Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: h1KXCGJDbrRDQyANWfUaeLeBuA75SF00Gl2azMfm2Fk=
Subject key identifier: B4:D2:B6:1C:3E:CF:7A:29:13:F5:7A:58:22:D7:21:7D:AE:53:FB:D9
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019E2F97392AB30BB9E1413415CFE25F9D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0AFD
Signing time: Sat 16 May 2026 07:01:40 +0000
Manifest this update: Sat 16 May 2026 07:01:40 +0000
Manifest next update: Sun 17 May 2026 07:01:40 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: m31t9uIldHYpukbGmZP0NVl+oQxlA0/9q6DC2IRmHX4=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:39:2a:b3:0b:b9:e1:41:34:15:cf:e2:5f:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: May 16 07:01:40 2026 GMT
Not After : May 17 07:01:40 2026 GMT
Subject: CN=b4d2b61c3ecf7a2913f57a5822d7217dae53fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:38:f4:e2:54:ef:d9:6d:ba:8f:b1:bb:75:
69:31:aa:83:b4:42:ca:1f:61:7e:41:e2:f6:86:97:
f4:35:02:d2:e7:ff:f9:a7:10:1e:e0:5d:df:62:22:
3a:6e:b2:82:ee:89:86:5b:a1:42:08:d1:57:42:23:
e6:23:2a:8d:8e:81:0b:83:04:8a:bb:0a:50:c4:b6:
9f:29:06:34:15:db:3d:f1:69:5f:14:a3:85:0d:5f:
1f:7e:d6:8e:63:b9:0c:6f:08:9e:9c:ec:56:ca:1e:
e9:17:de:02:cf:3e:4a:5b:bc:d7:1b:66:e4:6f:e3:
0c:2d:4e:9b:a7:3e:03:b2:04:8f:09:fa:ca:b5:31:
3e:c2:52:e6:3a:d4:ba:2b:50:2f:be:f6:50:9c:92:
bd:2a:1f:17:bd:1d:d7:85:f5:ee:49:7d:c1:7d:7b:
67:d7:df:e5:0f:be:97:6c:42:88:21:76:24:ad:99:
19:d0:9b:6c:60:4a:00:f4:e7:df:16:07:88:11:91:
1d:7a:22:25:e2:91:c2:85:d9:5e:c8:4f:12:c1:1d:
5a:74:fa:1a:5b:b2:da:80:cd:ab:08:69:70:3a:7a:
b9:7b:16:76:51:69:ca:c9:4d:b7:c1:54:12:3f:a4:
b4:db:95:e8:f5:13:4f:1a:f5:93:73:49:7e:31:26:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:B6:1C:3E:CF:7A:29:13:F5:7A:58:22:D7:21:7D:AE:53:FB:D9
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e4:f8:ca:d9:f6:c4:61:f4:fa:3b:b9:4c:f1:fb:92:b0:21:
c4:54:35:a1:fd:a0:1a:cb:a7:dc:94:27:ec:ca:d4:3f:8c:c8:
ef:35:09:ac:22:ee:98:01:e6:f6:f9:2b:0e:94:1a:94:57:a4:
25:b6:ff:24:8c:74:40:cb:df:26:1c:b7:1e:d6:8a:48:7a:70:
e7:36:b1:12:ae:6c:c8:f1:7b:00:ad:f3:7d:93:e4:af:6d:77:
4c:c5:74:7a:0e:c2:2c:46:ea:b5:7b:78:99:c5:bb:30:25:2c:
52:a8:8c:32:be:37:11:ac:93:80:79:6f:cd:4c:ad:05:59:c9:
de:a7:07:f8:b3:4b:be:7b:7a:07:d6:9e:08:06:de:18:d7:34:
0c:0a:26:d9:c5:98:4c:d9:ec:ea:0d:21:b5:ef:a7:a8:7f:36:
32:dc:51:ed:08:46:4c:1c:d2:b5:86:c3:0f:3b:9d:35:1e:4e:
27:0c:52:9c:b0:57:8a:af:b6:b4:05:d4:23:61:01:57:fb:7b:
1b:11:48:47:bb:2e:1d:2f:80:74:c5:bf:b1:1e:4d:9f:43:2a:
89:d5:c2:c6:54:20:55:08:6a:26:df:52:2e:c3:91:b3:1c:d7:
58:be:88:9d:54:ae:fd:c1:3a:2a:01:5b:de:fe:8f:01:df:e9:
06:19:64:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:56 2026 by rpki-client