Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: PHZxUnXnJVqk7GIf/AGf3kfti5Up1uipfgYqM+GVIxo=
Subject key identifier: 51:FC:A7:03:47:20:07:E6:BA:C4:CA:9D:34:C2:D2:D4:FF:BC:27:9F
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 019D262883F919C2CA9C223AC3ACDB87401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 03D4
Signing time: Wed 25 Mar 2026 18:01:22 +0000
Manifest this update: Wed 25 Mar 2026 18:01:22 +0000
Manifest next update: Thu 26 Mar 2026 18:01:22 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: RFQIW2Ea3FYhHIPYQSBg07fUBZ8+cuXYgNq5nT+ZCD0=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:83:f9:19:c2:ca:9c:22:3a:c3:ac:db:87:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Mar 25 18:01:22 2026 GMT
Not After : Mar 26 18:01:22 2026 GMT
Subject: CN=51fca703472007e6bac4ca9d34c2d2d4ffbc279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:0b:f8:e4:f3:e2:33:6c:79:ff:ac:81:1e:
e7:5e:0d:eb:02:20:d9:57:3c:2f:6c:97:24:64:62:
57:b1:ed:7b:d0:01:76:68:4c:89:99:ef:da:a0:9b:
a5:18:08:6a:a4:a7:00:82:07:15:ff:a5:35:31:21:
ae:e7:38:d3:b6:17:36:16:d4:28:a2:96:c4:12:05:
ff:28:4f:50:88:63:79:a8:ea:36:97:c5:cd:22:41:
3f:be:0d:8a:65:1b:17:82:d9:fc:08:d7:1e:89:a7:
64:f9:be:8e:6c:bd:5d:35:ef:9c:64:74:2d:7e:aa:
dd:ae:3c:9a:f6:e0:7b:86:cc:23:ac:a0:4c:ed:8f:
9c:a0:c5:b2:43:37:83:77:1c:a7:21:cc:32:8f:2f:
13:a3:c4:c4:82:2c:08:e8:cc:a0:d5:4c:c5:dd:bf:
3b:0b:86:d8:83:03:8e:1e:99:6b:3b:d3:2c:a3:de:
ee:40:10:b2:5e:60:c0:08:a9:de:92:c4:7d:b9:88:
0a:3d:3e:26:05:7f:76:63:09:b0:52:4d:b3:3f:7b:
e3:12:12:5f:b8:9b:53:83:32:08:52:72:74:fd:a2:
c5:2e:fc:0b:6d:9f:ca:47:be:95:db:d7:64:9c:3a:
ce:14:f4:15:39:be:10:bd:ad:55:13:8a:23:b9:48:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:A7:03:47:20:07:E6:BA:C4:CA:9D:34:C2:D2:D4:FF:BC:27:9F
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e0:21:db:e3:bf:00:87:83:35:79:7e:b4:27:08:a5:40:c9:
46:8b:cc:b8:df:65:5b:fc:f9:f7:39:bc:e2:4b:8c:1a:9a:9c:
69:da:8a:70:3e:f8:af:9f:2a:d9:93:26:ee:1d:8a:c9:50:58:
16:52:af:5f:c9:41:40:ac:45:80:9d:d5:16:1a:88:1e:3d:82:
b5:b2:bc:83:d0:95:32:30:e9:69:e3:ea:78:97:e5:de:5d:5a:
01:61:be:f0:a6:bb:7a:18:95:32:81:ca:0d:35:75:db:8e:60:
7e:b0:45:ea:69:c4:33:70:0f:53:4d:bc:e7:61:83:31:eb:6d:
f8:41:c5:e2:fa:20:55:3a:88:81:09:8d:16:4b:d2:a7:43:1f:
8b:b0:a6:1e:49:35:9c:e9:77:22:24:8c:90:62:23:62:18:8a:
8e:2b:45:33:b5:1c:92:83:a5:ed:8d:70:60:9d:7f:a4:1f:69:
78:05:e4:cb:dc:ba:35:c3:b3:db:ed:8b:f9:0e:dc:f7:e7:9f:
d0:43:7c:51:8a:f9:ae:21:7a:8c:32:51:8e:69:5b:d9:49:c4:
7c:89:7e:8b:9d:b2:a9:7e:53:bf:b2:0d:6a:b2:ec:bc:43:c3:
29:bc:0d:09:60:13:2f:74:60:a3:c6:45:c0:24:79:66:14:eb:
25:8d:c3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client