Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: TV2gy/dWmUcKBpPZM9QLsR2ob2q16zzNwPPXglgT7bk=
Subject key identifier: 91:B3:EB:94:65:E6:0A:E8:D0:79:79:13:84:65:4B:E8:72:70:C9:C8
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019D265FBCE665AAC3E75CEB74B4E2C78E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 17B8
Signing time: Wed 25 Mar 2026 19:01:41 +0000
Manifest this update: Wed 25 Mar 2026 19:01:41 +0000
Manifest next update: Thu 26 Mar 2026 19:01:41 +0000
Files and hashes: 1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: ElAg0vBZQyMCpKY9zugkZguCyJAeHPmOUaScAru8FoQ=)
4: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:bc:e6:65:aa:c3:e7:5c:eb:74:b4:e2:c7:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Mar 25 19:01:41 2026 GMT
Not After : Mar 26 19:01:41 2026 GMT
Subject: CN=91b3eb9465e60ae8d079791384654be87270c9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:5d:90:11:66:3a:fd:c2:99:e4:20:46:ca:
22:13:cb:51:4c:00:01:b9:5c:17:61:d3:ae:82:bc:
83:cb:f8:25:2f:bc:7e:6d:d7:c8:21:03:ed:d6:25:
15:b8:46:ef:f3:76:43:d9:86:b4:98:77:0c:aa:92:
bd:6a:6f:b0:16:65:4a:db:95:34:4f:52:7d:8f:33:
5c:3b:43:18:40:b7:e7:19:00:cc:8e:a4:41:b6:2c:
7a:a0:89:d3:45:32:de:85:c1:6c:1f:7f:ac:5f:74:
e5:83:4d:84:9d:e5:5e:c5:41:a6:be:57:1b:ef:d7:
8c:90:74:e0:de:d9:1b:52:7c:d8:7e:3b:77:cb:7e:
9e:8c:0d:9d:f1:bc:75:49:9a:92:15:a2:58:92:c7:
a6:ff:c9:0a:4f:f1:fe:9a:9d:01:1f:07:d9:54:af:
ad:92:c3:e4:51:98:90:d6:74:f8:83:62:49:94:e8:
e4:20:3f:62:83:38:ca:61:25:33:b7:60:47:73:7f:
28:cc:b2:66:11:94:c1:07:3e:62:45:81:40:f5:e4:
ff:1b:9d:03:67:cf:d3:62:97:9e:18:e9:1a:fd:17:
84:bf:d7:77:7c:fd:d0:84:f3:a6:1f:09:9f:95:e9:
d0:e8:1d:43:ee:ca:65:d5:fe:0a:7b:59:7f:a1:a5:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B3:EB:94:65:E6:0A:E8:D0:79:79:13:84:65:4B:E8:72:70:C9:C8
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:05:f8:1e:64:f9:7c:c2:19:a6:3b:23:22:ff:94:25:81:
a7:04:e5:21:b8:93:46:d5:bd:46:18:0c:d4:c2:12:88:85:3b:
74:ab:d5:ef:da:e7:d8:09:3d:78:85:a1:33:1a:d6:45:4f:8f:
91:26:79:ac:f6:5d:26:7b:58:da:e3:35:6b:e1:b7:66:23:7d:
ba:e7:59:b2:b3:08:e9:2b:02:00:b4:e7:59:61:99:13:5a:96:
96:6e:e8:d3:28:04:6d:90:6e:0b:41:6b:01:b3:82:38:45:52:
f4:a3:f1:35:47:70:8f:2f:cb:ce:70:bf:8e:3a:27:f8:fe:79:
46:38:9d:b2:b0:c0:1f:c8:c0:b0:3d:43:b9:89:e9:96:b7:da:
9b:fe:3f:cb:5d:eb:61:cd:e7:ba:48:d8:46:e7:a9:35:ec:f8:
e3:fd:80:33:91:97:45:57:9c:ae:e6:6f:f8:74:63:7a:1a:78:
91:52:bf:06:06:f9:a9:cb:43:cc:bb:a2:30:ec:56:54:b7:49:
3a:c3:4c:f6:17:ad:8e:16:5d:57:17:ff:04:06:ec:9a:77:bd:
bb:22:de:d8:9b:fc:8e:db:28:f6:d0:5a:f8:a1:43:ab:5e:42:
9f:62:47:e1:aa:72:f4:2c:a4:c0:4f:05:0b:30:f9:0a:8c:9a:
60:2a:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:39 2026 by rpki-client