Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: sJtCe4BrWSvv9PcvVpOUB4RxLUyCWPh3DOeNT2IuMdE=
Subject key identifier: 8F:F2:FF:93:4E:08:8B:4C:7B:0D:F1:8B:A8:D2:30:65:C7:32:50:58
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 01A00101E0DD2F97406FF13E57AEE1043371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0BEE
Signing time: Fri 14 Aug 2026 16:01:35 +0000
Manifest this update: Fri 14 Aug 2026 16:01:35 +0000
Manifest next update: Sat 15 Aug 2026 16:01:35 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: mr1SEg2bDJfOGP0dThD6gfjdZqEqj47vUO5Vrdjb7Sw=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e0:dd:2f:97:40:6f:f1:3e:57:ae:e1:04:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Aug 14 16:01:35 2026 GMT
Not After : Aug 15 16:01:35 2026 GMT
Subject: CN=8ff2ff934e088b4c7b0df18ba8d23065c7325058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:57:bf:71:f6:81:20:7c:89:f2:45:b0:bc:
e6:90:b4:d1:62:e4:4c:f0:0c:8d:78:92:5a:ff:52:
89:14:75:ba:68:94:46:43:c0:d1:2e:98:9b:8e:b7:
08:13:2f:66:f1:64:1e:c3:c3:55:4e:4c:fb:82:99:
48:79:d2:c3:c4:9e:77:29:87:26:aa:cf:e2:5a:e6:
fa:74:ea:d7:ee:ba:e5:86:6e:38:38:7d:08:41:1f:
e6:5b:0c:29:ed:77:f4:53:da:21:08:c9:c0:36:65:
88:c9:59:59:30:34:8a:b8:5c:d7:bc:fd:f1:2f:58:
4b:b1:61:72:5c:46:8d:25:71:a6:d1:cd:92:d4:e7:
9a:3d:9f:ed:9a:3c:35:90:16:5e:b5:e0:fe:bb:99:
4e:d6:0f:76:aa:e4:77:fe:b0:2b:42:6b:ac:0b:5b:
ff:2d:e9:a5:72:0a:bc:21:84:c1:bd:74:10:17:16:
4d:74:5f:fb:68:06:a2:a6:c2:ab:5d:8c:17:85:3d:
5e:e6:75:3e:5c:fe:3b:14:bc:28:72:c0:57:88:20:
b7:06:64:05:23:4e:ce:71:d9:85:98:b5:e1:b8:c7:
24:04:24:c7:27:7d:f9:b3:b8:07:38:ab:19:a4:03:
f8:6f:41:96:f6:d5:54:b3:28:e6:14:36:25:5f:79:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:FF:93:4E:08:8B:4C:7B:0D:F1:8B:A8:D2:30:65:C7:32:50:58
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:13:18:87:a3:ee:60:0a:65:5e:21:be:f5:7e:0d:95:57:7f:
c8:f0:bb:cb:e2:72:aa:e0:21:89:63:84:1c:83:b2:af:28:c0:
5d:34:81:3a:a8:bc:23:7a:9c:65:a6:e8:db:fd:a9:c5:22:d4:
2f:56:b1:18:17:f4:66:e9:9a:70:18:e6:6e:c0:47:da:fc:00:
ee:c0:9c:a3:d5:27:9e:18:2f:ea:c2:ea:8a:1d:16:bf:98:b9:
d1:1d:12:40:b1:ab:87:cc:e9:f7:11:00:8e:2e:11:ec:ae:68:
55:f5:27:7c:aa:81:f8:43:d5:8b:a5:d2:98:ae:6c:0d:74:58:
8e:99:a5:19:9e:95:cb:72:32:6f:37:cd:f8:cb:3f:20:91:da:
16:2d:a2:54:18:39:8b:b7:28:be:68:d0:fc:4f:8c:56:60:26:
9a:e6:0c:df:86:71:bc:5f:a6:21:47:54:b2:57:40:99:97:56:
00:a8:7e:b6:78:96:20:4d:40:f1:fc:71:31:5a:c8:e1:f6:60:
36:36:01:e6:ec:7f:c4:2e:da:b7:cf:d9:8d:26:b7:21:05:22:
f5:66:59:a6:ce:4d:66:f9:8e:57:ed:14:08:4e:e6:61:b4:fa:
18:db:46:36:cd:78:a6:6c:9e:81:7e:0e:4a:7c:ff:98:85:bd:
fe:01:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:45 2026 by rpki-client