Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: R9UgofkOGXIk3NgnqT/G19oEMYB/q2ir8Hb59CO89f8=
Subject key identifier: 5A:25:5F:E8:F9:1E:2D:26:5C:B7:FB:CD:A4:FD:A3:56:45:57:45:EC
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019E1C1038CF037FDA46C26C6B7CF9DA8707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0D54
Signing time: Tue 12 May 2026 12:01:25 +0000
Manifest this update: Tue 12 May 2026 12:01:25 +0000
Manifest next update: Wed 13 May 2026 12:01:25 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: PLIgLSvK3GbccWsjHttn3/MJX8DOzxZPb6yWfLk7bmE=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:38:cf:03:7f:da:46:c2:6c:6b:7c:f9:da:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: May 12 12:01:25 2026 GMT
Not After : May 13 12:01:25 2026 GMT
Subject: CN=5a255fe8f91e2d265cb7fbcda4fda356455745ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:e6:69:d1:55:56:72:05:83:eb:fa:25:d3:
42:b1:7d:b6:22:ce:cf:2e:a8:d8:d1:2d:29:7f:f4:
94:f8:aa:c3:2d:df:2a:5a:64:14:5f:3d:a0:ba:e6:
eb:7f:e9:c8:d5:23:a4:95:72:f7:cd:b5:c6:78:b4:
77:22:f4:fb:72:59:0b:6e:d1:13:e9:f1:c9:1f:15:
12:e6:aa:9e:ee:82:c0:e8:f2:65:d8:5f:9d:9d:48:
52:0c:09:87:0b:07:0f:d8:db:27:e0:23:8f:d6:82:
53:44:4b:42:af:32:05:93:ce:88:35:c7:35:92:de:
a6:df:92:a9:ac:ab:f3:29:f8:c5:28:32:5e:8c:11:
e0:07:c5:25:2c:28:d9:5f:ff:9e:6a:a5:28:7a:d1:
1b:87:ed:2a:67:00:5f:2d:9a:7c:b8:b0:08:91:8a:
cc:21:73:ca:98:89:ad:d1:c1:e5:5e:c2:b8:29:0f:
39:57:50:45:98:40:f7:35:35:b6:84:a7:b6:30:79:
55:d4:19:8d:2e:9f:14:de:35:5e:52:00:a2:6b:0a:
62:4d:5d:f4:35:ad:1f:ab:e4:82:97:81:43:69:06:
9d:c1:1f:80:7f:7c:41:7d:01:f4:f5:13:43:b3:e2:
7a:cf:8a:76:2d:cb:90:cc:df:a0:b3:cf:3e:65:20:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:5F:E8:F9:1E:2D:26:5C:B7:FB:CD:A4:FD:A3:56:45:57:45:EC
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:8d:c8:90:b8:16:1c:6f:ec:bd:f2:25:0b:a0:4c:9c:c3:
00:f3:c6:b1:49:68:83:6f:98:21:f9:ed:09:4b:67:f9:3b:8b:
0f:35:4f:64:7b:bc:30:b1:25:2d:4b:45:3d:c5:b3:e0:a6:95:
f5:c5:69:34:9d:29:2a:28:84:bd:c7:91:fe:21:e7:c3:b3:c1:
84:a7:d2:f2:28:fd:c6:2b:15:b8:26:12:dc:cd:0e:76:b8:ab:
4a:21:f8:dc:fc:2d:72:74:bc:d6:1a:ca:ea:9a:25:28:3c:41:
02:f6:8e:66:1c:9b:19:79:c0:35:4b:4f:a3:2f:8b:40:e6:fb:
35:f8:c0:b0:50:88:81:fb:6b:f0:5e:1e:d1:be:ee:67:4b:d1:
76:90:8d:d0:df:a8:ea:74:44:73:a2:c8:5a:ab:82:0b:dd:19:
e7:c1:71:7e:10:82:06:4c:9f:17:0c:76:92:bf:67:f2:21:37:
0e:ef:80:e2:67:0f:cf:47:c3:84:95:ee:6e:47:bc:67:43:b1:
34:99:15:67:3b:67:2f:b1:99:5e:44:b4:92:8f:e3:a3:0d:2e:
2a:08:2b:1b:a4:93:1e:1a:ff:c9:8b:8c:d0:1e:03:14:b8:f1:
f7:6a:c2:23:6a:31:2a:9b:8f:a2:d8:a0:f9:56:a8:7f:d5:80:
5b:a4:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:56 2026 by rpki-client