Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: Hq0SSIBu3xFPk03juPvdzWmkWR2pw+iq/4+UESaUyxA=
Subject key identifier: F1:DF:7A:5D:BB:FD:1A:0A:4A:6F:DB:74:48:97:5C:14:EB:0B:15:1F
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 019F93FF66D83F44CA7187EBFF66F21BDF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 0516
Signing time: Fri 24 Jul 2026 12:00:16 +0000
Manifest this update: Fri 24 Jul 2026 12:00:16 +0000
Manifest next update: Sat 25 Jul 2026 12:00:16 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: H/CMCZmUpb6Mbm+nOhbJFJd0KwbTGUUiNezzm+qRGZ8=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:66:d8:3f:44:ca:71:87:eb:ff:66:f2:1b:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Jul 24 12:00:16 2026 GMT
Not After : Jul 25 12:00:16 2026 GMT
Subject: CN=f1df7a5dbbfd1a0a4a6fdb7448975c14eb0b151f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:60:fe:94:b4:98:60:f8:fc:05:7e:15:2f:
2e:20:51:f2:66:1f:c8:55:30:83:4a:c9:88:2f:09:
52:99:fe:16:e5:de:1c:39:53:5f:70:28:13:10:50:
b1:f7:d8:a9:53:8f:93:42:34:eb:50:1e:c5:d3:03:
65:d4:43:67:2f:de:65:aa:e9:5e:cb:47:5b:6e:6f:
7e:c7:c5:1b:83:b6:58:d9:30:2e:4f:fb:a4:ad:7d:
36:57:05:18:c1:29:6d:d1:6c:d6:f1:cd:ea:65:6f:
87:01:d4:83:5f:20:1c:6b:27:8a:24:4b:f0:09:42:
9c:6b:21:28:db:41:66:b3:24:a2:5f:16:af:e0:bf:
34:64:3a:86:ad:73:52:92:eb:43:e8:a7:ba:e6:94:
69:80:d0:7c:26:80:0b:9c:31:8a:56:d6:68:b6:cf:
bf:6b:d9:1f:31:a6:9b:6e:79:14:e2:e2:73:18:3a:
a9:fc:65:13:7e:a2:40:86:d9:75:a8:b2:a8:bb:dc:
88:06:99:02:b7:bc:db:42:0c:72:b3:f2:4b:04:18:
b2:db:f2:d1:fb:2f:2f:db:85:67:76:5c:69:30:5b:
65:9a:6f:4b:0e:a6:e4:f6:41:1b:21:34:57:2b:4a:
35:91:4f:41:35:10:75:54:5b:c9:f1:f3:8c:91:eb:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DF:7A:5D:BB:FD:1A:0A:4A:6F:DB:74:48:97:5C:14:EB:0B:15:1F
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:37:5f:cd:c2:76:9a:65:e7:b5:54:f0:b4:47:05:6d:74:a6:
00:6c:e9:e0:af:65:55:fd:9b:e8:54:94:d8:c5:14:2b:db:1b:
ad:db:1a:c9:23:48:d6:b5:0b:52:31:e9:33:7a:f9:d7:51:ab:
c7:46:fc:bf:69:1e:6c:c3:8c:6e:f4:ff:23:cb:1a:7f:d2:1c:
3d:2f:f3:6a:87:1a:17:f7:4c:43:9b:76:30:0f:44:6a:84:b1:
d8:3d:c5:ef:66:a1:06:27:b4:d1:d9:79:2f:8c:4e:05:cb:3c:
a4:d3:6a:c5:9b:54:08:e1:1b:13:35:58:0d:64:5b:4b:94:83:
5b:21:e5:44:ae:4c:5b:6b:80:fc:6b:5d:3e:8a:d8:fa:60:dd:
35:27:41:da:c4:16:84:77:be:94:17:7f:39:3c:71:99:c3:82:
f9:8f:dd:29:8e:08:23:3c:e1:9f:c3:4f:68:40:d0:aa:40:e8:
62:55:78:7c:f0:11:0d:0f:94:ec:14:6b:bc:c9:5a:77:0b:86:
de:0e:5e:bd:6f:ed:72:b6:0c:92:3c:76:fa:fd:37:3a:8c:f0:
40:d1:a1:50:b6:e1:1d:3c:53:7b:10:aa:f2:7d:ac:3c:0e:69:
f6:cb:7b:fd:4b:5e:9d:15:6c:63:d2:b5:2a:6b:3a:e2:53:49:
ff:b5:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:53 2026 by rpki-client