Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: QKSPfELcpcSperDoBZcuHJKp1uikFrcC+O+P0+LYKvc=
Subject key identifier: 5F:DE:F4:72:06:B9:00:33:22:D0:7D:BA:A6:13:39:AB:B2:5B:75:BE
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019CAA5838656E491E3FEED5738B7E08F462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:34 +0000
Manifest this update: Sun 01 Mar 2026 17:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:00:34 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: M+g6GWi7ycF6vij/0IrkApOIPK/0n0pczkFjSCtrJig=)
2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:38:65:6e:49:1e:3f:ee:d5:73:8b:7e:08:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Mar 1 17:00:34 2026 GMT
Not After : Mar 2 17:00:34 2026 GMT
Subject: CN=5fdef47206b9003322d07dbaa61339abb25b75be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:b1:27:a9:66:b8:d6:5e:3e:5e:44:c5:f5:
2b:fe:5f:bf:67:d7:9a:b1:77:a0:7a:a4:67:77:40:
97:52:9c:a7:49:aa:e3:69:94:dd:be:24:0d:26:94:
72:91:7d:59:28:80:ff:0c:cf:7c:c7:19:1c:25:84:
60:d3:05:38:28:be:3b:44:c7:35:05:89:d2:49:f1:
e6:93:90:98:3f:32:86:8e:ad:f5:6e:a9:f6:73:24:
5b:e8:8b:f9:98:0f:b7:be:ac:e1:d0:f9:bd:21:c3:
a7:bb:b2:fb:27:93:c5:1b:73:a4:a3:de:ed:11:ae:
67:6e:12:5a:6c:c6:64:e8:ba:f7:96:da:23:08:6f:
96:04:23:7e:f3:6a:d2:fd:e0:0d:17:42:0f:35:6b:
43:65:73:83:db:4c:92:51:73:13:99:2d:40:eb:45:
2c:2e:6b:9f:f2:aa:10:81:5c:75:9b:1c:42:9a:9b:
45:c2:1a:2d:9d:d9:a1:9c:5d:e8:3c:23:a9:c8:29:
c0:b2:e0:88:13:52:2c:c2:b3:b0:63:9d:4f:5b:5b:
8e:38:32:bc:75:e9:49:bc:9c:e5:d1:f0:59:7c:4a:
f3:6d:0d:ce:48:ce:cb:c9:58:6b:8e:62:ea:83:92:
38:07:b9:75:41:04:9f:5e:d0:ef:8c:7b:dc:8d:5b:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:F4:72:06:B9:00:33:22:D0:7D:BA:A6:13:39:AB:B2:5B:75:BE
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:85:70:2c:bf:13:4f:73:8b:b2:71:48:29:6d:17:17:e2:22:
63:05:fd:62:b2:14:a3:70:e8:b0:31:69:ac:cb:1d:dd:e7:76:
db:d0:42:b7:6d:f4:25:ff:c4:6a:00:16:a2:b9:53:b3:14:29:
e9:f5:6b:da:77:5b:ac:12:b8:94:d8:12:43:c8:8e:3f:80:5a:
28:b0:1c:0f:7b:9a:e7:e2:8e:b7:29:a0:d9:78:c3:4d:68:49:
f0:59:de:23:fe:0b:77:76:10:c1:49:07:53:d1:2a:57:6d:03:
f1:85:03:8f:8e:a3:6c:3f:63:f8:48:19:f2:88:15:7a:93:d5:
cd:7d:6a:e1:45:48:5b:50:3a:39:a1:18:f3:aa:72:ac:9d:46:
e2:a8:9a:8e:08:58:ca:44:af:21:57:a0:2b:ca:22:78:08:b3:
17:a2:86:d0:61:c4:a6:72:e2:d3:5d:f1:41:f8:60:84:d3:1d:
4c:f5:57:8b:46:9a:aa:4f:8b:7b:2f:b0:f8:2d:8d:fe:a4:c3:
01:d2:e3:49:a1:c5:28:54:e9:44:66:38:18:0b:37:fb:a0:e4:
da:33:bc:5a:6c:c5:c8:04:8d:39:88:49:13:2f:29:e0:a6:87:
e0:4c:11:24:19:0f:ab:4f:a7:7a:87:57:c7:75:1a:b7:3f:4d:
71:05:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:26 2026 by rpki-client