Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: nVoQpvw08RtnkM+75SHea58PEefE20uWbB4Y8YMPfN0=
Subject key identifier: 34:E1:F3:13:E8:BF:F3:FF:2F:ED:DD:A8:1F:15:FA:9E:4F:41:FB:7D
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019F19438EBB5466C698BE5961AD11BE2656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0B76
Signing time: Tue 30 Jun 2026 16:01:25 +0000
Manifest this update: Tue 30 Jun 2026 16:01:25 +0000
Manifest next update: Wed 01 Jul 2026 16:01:25 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: 4LxpQ62rS3iymOTI9Evh9bxPDpE4ms9enwd42XQT+pY=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:8e:bb:54:66:c6:98:be:59:61:ad:11:be:26:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Jun 30 16:01:25 2026 GMT
Not After : Jul 1 16:01:25 2026 GMT
Subject: CN=34e1f313e8bff3ff2feddda81f15fa9e4f41fb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:c6:59:a8:fc:19:9e:20:26:91:4d:16:0f:
65:7d:9d:db:be:f1:07:f5:f9:51:8c:9b:ff:e0:8a:
9c:38:9f:b6:f5:64:b3:98:9c:1d:e9:4a:91:a4:5e:
d7:41:71:80:3d:66:63:e4:14:44:68:f3:c2:67:f1:
5a:28:48:a4:2e:d3:fe:c1:63:a9:44:a0:9c:87:44:
e6:0e:b4:85:cf:f4:83:4b:58:55:c5:a0:a9:b7:53:
c7:86:95:aa:8a:bb:70:d1:29:1a:1d:8d:6c:b2:f5:
29:aa:63:57:82:31:7c:e9:d9:3b:6e:aa:d0:d8:81:
de:e0:57:21:1b:33:c0:53:79:7c:6f:16:bb:6c:10:
8d:dc:4f:29:b9:9e:f6:a1:41:4a:18:39:fa:eb:dd:
40:67:c4:3d:a2:c1:25:38:8d:a1:0d:1f:51:c9:6e:
00:16:e4:e2:44:1b:72:2d:9c:43:bd:a0:c0:30:6b:
19:a4:e9:95:a9:81:6c:0c:25:8c:8a:89:c1:62:65:
b9:3f:5e:ae:47:fe:36:37:63:89:71:bd:51:bf:97:
76:ab:7a:35:95:82:27:74:cf:79:d2:a8:ab:9c:d8:
bd:a5:17:73:d7:49:d3:42:49:24:34:0d:a5:95:17:
d2:35:04:b8:cc:5c:34:45:d4:e0:d1:d1:fb:b8:a9:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E1:F3:13:E8:BF:F3:FF:2F:ED:DD:A8:1F:15:FA:9E:4F:41:FB:7D
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:7a:1c:44:93:bb:f8:21:2d:6b:b2:1e:9c:85:6a:60:ab:
9e:84:eb:7f:d8:b8:67:39:6e:dc:1f:bd:92:18:b6:f5:70:79:
0e:79:a6:a3:c9:12:75:55:59:18:eb:0b:aa:87:86:49:50:f8:
9c:b1:d9:54:3b:58:57:f0:3f:2f:76:98:23:14:94:0f:dc:e8:
d2:55:c7:29:46:b7:6e:fb:76:19:ee:c4:8d:aa:c1:e4:cb:7d:
5b:c5:71:fb:a7:a2:15:f8:b6:c4:ae:4c:b2:9b:8e:31:90:46:
04:0a:47:1c:f7:e2:d7:c9:12:22:d0:1d:a6:b2:48:d5:f0:2c:
ac:75:ee:f7:e3:79:19:73:bc:e9:b1:7d:b5:da:de:e4:9b:18:
8f:b5:a3:fb:8a:b6:4a:2c:05:b4:d1:43:19:ed:d7:dc:ea:14:
42:e7:28:d2:b6:fa:4d:8d:80:40:20:f9:79:c2:99:32:7d:24:
00:46:e3:7f:3d:1e:5e:f4:45:4d:d8:86:98:c9:22:50:1d:bf:
94:6e:e0:df:3e:f3:db:54:9c:ba:bb:01:e4:a8:6d:68:c6:c2:
4c:d1:b5:a3:c5:eb:03:cf:dd:d9:d8:7c:d7:b9:bb:f5:bb:f2:
6e:06:e4:82:84:ba:03:17:6c:c4:26:c9:5d:29:da:51:43:60:
d5:29:13:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ467VGbGmL5ZYa0RviZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTA4NWViOTVhZDU1ZmIzYTZiMjQ3ZTk2NzgxMTJhMTRk
ODE5MjYwHhcNMjYwNjMwMTYwMTI1WhcNMjYwNzAxMTYwMTI1WjAzMTEwLwYDVQQD
EygzNGUxZjMxM2U4YmZmM2ZmMmZlZGRkYTgxZjE1ZmE5ZTRmNDFmYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UvGWaj8GZ4gJpFNFg9lfZ3bvvEH
9flRjJv/4IqcOJ+29WSzmJwd6UqRpF7XQXGAPWZj5BREaPPCZ/FaKEikLtP+wWOp
RKCch0TmDrSFz/SDS1hVxaCpt1PHhpWqirtw0SkaHY1ssvUpqmNXgjF86dk7bqrQ
2IHe4FchGzPAU3l8bxa7bBCN3E8puZ72oUFKGDn6691AZ8Q9osElOI2hDR9RyW4A
FuTiRBtyLZxDvaDAMGsZpOmVqYFsDCWMionBYmW5P16uR/42N2OJcb1Rv5d2q3o1
lYIndM950qirnNi9pRdz10nTQkkkNA2llRfSNQS4zFw0RdTg0dH7uKmhswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTh8xPov/P/L+3dqB8V+p5PQft9MB8GA1UdIwQY
MBaAFNWgheuVrVX7OmskfpZ4ESoU2BkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzIt
Zjk0YWRjMWJiZDkwLzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85NDU1OGEtMjgwMy00NGMyLWE3NzItZjk0YWRjMWJiZDkw
LzEvMWFDRjY1V3RWZnM2YXlSLWxuZ1JLaFRZR1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/R6HEST
u/ghLWuyHpyFamCrnoTrf9i4Zzlu3B+9khi29XB5Dnmmo8kSdVVZGOsLqoeGSVD4
nLHZVDtYV/A/L3aYIxSUD9zo0lXHKUa3bvt2Ge7EjarB5Mt9W8Vx+6eiFfi2xK5M
spuOMZBGBApHHPfi18kSItAdprJI1fAsrHXu9+N5GXO86bF9tdre5JsYj7Wj+4q2
SiwFtNFDGe3X3OoUQuco0rb6TY2AQCD5ecKZMn0kAEbjfz0eXvRFTdiGmMkiUB2/
lG7g3z7z21ScursB5KhtaMbCTNG1o8XrA8/d2dh817m79bvybgbkgoS6AxdsxCbJ
XSnaUUNg1SkToA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:12:53 2026 by rpki-client