
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: X8xI4CIkJ9BopOhjyBzPBJXAqnw/paH7CDFVKPz2SXE=
Subject key identifier: A0:85:A0:A8:AE:4E:88:C5:5D:00:23:2F:C7:BC:71:D9:A3:AD:CA:FF
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 019F90C7CE8AAEB4EBBE53361BD1BC911EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 0957
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: w0R2I4Um+4X1kLam3/Hc9IqRJKAMc47vx9CBQq9oUlQ=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ce:8a:ae:b4:eb:be:53:36:1b:d1:bc:91:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=a085a0a8ae4e88c55d00232fc7bc71d9a3adcaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:b5:c8:4e:0c:50:93:db:66:0d:56:f0:a5:
90:d4:75:c6:2f:d7:8f:25:4a:8d:d2:7c:96:54:27:
ad:8f:a8:24:d5:41:10:12:72:5d:21:61:3e:87:8c:
01:9a:e7:47:8b:5b:ac:28:35:44:1f:45:24:92:16:
67:09:6a:d2:65:42:b5:0e:f5:10:54:41:0c:c5:d9:
24:76:6c:63:ed:9c:22:49:10:98:a3:2a:2b:5d:13:
ef:6d:7c:72:65:67:f3:dc:c1:be:eb:bc:bf:f7:13:
a5:e0:72:2f:ab:3f:5e:08:9e:1d:d9:85:ea:a9:0c:
f7:34:04:e8:5e:11:d4:e5:b9:46:76:09:50:9b:8c:
93:11:8a:32:8a:9b:ab:d0:39:26:52:13:5d:30:c3:
74:e0:c4:0a:66:fd:ab:5c:8c:2f:65:4c:cb:26:12:
fa:74:36:1b:ea:ba:95:fa:76:a6:a2:d1:81:af:23:
a5:70:f4:8b:74:56:8c:cf:1c:24:c6:61:57:d4:fe:
70:2e:41:9f:75:ca:ae:9f:3f:8e:d7:d6:69:7f:af:
3a:c5:03:11:8a:50:97:79:a2:d3:66:16:61:6e:66:
9a:00:66:ff:62:ab:3f:20:3d:fe:0f:ed:8b:50:c3:
1c:28:f6:51:69:16:95:db:cc:2f:0e:3f:6e:c6:53:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:A0:A8:AE:4E:88:C5:5D:00:23:2F:C7:BC:71:D9:A3:AD:CA:FF
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:1f:1b:22:57:b6:40:e4:55:ef:f1:cf:04:a0:ca:99:84:
4b:d2:61:d8:b3:6b:80:a2:9c:11:fc:d1:33:03:43:00:ba:3e:
66:01:92:a4:0a:15:89:da:b1:b8:d8:77:74:e6:d1:70:1d:aa:
c5:a7:70:7a:7a:fd:5b:18:f1:ac:cd:b1:a8:86:b7:5f:82:18:
b3:f9:25:3d:3e:05:a5:eb:b3:3d:05:fd:55:c5:c5:d8:66:96:
0e:93:cd:20:93:23:ca:de:4a:f5:f1:a1:8e:07:c4:9a:3a:f1:
3d:a9:42:d1:2a:c5:e2:03:0a:c4:84:8d:ad:a6:0d:5c:09:25:
65:87:7e:a4:e1:38:c9:3b:de:63:dc:67:5c:79:37:00:5f:1c:
51:71:82:c6:cd:a0:e8:4a:58:9c:13:22:0c:4d:47:a3:6c:d0:
bb:27:2b:60:4f:b7:93:5a:8e:10:43:7e:7e:1a:54:59:df:88:
b8:5c:f0:43:5c:e9:4c:93:8b:a4:4f:97:e1:89:70:3c:29:b7:
5a:8d:20:d2:56:c1:7c:ed:71:02:73:7f:f0:f0:b7:9f:35:0c:
54:63:dc:81:45:04:63:5d:4a:95:ab:b8:2e:1e:33:a7:7e:ad:
7c:ec:a9:e7:d7:a8:c7:ac:ca:83:5c:fb:f6:15:8e:de:92:07:
e9:6a:6b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx86KrrTrvlM2G9G8kR6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTg0NWY4NmNiYzNjZmE5ZTBlNzk4N2EwMzgyZDVkMGRk
N2NlM2UwHhcNMjYwNzIzMjEwMDQxWhcNMjYwNzI0MjEwMDQxWjAzMTEwLwYDVQQD
EyhhMDg1YTBhOGFlNGU4OGM1NWQwMDIzMmZjN2JjNzFkOWEzYWRjYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu361yE4MUJPbZg1W8KWQ1HXGL9eP
JUqN0nyWVCetj6gk1UEQEnJdIWE+h4wBmudHi1usKDVEH0UkkhZnCWrSZUK1DvUQ
VEEMxdkkdmxj7ZwiSRCYoyorXRPvbXxyZWfz3MG+67y/9xOl4HIvqz9eCJ4d2YXq
qQz3NAToXhHU5blGdglQm4yTEYoyipur0DkmUhNdMMN04MQKZv2rXIwvZUzLJhL6
dDYb6rqV+namotGBryOlcPSLdFaMzxwkxmFX1P5wLkGfdcqunz+O19Zpf686xQMR
ilCXeaLTZhZhbmaaAGb/Yqs/ID3+D+2LUMMcKPZRaRaV28wvDj9uxlOtxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCFoKiuTojFXQAjL8e8cdmjrcr/MB8GA1UdIwQY
MBaAFANYRfhsvDz6ng55h6A4LV0N184+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAt
M2I4NGQ3OWFiZGFmLzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAtM2I4NGQ3OWFiZGFm
LzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcwfGyJX
tkDkVe/xzwSgypmES9Jh2LNrgKKcEfzRMwNDALo+ZgGSpAoVidqxuNh3dObRcB2q
xadwenr9WxjxrM2xqIa3X4IYs/klPT4FpeuzPQX9VcXF2GaWDpPNIJMjyt5K9fGh
jgfEmjrxPalC0SrF4gMKxISNraYNXAklZYd+pOE4yTveY9xnXHk3AF8cUXGCxs2g
6EpYnBMiDE1Ho2zQuycrYE+3k1qOEEN+fhpUWd+IuFzwQ1zpTJOLpE+X4YlwPCm3
Wo0g0lbBfO1xAnN/8PC3nzUMVGPcgUUEY11Klau4Lh4zp36tfOyp59eox6zKg1z7
9hWO3pIH6Wpr2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:38 2026 by rpki-client