Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: N4CLukLxX8hpXs3v1uz7PAEBbtbDwE/VpI7yCG4oo4M=
Subject key identifier: E2:EF:63:15:71:3F:E8:72:32:DC:DC:A1:76:7D:7E:40:8F:49:1A:F5
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019E1C0FDBD9A759CC7F3420578996492415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1325
Signing time: Tue 12 May 2026 12:01:01 +0000
Manifest this update: Tue 12 May 2026 12:01:01 +0000
Manifest next update: Wed 13 May 2026 12:01:01 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: G+P1rf4wHIP99zbfXuAW8JMahYpa4BD67fkrukoIRmg=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:db:d9:a7:59:cc:7f:34:20:57:89:96:49:24:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: May 12 12:01:01 2026 GMT
Not After : May 13 12:01:01 2026 GMT
Subject: CN=e2ef6315713fe87232dcdca1767d7e408f491af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:11:c7:9d:f4:43:88:08:a4:27:8f:4c:c6:
41:5d:e6:b6:74:2f:59:c5:be:a1:28:2f:6d:8d:32:
d2:dc:33:a3:53:79:cb:86:59:99:fb:d8:38:0f:99:
10:ac:79:e6:36:e9:22:a4:c7:36:a7:64:e8:5e:d3:
5a:79:35:6e:22:54:66:6e:78:b8:a2:d6:97:98:f8:
66:9f:58:ef:71:ae:6c:51:ba:cf:e7:0e:70:fb:97:
70:cf:6c:b0:70:4f:21:e6:bf:e5:b5:49:bb:d1:1b:
ce:de:50:d6:01:83:9c:16:49:65:e3:6e:9b:af:aa:
1b:ab:79:99:4a:f4:c8:d7:4d:a5:09:32:d7:83:b8:
f6:9b:5f:ee:d0:0f:ef:4c:b2:83:7f:3c:0a:14:66:
98:2a:ff:81:70:8d:68:fc:a2:3c:9e:13:a7:0b:e6:
7b:5e:bc:93:f1:48:8e:75:b9:3a:43:53:38:6e:c9:
fb:91:57:c5:61:a9:90:83:f1:f0:5a:c9:17:c5:eb:
5a:c2:be:e5:5d:1a:4b:ab:64:0a:c7:0a:1e:a4:f9:
31:7a:a6:8a:c8:5e:80:c6:4b:da:f7:4f:10:22:96:
dd:20:f8:a6:9d:e3:26:dc:e1:f8:8d:dd:02:de:06:
88:92:39:29:bc:1d:ee:92:d0:f6:32:39:ed:a5:6c:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:63:15:71:3F:E8:72:32:DC:DC:A1:76:7D:7E:40:8F:49:1A:F5
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:01:37:c2:b1:03:8b:62:68:a8:b7:92:59:38:32:b6:41:ff:
57:07:c4:d2:c5:96:b9:14:20:dd:cd:6c:f5:17:3c:b7:a4:02:
1d:73:e1:4b:9b:7c:95:21:b2:05:75:4d:5b:c4:1c:46:2e:47:
39:e6:d5:d6:ea:31:1e:73:39:50:1c:a7:8f:67:b2:54:1b:39:
42:99:6e:69:7b:e4:f5:9c:a1:17:ec:e8:a6:af:9e:c4:b6:4b:
83:cc:ae:53:0a:b3:97:a3:f4:5f:f8:1c:10:82:f4:99:49:ae:
9b:d6:1b:90:85:0f:91:3a:f6:1f:90:4a:8c:1c:86:f8:d5:f9:
5c:92:0b:bd:bf:bc:34:ba:0c:03:9b:94:fe:b8:15:88:25:26:
b3:c9:a2:85:33:d6:9f:6a:4e:83:ad:d4:48:d5:c8:43:b9:ca:
51:40:d3:44:7b:dc:be:93:73:df:90:18:5f:94:68:30:b4:17:
be:1d:4a:0d:16:99:c1:cb:4d:f8:29:51:5e:db:92:c7:81:2f:
22:c0:fd:f3:e0:98:e6:aa:ef:04:59:21:4c:da:83:e4:6c:c3:
76:fd:59:a2:23:a3:2f:9e:dd:aa:ba:d9:90:a7:f3:d5:d0:fc:
28:bf:b8:61:80:20:64:ea:eb:33:07:54:b1:8a:3d:cc:30:a6:
8c:e6:82:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD9vZp1nMfzQgV4mWSSQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjYwNTEyMTIwMTAxWhcNMjYwNTEzMTIwMTAxWjAzMTEwLwYDVQQD
EyhlMmVmNjMxNTcxM2ZlODcyMzJkY2RjYTE3NjdkN2U0MDhmNDkxYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgYRx530Q4gIpCePTMZBXea2dC9Z
xb6hKC9tjTLS3DOjU3nLhlmZ+9g4D5kQrHnmNukipMc2p2ToXtNaeTVuIlRmbni4
otaXmPhmn1jvca5sUbrP5w5w+5dwz2ywcE8h5r/ltUm70RvO3lDWAYOcFkll426b
r6obq3mZSvTI102lCTLXg7j2m1/u0A/vTLKDfzwKFGaYKv+BcI1o/KI8nhOnC+Z7
XryT8UiOdbk6Q1M4bsn7kVfFYamQg/HwWskXxetawr7lXRpLq2QKxwoepPkxeqaK
yF6Axkva908QIpbdIPimneMm3OH4jd0C3gaIkjkpvB3uktD2MjntpWxkZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLvYxVxP+hyMtzcoXZ9fkCPSRr1MB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgE3wrED
i2JoqLeSWTgytkH/VwfE0sWWuRQg3c1s9Rc8t6QCHXPhS5t8lSGyBXVNW8QcRi5H
OebV1uoxHnM5UBynj2eyVBs5QpluaXvk9ZyhF+zopq+exLZLg8yuUwqzl6P0X/gc
EIL0mUmum9YbkIUPkTr2H5BKjByG+NX5XJILvb+8NLoMA5uU/rgViCUms8mihTPW
n2pOg63USNXIQ7nKUUDTRHvcvpNz35AYX5RoMLQXvh1KDRaZwctN+ClRXtuSx4Ev
IsD98+CY5qrvBFkhTNqD5GzDdv1ZoiOjL57dqrrZkKfz1dD8KL+4YYAgZOrrMwdU
sYo9zDCmjOaCMA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:51:00 2026 by rpki-client