Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: CXdF2IkbNjY3orGgamkCUy934CNi/iSxzcrvUoLdfbA=
Subject key identifier: 89:DE:D7:06:30:65:65:96:7A:B3:07:53:EB:B5:94:8C:3F:E9:1B:6C
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019E1D233905B0F166AE1352E4FC5CBA38BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 17:01:48 +0000
Manifest this update: Tue 12 May 2026 17:01:48 +0000
Manifest next update: Wed 13 May 2026 17:01:48 +0000
Files and hashes: 1: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: /DVjOtpNEhUZfIL7OF5YvlL/1Nx5keKXSWwqhyJCHdg=)
2: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:39:05:b0:f1:66:ae:13:52:e4:fc:5c:ba:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: May 12 17:01:48 2026 GMT
Not After : May 13 17:01:48 2026 GMT
Subject: CN=89ded706306565967ab30753ebb5948c3fe91b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:74:33:38:bd:9a:bf:6d:4e:9a:a5:25:71:
35:a8:8c:12:c1:45:57:5e:3d:75:c8:aa:f4:fb:0b:
90:c6:53:89:c6:9e:d9:c4:c3:59:39:0a:84:7e:b7:
73:94:ca:ce:4c:e5:7e:45:90:5d:e4:84:3a:c2:0d:
5c:7f:8d:2e:75:ef:3f:4c:03:cb:f9:d4:75:42:c9:
38:b1:25:72:ef:a0:2f:6c:ba:d8:16:bd:8f:8f:29:
22:c3:e2:75:95:e4:b0:8f:71:f2:c3:32:c8:72:13:
77:17:db:c0:49:9b:02:f0:96:6d:01:dc:9b:6f:2b:
bf:f7:c8:93:56:a2:d4:f9:b8:e4:48:8c:63:db:b4:
1a:b6:5a:d1:67:ef:1f:1e:a7:81:bc:87:53:a7:1d:
1e:1a:dc:bd:b5:9c:37:fa:c7:54:ea:67:2c:15:6d:
bd:7b:da:17:55:76:cb:fe:7a:64:46:aa:92:6d:26:
c8:34:d3:24:34:09:ff:45:9a:29:43:59:ef:a0:31:
16:4d:0c:51:1f:ed:b2:4a:18:4e:46:d4:17:9b:de:
ae:63:dc:c1:ee:9f:a8:5e:08:8b:f9:93:78:89:d7:
a0:dd:75:dd:87:db:83:0e:36:cb:eb:23:10:98:b5:
b5:73:57:4f:c2:82:92:7f:e1:19:dd:3f:1e:74:48:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:D7:06:30:65:65:96:7A:B3:07:53:EB:B5:94:8C:3F:E9:1B:6C
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:2d:37:43:82:5d:4b:5d:db:53:92:b7:0d:cd:47:36:c5:
5d:86:91:04:9a:47:55:a9:0e:43:94:8f:51:d2:c4:1d:b3:08:
32:3b:4a:aa:aa:a9:bf:fb:8c:e5:56:2c:4d:ba:09:48:41:a2:
5a:d2:ce:df:af:d3:f8:d5:4e:eb:45:f4:36:49:49:63:c2:ab:
c3:eb:9b:0d:50:9d:19:ce:b3:64:56:6d:a7:04:e8:4e:08:ba:
44:c0:2b:05:f6:96:da:40:b5:33:62:92:80:3a:9c:60:aa:ed:
ea:92:74:61:e4:7d:bb:73:41:fb:19:e4:cf:c3:11:e2:1a:9c:
87:e7:83:e7:57:4d:8f:1c:ba:76:b8:89:d1:86:31:e4:26:3e:
bf:30:60:4d:07:18:12:95:7e:02:58:37:f8:e1:12:09:32:f0:
c6:94:d8:45:db:ed:82:d6:87:7f:50:54:35:1f:bf:6b:20:64:
ba:a6:40:dc:5f:96:18:a9:32:3c:21:f8:f5:5e:01:c3:49:83:
94:af:15:ff:bf:35:1f:ca:07:a6:69:d6:59:c3:8e:30:d1:a3:
15:1a:26:f3:62:d8:0f:a4:5d:d8:9d:5e:0d:16:df:f3:c2:25:
92:49:77:5b:b0:96:f4:ba:0e:06:9f:d1:47:f7:cb:a8:c1:2c:
86:1a:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:16 2026 by rpki-client