Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: mMdn/Wf11f9vYLFFNq4oTC1uZito49SOkaWQGz6Aeuo=
Subject key identifier: BB:A0:B2:D4:75:2E:C7:D5:75:5C:3B:55:56:BA:49:64:D6:DC:19:5D
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019D26CD4BA86897CFAA464358E70C7F48B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 12A6
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: YLomomHuUfwZjSnuc38vmI0tjvRARwRs7cLPvBbSBaE=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4b:a8:68:97:cf:aa:46:43:58:e7:0c:7f:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=bba0b2d4752ec7d5755c3b5556ba4964d6dc195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:fe:aa:24:9b:d6:65:ff:c4:95:79:76:a9:
c2:15:35:36:17:f0:bc:78:59:02:a0:b0:16:db:a0:
d3:0e:23:71:20:16:92:98:d1:2c:87:9c:30:93:fb:
41:9f:da:44:52:57:b5:f7:ba:1e:92:3b:c1:8e:f7:
f0:20:76:b6:1d:91:8f:10:b1:a6:42:a6:c3:31:16:
e1:fa:f2:90:9c:ac:00:75:0c:72:d4:f4:ff:a6:9a:
25:f4:d3:a9:c7:83:7a:74:f2:f6:36:84:97:d8:14:
1d:5e:c7:c8:cf:97:94:0b:aa:95:eb:6a:04:08:0e:
c4:f6:c1:58:89:80:41:ff:54:c9:e9:d5:d4:5d:be:
f2:5d:30:81:09:9b:6d:69:2d:af:7e:14:39:f6:d4:
7b:cd:9f:f5:98:aa:83:5d:29:b1:95:16:9f:28:22:
82:8a:91:a1:bb:f0:a6:49:ce:54:10:66:00:3c:a0:
19:0b:97:e1:68:36:15:8a:d4:e7:8d:c0:78:d1:84:
cf:8e:c7:ac:be:66:c2:74:d3:73:6f:88:0b:21:ff:
46:42:6d:b5:43:95:a4:ea:39:04:05:20:16:1c:15:
ec:bd:33:b5:35:a9:2b:15:d0:08:1a:df:b5:5d:9e:
bb:c4:0a:3c:b9:8f:70:96:69:95:32:1b:3d:9b:7c:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:B2:D4:75:2E:C7:D5:75:5C:3B:55:56:BA:49:64:D6:DC:19:5D
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a7:0a:d3:ac:be:b7:fd:fa:a6:1b:b2:67:d9:43:f3:fe:d8:
5f:4b:63:df:e6:f3:87:36:a7:64:59:32:31:51:20:f9:7d:df:
54:5e:d5:45:ec:3e:6c:c1:f0:a1:d1:89:d6:ef:35:6c:3d:df:
2d:2a:5e:0e:17:16:3f:05:48:db:d9:6c:d4:71:24:0d:6f:be:
7e:db:40:83:05:be:62:66:9b:91:50:1e:00:1a:ea:be:54:72:
bc:98:20:f6:c6:1d:97:e7:02:e7:85:5a:c5:7d:47:81:ca:95:
5c:92:de:b1:38:e1:6c:eb:e3:40:19:88:cf:e9:c8:6c:6b:47:
3f:48:a9:5f:db:4f:0d:a2:36:a6:0e:64:40:13:73:ee:7b:04:
3d:06:7f:b0:be:b4:13:ce:a7:0c:b0:85:3b:59:2f:3f:79:8b:
56:d5:33:51:e5:76:a6:7d:64:36:e9:5c:54:08:31:8f:e6:06:
1e:7c:3e:bc:c9:e5:ab:50:dd:43:50:65:4b:76:fc:b0:6b:29:
0b:0b:e9:2b:9b:e1:e8:eb:f3:8a:24:64:8b:d6:68:6b:ca:1b:
8d:3e:a7:d7:51:7f:55:d0:17:52:5a:2c:49:2f:9c:10:bf:fe:
df:fe:3c:1b:dc:2f:4c:40:c4:7b:1f:a1:db:3b:ec:9d:14:19:
73:91:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:36 2026 by rpki-client