Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: xNCblExVUFFgLFT+vm42LwYyC7Jqw2PZ0kpv7QF8xLI=
Subject key identifier: 33:4C:F1:AB:E8:F0:D5:A2:D3:C6:E3:73:F0:B6:D5:42:EC:04:C1:66
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019D29297B21F9397D32883B246A34D14A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: 0xNS5FrAqu36g3GIdJ2TAJPVxMM.roa (hash: 66TkZOHNCz8kIbFw6krxK2sWb7Slqjbjz6EA46ccrLI=)
2: LdG-Kuli28HC1HbwTbHy9oEVmrs.roa (hash: 0suEljlbYLb5JxhGNORaOE+cyjxWUfkMWAXq8c0oR2M=)
3: QlMmdjdXjri_CBWva21BaIFHBho.roa (hash: tN7tjjqkm4W21ZyWVVJYjmkhiCizgF+fv67Iry9MGFU=)
4: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: nFt+wmKA79hv57OstMEznUOS/bt4MemdgkHYE113Z9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7b:21:f9:39:7d:32:88:3b:24:6a:34:d1:4a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=334cf1abe8f0d5a2d3c6e373f0b6d542ec04c166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:63:ce:56:b8:61:2d:94:de:10:c2:fd:7f:
39:85:6b:33:01:f3:77:fb:39:31:d6:8d:38:7f:ea:
79:b2:d2:3c:ba:51:dc:b1:e0:29:19:72:3b:f0:7a:
2c:83:3b:9b:e3:2e:9a:8c:39:8c:3e:0d:68:e3:fd:
24:26:99:82:29:b7:77:21:49:2c:3e:44:63:8e:8a:
f7:96:9d:29:9a:03:ea:aa:46:03:89:53:a5:10:e5:
18:31:b9:b7:2c:4c:72:74:72:75:1f:cc:fc:32:f2:
cf:2b:3c:5b:26:7e:96:12:47:e6:f8:0f:0b:79:2d:
61:43:3c:81:c3:8a:05:57:3c:2d:67:7c:52:63:35:
d2:78:ef:06:da:d8:80:f2:e4:e8:de:a3:6b:80:ee:
94:c2:85:25:21:db:8a:e7:2e:7d:73:95:1f:37:f1:
c5:94:06:dd:02:ab:75:37:71:98:e6:23:49:fe:d2:
93:3f:2c:c8:c4:15:ed:29:58:9b:ca:11:be:c7:ac:
79:6b:94:a6:25:bb:40:75:e2:7f:d3:ce:1d:a1:8f:
d1:94:a5:23:15:ea:c2:43:2b:a7:a7:03:d2:6c:e9:
50:ee:ef:fa:45:3f:20:40:45:78:a0:eb:87:08:e1:
56:54:e3:a8:95:60:a5:3b:f9:36:e0:f3:6a:7c:7a:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4C:F1:AB:E8:F0:D5:A2:D3:C6:E3:73:F0:B6:D5:42:EC:04:C1:66
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:3f:7e:1e:37:df:9b:02:41:53:5a:a4:4a:ab:9c:f8:f0:
bd:7c:2f:c6:45:73:20:e8:90:3f:3f:08:47:6b:de:df:5e:b7:
2b:7c:11:74:83:4d:90:84:7d:3c:f1:a0:30:8d:6e:5f:02:b3:
72:a6:ec:46:0d:a7:58:22:5c:82:12:67:a2:5d:35:dc:6e:59:
2b:7b:0c:8f:a4:40:19:b4:04:48:35:c2:6e:27:01:0c:cc:45:
74:e4:f1:27:eb:0c:fd:9a:46:92:7e:fd:31:fa:f8:46:35:dd:
54:47:64:a2:40:46:f0:da:24:94:fb:2c:21:f3:27:24:59:27:
15:bc:ae:cd:85:36:0b:93:fd:0a:18:41:a6:03:97:b3:e1:60:
b7:1c:88:5d:cb:3f:4f:13:76:cf:95:56:43:ab:e4:e4:c5:01:
88:1d:cc:64:ee:c2:7d:60:c5:e2:ca:3e:97:a4:9d:a7:3c:95:
3c:44:67:11:3f:fe:ac:2e:57:7c:5a:62:87:0e:5c:c4:59:a7:
b2:ff:92:67:b9:47:b4:12:53:9e:49:00:ee:53:90:cb:c6:45:
6e:a7:7a:86:f8:82:39:c5:1c:d2:44:0c:56:db:dc:02:9e:68:
77:e9:1f:7f:f2:5f:09:d5:58:ce:e9:72:b7:3e:d4:fb:d3:de:
99:26:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:22:06 2026 by rpki-client