
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
File: A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft (raw, json)
Hash identifier: 3kJ1y7Jljc1uZtHRqVcml5E2O3htRCVTtAsl6vMsz44=
Subject key identifier: A9:72:12:40:76:5D:4D:4B:7D:74:B7:AA:62:6A:5B:35:B7:0C:9D:F1
Authority key identifier: 03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
Certificate issuer: /CN=03590f562050d9769ed57b07b1bc931ecddf1397
Certificate serial: 01A0CFA4C0C535B18E28D5E8232C37D85BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
Manifest number: 11A6
Signing time: Wed 23 Sep 2026 19:01:15 +0000
Manifest this update: Wed 23 Sep 2026 19:01:15 +0000
Manifest next update: Thu 24 Sep 2026 19:01:15 +0000
Files and hashes: 1: 0THIEFLPGzyRudImhlLOCHA8Xm0.roa (hash: ObG1p5RA+7bSM1qqVPI+8hEztkIOy9iOV3GpF72AbQE=)
2: A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl (hash: xDqkDrJ+LmCsWPXOWMjPAeCxGVJQb42RWZl8sPZiYpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:c0:c5:35:b1:8e:28:d5:e8:23:2c:37:d8:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03590f562050d9769ed57b07b1bc931ecddf1397
Validity
Not Before: Sep 23 19:01:15 2026 GMT
Not After : Sep 24 19:01:15 2026 GMT
Subject: CN=a9721240765d4d4b7d74b7aa626a5b35b70c9df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:4a:13:a2:93:33:ca:9b:94:23:d5:fd:f3:
6a:d3:db:a6:42:d8:ef:71:b4:35:cb:25:00:22:fd:
e2:fe:e8:58:7b:ed:5a:8c:af:2a:c1:ac:7a:c3:fe:
ac:0e:46:8b:f9:de:e2:e8:19:c4:60:56:fd:46:6d:
a2:a0:5a:7b:63:04:1f:fe:c7:d2:95:aa:2d:06:c5:
9a:ff:bd:e0:a2:e2:d5:e7:8e:6c:df:fb:50:52:41:
b4:58:39:de:aa:be:d2:de:67:d3:ba:e3:d6:9b:9c:
6b:51:4c:05:1f:8b:0c:ea:85:3e:9f:ea:a0:eb:fe:
81:3d:45:d8:7d:9d:ff:6a:d5:5d:60:fb:8f:f4:73:
0f:be:41:48:b2:e5:df:97:37:20:73:3e:ab:97:8e:
a2:7d:46:93:0f:f2:08:6b:12:82:e4:1f:af:80:22:
f6:b4:c1:33:93:21:43:d2:fc:d6:b8:4c:61:28:1d:
b8:7e:88:ac:5b:a4:61:1d:de:04:78:22:ef:e6:2a:
f9:13:8e:ca:86:b5:75:96:d3:b2:4d:e8:cd:0c:ff:
6e:10:c1:58:af:df:0d:6e:43:2e:0a:bd:aa:e2:32:
2b:d2:dd:ec:82:c3:a9:a4:64:29:95:b8:cd:70:24:
c5:62:46:ef:9a:6c:1e:98:18:27:da:20:19:b6:b3:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:12:40:76:5D:4D:4B:7D:74:B7:AA:62:6A:5B:35:B7:0C:9D:F1
X509v3 Authority Key Identifier:
keyid:03:59:0F:56:20:50:D9:76:9E:D5:7B:07:B1:BC:93:1E:CD:DF:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1kPViBQ2Xae1XsHsbyTHs3fE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b1016c-121a-4988-b890-ecc4c1c36b0d/1/A1kPViBQ2Xae1XsHsbyTHs3fE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:22:6b:e5:bb:20:4a:d1:db:6a:c0:29:15:b0:13:14:58:
5a:1b:04:db:6c:06:e7:1f:9d:15:65:5a:36:fb:4b:aa:95:bd:
d3:9a:eb:14:71:d8:96:40:4e:99:c3:2e:3c:a8:d8:45:d0:ae:
cc:20:16:84:da:bf:f0:f4:d4:3d:40:51:e4:d2:af:ac:4c:14:
d4:f4:a3:9a:0d:b0:b2:5e:64:47:9b:f3:0b:a6:ff:e6:e2:09:
c1:5b:6c:18:70:da:fd:a8:81:eb:69:be:9b:c5:eb:51:27:b4:
ee:39:e8:e5:12:c2:eb:f4:92:3a:54:1a:c3:f6:f3:db:c3:2d:
e1:8c:ce:69:cf:5a:d4:c6:f6:04:2a:78:2b:3d:74:e0:1b:ea:
00:96:e6:02:61:3f:0f:86:f6:45:67:db:bc:b0:74:1a:20:01:
f1:8f:0b:8c:f5:49:ac:f4:14:48:01:4a:23:71:d1:87:7b:6d:
be:ab:d4:b6:f7:43:dd:76:ff:b6:ba:0a:c1:11:80:15:83:56:
bb:a5:43:38:63:c6:ce:9e:1a:c2:fb:cb:5f:76:35:27:2c:37:
9b:bd:6c:ce:1f:f2:23:71:77:b8:ce:8c:9e:53:76:b9:96:12:
c1:c6:36:54:0e:42:2f:02:a3:7f:71:fb:89:fc:bf:f3:78:74:
f1:6e:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:22 2026 by rpki-client