Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: k5F71ExHWIL5ncsQcNVmi2DEkBWjgSfbGc2TUHfMSFg=
Subject key identifier: 17:7C:9C:D5:B8:9F:EA:A0:F0:3E:A4:5C:B7:B5:35:80:BF:1A:B0:3C
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 019D3299F04F76EDC7EC05D18B777712C135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 0FC7
Signing time: Sat 28 Mar 2026 04:00:42 +0000
Manifest this update: Sat 28 Mar 2026 04:00:42 +0000
Manifest next update: Sun 29 Mar 2026 04:00:42 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: u6KoMZxjHJCqccNCzG3igXQCpaCHA0sylmI9OKO6TtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:99:f0:4f:76:ed:c7:ec:05:d1:8b:77:77:12:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Mar 28 04:00:42 2026 GMT
Not After : Mar 29 04:00:42 2026 GMT
Subject: CN=177c9cd5b89feaa0f03ea45cb7b53580bf1ab03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:34:fe:19:af:6d:15:a9:5b:02:27:6e:3b:
ef:4e:8b:f5:9e:df:ec:2b:bd:54:ad:58:a1:6e:fb:
2c:44:fd:03:b1:2c:63:a7:dd:a6:26:e8:53:20:b8:
d0:73:7f:17:29:90:a7:50:7e:50:19:7c:be:db:ee:
d1:62:74:8a:71:7b:f2:d4:23:0a:5f:64:33:62:43:
9b:66:75:ee:8a:3d:3e:b9:06:9d:1c:00:3f:f2:fc:
c6:14:01:f8:27:ab:75:6b:b2:af:aa:22:6f:ef:5c:
ce:6b:4b:ad:c0:b3:8a:02:32:23:23:d0:fb:5c:b2:
4e:75:25:07:bb:91:f1:8c:b8:f1:02:63:91:fc:e0:
d2:ec:92:b8:21:de:fc:84:0a:55:4d:96:7e:2b:8b:
b5:ee:bf:1a:b6:44:d0:05:5f:f2:ea:8d:99:3a:01:
79:91:08:03:4a:43:93:6e:ed:ca:ed:b0:61:f4:94:
eb:70:cc:16:c8:26:1a:f0:2c:16:11:42:b9:a5:a6:
e0:c0:ab:c1:80:50:5c:84:a8:27:e8:52:f5:5c:9d:
73:c5:6c:69:94:d7:27:b6:b8:a4:14:fd:c1:87:de:
85:81:de:b2:1b:bd:23:b8:eb:78:6c:7c:ce:68:af:
00:b5:a9:9a:96:ee:1a:90:e8:aa:30:60:46:64:c6:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:9C:D5:B8:9F:EA:A0:F0:3E:A4:5C:B7:B5:35:80:BF:1A:B0:3C
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:93:79:72:3c:46:db:bb:ff:c4:2b:a3:f9:e3:1b:c8:3b:b6:
9d:08:40:7c:b6:f4:c7:07:d9:77:1d:36:b0:c4:57:39:91:f3:
b3:75:09:75:24:30:83:72:02:5f:5d:ef:62:41:a3:ea:37:8a:
2e:53:f7:17:30:bb:8e:c1:56:5b:f9:a9:61:0d:d9:39:90:ff:
70:9a:82:b3:db:fc:be:77:01:0f:b8:67:42:ae:a7:38:60:c2:
7b:c7:6b:f0:38:50:4e:d0:b5:a3:85:8d:b5:a1:dd:ef:89:a4:
2d:ad:69:4f:57:e5:63:16:6f:2a:99:d1:a3:e7:ff:ab:62:35:
05:27:16:f7:6d:95:54:83:5c:99:22:da:67:c5:f1:0f:71:75:
09:6b:e2:a2:3c:ed:c4:3b:92:86:6f:07:19:9a:7a:e2:a6:37:
d5:9a:bc:6e:a4:4e:e7:92:94:4b:a3:b9:eb:3f:51:d0:fe:06:
fa:38:56:4f:5d:d1:8f:76:a3:a8:10:17:d0:92:51:4f:cc:93:
93:40:e4:04:a1:ca:cf:20:66:a7:49:4e:d7:12:5f:d0:4a:dd:
25:20:42:72:ce:d4:e1:ec:c0:88:4f:b1:4d:95:64:48:4f:e0:
71:85:65:30:d7:dc:c7:b8:35:30:1e:69:1d:44:99:b4:53:a6:
70:29:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:03 2026 by rpki-client