Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier: FcZZwEf/Mm+BQckJ9BPDJuYSp1JUfTzaGFgLSEG2tpU=
Subject key identifier: C4:C2:8D:A2:24:62:1E:BA:93:47:AC:10:C7:66:4C:B0:BE:A8:98:DA
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 01A0E4ABFD80633155D25C8D75D09876510A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number: 0EC5
Signing time: Sun 27 Sep 2026 21:01:11 +0000
Manifest this update: Sun 27 Sep 2026 21:01:11 +0000
Manifest next update: Mon 28 Sep 2026 21:01:11 +0000
Files and hashes: 1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: KFjslPM0y6WIEtawPBiD7ojZmo2/IJD0O37ERQ66u1Q=)
2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ab:fd:80:63:31:55:d2:5c:8d:75:d0:98:76:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Sep 27 21:01:11 2026 GMT
Not After : Sep 28 21:01:11 2026 GMT
Subject: CN=c4c28da224621eba9347ac10c7664cb0bea898da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:b1:00:78:35:9d:52:0b:18:10:ce:08:4d:
c7:52:4a:f6:b8:f8:e8:15:43:2c:de:39:4d:ea:49:
16:3c:f8:d6:3e:89:9a:2a:83:ce:39:37:af:7a:9f:
eb:51:0d:34:71:b5:50:1b:51:77:4f:0f:21:6c:2b:
e4:b8:68:d2:23:55:31:85:59:31:5e:71:60:24:5b:
5d:98:95:18:bc:ca:95:5a:51:c4:39:b7:10:2a:01:
2d:0a:71:c5:9e:8b:dc:98:6b:d9:e8:94:cd:ee:16:
fc:b8:2c:c6:40:14:bf:ca:58:f9:a8:8e:20:c7:2c:
46:86:b6:cf:ae:d3:87:5e:0e:11:92:8b:b2:3c:9c:
85:4d:7e:c1:47:8f:11:fb:3d:c3:3d:3e:9b:23:d3:
31:31:7f:1b:f9:0d:23:d8:c4:af:3b:84:ee:86:40:
36:2a:1f:08:23:6f:b2:63:ff:b1:64:5b:49:8e:16:
21:8e:ac:d0:68:8b:b3:fe:98:de:0c:82:df:b3:bb:
eb:3c:6e:4a:20:30:9a:1c:8b:a9:b5:8a:21:1a:96:
91:cd:ff:17:f8:b1:80:67:bf:54:ca:04:4e:18:02:
05:de:42:94:d4:b7:1c:b2:58:79:63:10:a4:01:3c:
0c:c7:4e:3f:ae:2c:d5:22:1b:f4:29:86:53:99:48:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:8D:A2:24:62:1E:BA:93:47:AC:10:C7:66:4C:B0:BE:A8:98:DA
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:aa:1c:98:2c:be:c6:d0:cd:5e:77:38:4d:22:d4:2a:74:
0d:80:d1:be:b7:58:d5:02:ef:07:bd:93:9e:ab:26:96:f9:4a:
c4:c9:69:4d:5f:77:9f:09:ba:73:33:a3:68:bc:d9:58:27:a8:
00:4e:4c:ff:42:de:da:7b:c4:55:8a:c4:a8:47:0b:31:f7:a1:
ea:af:24:85:ae:6a:41:2f:02:65:84:45:6a:a3:5d:57:71:be:
23:dc:fb:ed:bc:36:e1:bc:23:0b:1e:bf:47:93:e1:c3:0b:ed:
98:85:fd:67:6a:01:37:9c:c9:4c:8e:3e:e6:c7:8c:2c:fd:ca:
a5:83:da:f9:90:60:b0:3d:38:2a:8a:46:66:fc:7a:6a:46:03:
98:00:c8:af:57:f5:3e:33:3a:a8:c1:7d:35:0a:17:c9:69:09:
7e:fd:7c:be:52:8c:01:d1:f1:a3:4b:9b:85:61:fc:36:4f:63:
5f:4d:72:06:8c:d2:81:e6:7d:84:67:39:85:42:bb:f3:1f:52:
fd:c7:17:56:d1:48:d7:f0:9c:4c:4c:d1:c0:12:eb:82:a4:f9:
0d:24:12:0c:ee:07:30:e3:77:6a:3d:da:40:04:33:79:d1:8d:
66:cc:ae:6e:50:ea:a8:a3:0c:22:da:d1:e4:c8:16:c5:3f:66:
90:5b:12:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDkq/2AYzFV0lyNddCYdlEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTE1ZmZlMWRiZmU3NmE4MDVmZDBkZmIyZTBjOGQ3ZTQ5
YWY1OWYwHhcNMjYwOTI3MjEwMTExWhcNMjYwOTI4MjEwMTExWjAzMTEwLwYDVQQD
EyhjNGMyOGRhMjI0NjIxZWJhOTM0N2FjMTBjNzY2NGNiMGJlYTg5OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmxAHg1nVILGBDOCE3HUkr2uPjo
FUMs3jlN6kkWPPjWPomaKoPOOTevep/rUQ00cbVQG1F3Tw8hbCvkuGjSI1UxhVkx
XnFgJFtdmJUYvMqVWlHEObcQKgEtCnHFnovcmGvZ6JTN7hb8uCzGQBS/ylj5qI4g
xyxGhrbPrtOHXg4RkouyPJyFTX7BR48R+z3DPT6bI9MxMX8b+Q0j2MSvO4TuhkA2
Kh8II2+yY/+xZFtJjhYhjqzQaIuz/pjeDILfs7vrPG5KIDCaHIuptYohGpaRzf8X
+LGAZ79UygROGAIF3kKU1Lccslh5YxCkATwMx04/rizVIhv0KYZTmUgs8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTCjaIkYh66k0esEMdmTLC+qJjaMB8GA1UdIwQY
MBaAFANRX/4dv+dqgF/Q37LgyNfkmvWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAt
ZDM4NDk1ZmIwOWEwLzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMWY2MDUtYTFmNS00NTIzLTg1ZDAtZDM4NDk1ZmIwOWEw
LzEvQTFGZl9oMl81MnFBWDlEZnN1REkxLVNhOVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpOqHJgs
vsbQzV53OE0i1Cp0DYDRvrdY1QLvB72TnqsmlvlKxMlpTV93nwm6czOjaLzZWCeo
AE5M/0Le2nvEVYrEqEcLMfeh6q8kha5qQS8CZYRFaqNdV3G+I9z77bw24bwjCx6/
R5PhwwvtmIX9Z2oBN5zJTI4+5seMLP3KpYPa+ZBgsD04KopGZvx6akYDmADIr1f1
PjM6qMF9NQoXyWkJfv18vlKMAdHxo0ubhWH8Nk9jX01yBozSgeZ9hGc5hUK78x9S
/ccXVtFI1/CcTEzRwBLrgqT5DSQSDO4HMON3aj3aQAQzedGNZsyublDqqKMMItrR
5MgWxT9mkFsSkQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:47:50 2026 by rpki-client