Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: E1YycGGn6Q5cSDBKqjnFxKH5ZFgHRT1rRvyjdNKHlBc=
Subject key identifier: 5A:29:94:91:16:C4:F1:F9:7E:2B:94:F3:5D:96:9C:9F:50:9F:5A:3E
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019F9211B382AAD8E5E835E7CC38104140C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 03:01:01 +0000
Manifest this update: Fri 24 Jul 2026 03:01:01 +0000
Manifest next update: Sat 25 Jul 2026 03:01:01 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: MlqqL//wsJvb8plkd2oEnQkkQg4+g28PCa+8CAG3cP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:b3:82:aa:d8:e5:e8:35:e7:cc:38:10:41:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jul 24 03:01:01 2026 GMT
Not After : Jul 25 03:01:01 2026 GMT
Subject: CN=5a29949116c4f1f97e2b94f35d969c9f509f5a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:9b:26:7f:6d:3e:8c:cd:70:1f:0a:e3:83:
44:23:f8:73:ab:80:0e:e2:c4:ee:e9:79:77:5d:81:
24:19:16:99:1c:3d:36:91:4b:7a:ed:28:6d:5c:dc:
74:09:64:f6:35:85:01:83:3c:0a:f8:b1:20:48:87:
92:99:94:24:1f:b1:c0:f2:b4:fa:aa:52:50:c3:de:
17:1d:cb:08:b1:65:dc:4a:f6:4b:a2:09:92:01:f3:
2b:95:01:fa:7d:1f:fd:0d:3f:8e:ee:65:bf:5d:f1:
87:78:81:33:7f:80:14:b7:ef:71:b0:dd:fe:39:2c:
ff:3b:94:26:d2:23:26:e2:36:3d:4f:4b:5a:9f:c0:
67:7e:23:36:a8:12:47:82:7c:fb:5a:5e:36:6e:0d:
3b:c3:d6:49:17:3f:02:77:04:c5:71:31:49:70:2f:
4c:3d:39:f2:65:7e:71:17:36:66:2c:65:0e:51:ba:
6d:a1:ad:d8:7f:9a:7b:1d:d3:4e:dd:d2:f1:20:ae:
0e:f3:62:db:3d:a1:43:3f:0e:1a:11:df:2c:94:78:
72:c7:63:96:40:4c:96:cb:25:c6:e0:cc:87:4d:3b:
02:b7:d2:01:66:df:16:9e:28:fe:b2:fb:3c:a3:ae:
52:49:9e:b2:7a:a5:65:d5:5c:90:73:70:79:be:e5:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:94:91:16:C4:F1:F9:7E:2B:94:F3:5D:96:9C:9F:50:9F:5A:3E
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:8c:75:1a:de:82:61:98:1c:9c:ea:ff:80:f5:38:84:5f:9d:
ff:89:8b:5f:cc:08:96:f1:94:ad:a4:c1:97:e0:39:d5:14:0a:
4e:42:fb:9c:4c:87:ac:b6:a3:44:13:ce:c4:89:4c:77:04:8c:
07:c5:98:39:21:05:c7:70:05:ab:2f:a6:70:39:54:40:0b:6d:
a0:1a:74:8b:3d:57:62:37:57:2f:09:b1:97:a9:47:31:da:94:
64:ee:84:c2:4d:7e:bd:f2:a4:b9:74:24:b0:2e:ce:0c:65:da:
38:a8:6c:64:80:85:4a:ab:22:dd:73:3c:67:b6:f6:f3:5a:82:
06:77:da:44:7c:30:e8:7e:19:91:ec:7d:10:ea:70:38:1d:bb:
ea:0f:5f:b1:38:83:7b:5d:18:c3:fe:55:3f:f7:98:ae:a0:02:
7f:79:0b:fd:6b:b3:13:2e:91:f0:82:76:c0:6e:f7:a1:c9:5e:
e2:88:d8:ee:88:05:30:14:88:81:1a:b3:c5:e7:7d:b9:a6:a1:
83:40:26:3b:74:24:28:de:d4:5a:d9:04:21:b9:48:47:9d:64:
df:6a:fe:d1:68:c6:71:ba:23:45:08:64:a6:53:46:fd:70:c1:
cc:64:36:12:bf:b4:51:6c:52:63:a6:c5:6b:32:d3:95:f6:15:
12:1e:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:55 2026 by rpki-client