Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: b4wrYADxKWYQ4hO5U7bA7xN95iEzexL7k5jh5giE+eg=
Subject key identifier: 21:28:50:00:7A:43:89:AF:C8:F3:CC:C1:B0:84:D1:65:88:15:49:C8
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019D28BBE375E23AE837514F11E33F31CFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0CD6
Signing time: Thu 26 Mar 2026 06:01:35 +0000
Manifest this update: Thu 26 Mar 2026 06:01:35 +0000
Manifest next update: Fri 27 Mar 2026 06:01:35 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: tSxsTFo0xL4juDHY1rQjOxda9fqpMztMAWKRXGPq61A=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e3:75:e2:3a:e8:37:51:4f:11:e3:3f:31:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Mar 26 06:01:35 2026 GMT
Not After : Mar 27 06:01:35 2026 GMT
Subject: CN=212850007a4389afc8f3ccc1b084d165881549c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:9e:2f:71:f7:24:6b:89:be:cc:97:c3:38:
32:b7:27:49:26:9f:b5:d2:98:35:b2:32:87:00:f2:
46:43:8d:a8:72:5b:a5:95:00:7c:d1:63:d6:d2:e5:
fa:88:84:9e:fa:06:64:ca:b1:9f:6e:e6:2b:9d:96:
b6:f8:ab:ad:44:5c:cc:a4:4f:db:e1:2f:c2:10:28:
23:06:0b:c0:58:ab:ef:56:0c:ba:53:ac:b2:06:91:
1a:34:f3:b4:57:1a:05:83:d1:b6:e7:05:99:3d:81:
5a:34:df:b7:a1:f5:3b:4d:ed:ce:fd:6e:5e:53:b3:
9d:8b:11:0e:21:b9:43:5a:04:38:66:df:94:f9:82:
07:5a:7c:2a:de:99:f2:bd:84:a7:1e:14:e8:67:92:
a4:3c:31:51:95:80:f7:78:c4:a1:83:ac:6d:98:46:
2a:19:21:66:97:af:de:48:b4:e5:d2:5e:61:9f:25:
8a:dc:c7:22:91:e5:ff:03:86:89:20:95:0f:17:36:
d4:bb:cc:99:d4:19:ec:c1:a4:d5:df:28:cd:1b:29:
f8:91:28:c3:82:17:8e:91:ce:da:39:21:22:7b:fd:
83:33:dc:bb:13:c6:e5:58:f4:e4:eb:5e:5e:1b:06:
c3:e4:af:c3:43:d8:a3:9c:e0:19:60:b3:e1:4c:3b:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:50:00:7A:43:89:AF:C8:F3:CC:C1:B0:84:D1:65:88:15:49:C8
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:77:bf:2b:8b:2d:33:78:3a:13:31:04:8c:ec:73:6e:e6:
9d:c5:3c:bd:8c:58:53:14:39:a0:64:29:c2:07:c8:42:29:39:
6f:d8:3a:1b:59:21:b2:de:c3:e6:cf:c1:c6:64:8e:53:c8:6a:
9b:ff:d0:d0:43:ce:94:19:75:40:3d:e4:7d:e5:79:cd:c4:e1:
bd:03:2c:4b:0a:17:f7:4f:65:a6:70:01:a0:b8:a0:b2:6b:d5:
df:9b:dc:df:6a:a5:fb:98:4f:21:3f:e4:25:7c:dc:26:77:e0:
32:35:dc:cb:a5:67:ab:68:18:1f:ba:c0:1e:40:ff:8f:a9:9e:
0a:a9:5b:e4:dd:96:fe:8b:85:c8:ca:97:de:66:b6:43:ff:11:
a8:1d:1b:b6:10:10:52:a0:e7:e2:35:86:76:2e:5c:22:3b:54:
13:e2:47:ed:a4:51:c2:c1:0a:24:96:82:57:65:9a:53:6f:3c:
ff:1d:aa:da:49:0d:f7:3e:6e:b7:4e:48:15:22:83:60:45:b1:
58:aa:d9:a2:0d:73:9e:50:70:52:5f:7b:45:dd:dd:72:9d:2f:
a5:44:34:40:3e:e7:40:60:7d:0e:07:ec:60:55:64:6c:fd:eb:
f2:e8:a2:da:0c:ac:b9:15:8a:65:8f:09:f2:ad:df:8b:37:b6:
85:0f:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:55 2026 by rpki-client