Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: t+73MmXjzmc+6TYXIyiXQ7HKbC7kNIG+SIUcL9aoahQ=
Subject key identifier: BB:BB:A3:F6:47:4F:5E:5D:49:EB:3B:EE:FB:BB:D6:3D:83:5B:62:19
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 019D33ACEADF27AE12D452076B42E850F46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 09:01:03 +0000
Manifest this update: Sat 28 Mar 2026 09:01:03 +0000
Manifest next update: Sun 29 Mar 2026 09:01:03 +0000
Files and hashes: 1: 4lr4lTLzUsl_oOphlDzjGarGvD0.roa (hash: vcrliew1ggAomICQ3Ll7G98Kkg8l5iMJ9jax8lEhRcs=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: Ce3qsARu8AVSmnI9ozq81Z6a5jpYQLTL06kqIttWKOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:ea:df:27:ae:12:d4:52:07:6b:42:e8:50:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Mar 28 09:01:03 2026 GMT
Not After : Mar 29 09:01:03 2026 GMT
Subject: CN=bbbba3f6474f5e5d49eb3beefbbbd63d835b6219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:85:36:70:e2:7e:ff:7c:5e:bc:5b:7d:42:
d0:e1:94:ca:36:84:50:52:f4:61:6d:7d:af:ba:72:
c9:99:c8:b4:6f:86:18:35:5b:76:c2:23:ac:d9:23:
8b:12:3e:54:f4:41:47:f4:63:51:9d:7b:a9:ad:19:
8d:64:f5:95:77:fd:3c:59:57:43:85:60:fe:4b:e9:
d7:42:f1:0a:57:b7:d7:e6:79:26:6e:d1:1c:fc:cf:
ee:84:3a:da:d7:f5:68:a5:2c:66:2c:71:c1:3c:18:
39:69:b5:fd:ce:6a:25:fd:67:1c:93:69:bf:fc:47:
9e:7b:12:59:44:15:b3:1b:a7:09:ba:11:90:0d:5b:
15:0e:f7:71:06:4f:9a:08:00:1a:5e:2f:27:b0:be:
d8:69:80:7a:81:75:65:72:2d:2d:a9:0a:8b:fc:96:
50:3a:8a:25:47:96:bb:80:2c:5e:9b:e5:d2:32:5c:
e2:e7:a7:b9:5a:68:4e:50:f7:ff:31:0d:42:fa:71:
11:f2:72:f4:ef:a3:52:e6:3e:ba:ad:d5:0a:39:d2:
5b:09:2b:56:8e:12:bc:b1:0a:8f:11:f4:80:a0:c4:
c7:e0:6b:5a:1b:5c:bf:e3:ff:6f:a0:88:d7:25:e0:
da:3a:28:af:c9:8f:38:45:33:9f:df:3c:fd:bc:de:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:A3:F6:47:4F:5E:5D:49:EB:3B:EE:FB:BB:D6:3D:83:5B:62:19
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:14:62:d9:73:22:39:9e:10:7e:85:3b:ec:ea:0a:f2:80:98:
00:ff:3d:7b:f5:7f:75:89:b2:8a:ad:1d:f3:8d:d2:c6:09:8a:
86:9f:91:f8:53:2a:aa:c4:c6:11:f4:49:88:f1:4a:07:8a:70:
b3:0d:92:61:ed:d4:69:ef:ca:be:b4:0f:4c:6f:2d:75:87:e9:
f5:24:eb:07:67:68:c5:5c:65:fd:ab:ee:4a:00:f7:b4:c3:3e:
5e:26:20:ca:6e:fc:ba:90:d9:a3:6d:9e:74:c6:f4:e1:2f:b6:
57:a1:1d:df:7b:a7:ee:9c:05:ae:5c:53:2d:4f:2f:3e:53:f6:
31:f8:e0:36:83:ba:7a:b7:c2:c1:24:d1:cb:df:43:af:84:48:
b7:62:90:df:2c:a5:a8:a0:86:79:1c:96:dd:75:d6:cc:a9:f0:
45:9f:9b:c3:60:62:8d:94:4d:1f:90:8e:4e:07:2b:3e:8b:8f:
6a:52:1b:c0:1b:08:8a:e6:ee:33:64:d6:57:0b:6b:2a:b5:65:
85:d3:92:bd:05:3f:22:45:2c:bf:cc:cc:0f:30:31:86:7d:67:
e3:cb:1e:e8:2c:6b:b2:9a:19:bf:fd:d0:fe:0c:37:9e:44:99:
e7:8a:59:69:74:a5:41:e8:1b:4d:fd:b4:31:9f:13:bf:f2:36:
fa:fc:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:02 2026 by rpki-client