd:
65:d7:d7:08:fe:47:73:5c:a3:ba:55:3f:e6:71:99:e4:93:a9:
a2:6d:f0:72:22:a0:ca:f8:43:1f:ce:b7:1a:df:d2:7b:c8:3c:
37:a1:23:ba:d0:70:28:2b:62:45:13:d0:e4:5e:71:68:c8:6a:
54:f1:cf:19:38:6c:c1:46:dd:2c:37:be:e7:be:93:10:96:16:
b7:f8:0d:5c:21:f1:80:75:f9:56:44:97:20:45:37:4a:ac:5c:
59:57:ef:42:d8:08:75:1c:fa:70:a7:67:87:62:9c:72:be:25:
bf:48:e3:46:f1:e6:77:39:b9:2e:fd:ff:75:ea:53:15:7b:2e:
3e:6d:23:45:f9:fb:75:9b:1f:8e:ad:21:64:aa:de:d5:bc:1e:
ee:16:0a:96:02:47:89:7c:c1:ab:c6:1a:3e:3e:1e:b1:0e:15:
65:5a:7e:d3:a2:af:3f:d7:5d:c1:0b:86:0c:33:d2:56:85:09:
df:c3:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:56 2026 by rpki-client