Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: l6s1HM+nHvR/XG3GqGcIEjQLUe1QFCMSXSQzwyeTGmg=
Subject key identifier: 84:6B:CF:AF:24:7C:DD:AF:B9:65:A3:5B:6F:DF:35:2A:3B:EB:74:AE
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019F11894C5AC1AF92B2A52BAC6C44FEAF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 0101
Signing time: Mon 29 Jun 2026 04:00:38 +0000
Manifest this update: Mon 29 Jun 2026 04:00:38 +0000
Manifest next update: Tue 30 Jun 2026 04:00:38 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: 5BNHfMNtZct8luYhEEAW8KeA5Pf6X/7a64fncFcthBM=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:4c:5a:c1:af:92:b2:a5:2b:ac:6c:44:fe:af:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Jun 29 04:00:38 2026 GMT
Not After : Jun 30 04:00:38 2026 GMT
Subject: CN=846bcfaf247cddafb965a35b6fdf352a3beb74ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:6f:be:af:34:56:98:4f:c4:c0:42:c5:a3:
bd:bc:c9:a6:51:94:3c:3b:96:87:d5:e0:8c:de:9a:
64:00:70:24:a6:2a:43:3c:7e:cb:9f:59:4f:3b:5d:
6b:ed:74:7b:f5:ef:9e:b8:09:84:ea:1a:ea:a2:8f:
b0:11:95:33:d9:54:e6:bb:76:ea:c9:58:fc:b2:01:
fb:91:a2:02:73:8a:cf:8d:91:b7:dd:ae:c5:af:68:
d7:78:8f:3e:aa:2c:c4:69:6a:98:d5:8a:51:19:fd:
8d:df:d4:1f:8a:3d:9f:0c:dc:78:9e:e2:08:1a:cc:
d8:41:76:63:77:31:60:d9:55:d9:65:cc:2d:20:26:
d3:46:be:8c:c1:20:f3:b0:7b:4f:d5:5d:a6:9b:1d:
6b:49:50:a3:87:9a:e3:de:3b:9c:1c:de:00:b1:43:
cd:d8:74:7d:76:f6:dd:59:6b:e3:e5:31:db:bf:ac:
a7:a4:76:20:8a:73:ef:b9:16:43:a4:7b:4d:1c:f8:
a4:95:eb:68:15:ea:d4:46:fb:da:f7:97:d9:a8:e8:
ca:32:ce:ea:9b:f0:59:5e:f0:1f:e3:aa:d5:d2:57:
cb:d9:83:62:0b:ea:f7:09:2b:36:5d:ea:2e:a4:d5:
34:8f:5c:7f:d8:8c:80:64:46:1a:04:ff:47:8e:5e:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6B:CF:AF:24:7C:DD:AF:B9:65:A3:5B:6F:DF:35:2A:3B:EB:74:AE
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:79:83:9e:d9:8d:a3:f8:9d:4b:e7:75:e5:e0:a6:20:79:
98:5f:88:23:16:60:ec:f6:ff:f5:85:aa:2e:50:43:df:38:49:
48:c6:a8:db:ad:ad:8d:9c:03:d7:a5:13:71:a7:3a:93:ba:79:
e5:e0:b9:c0:c1:db:22:ef:14:96:6f:82:18:ec:b2:a4:9c:64:
61:fd:6a:0a:b5:ee:b7:70:04:a5:1e:11:be:ca:99:c0:e8:47:
ad:9d:2d:6f:24:33:27:ca:65:8d:7c:a6:46:84:1d:30:c6:ff:
70:e8:18:6a:82:9d:10:1e:e4:09:39:c9:56:59:a8:4d:4b:02:
e8:96:8d:eb:92:90:24:bf:d5:b4:14:f7:b8:b6:5b:89:62:d6:
83:cf:75:b2:62:2f:84:c7:79:de:c0:ab:54:60:f9:72:53:4c:
83:c4:e2:aa:71:ae:b4:e4:be:82:d7:8d:ae:60:e7:9f:bf:68:
bf:7c:91:e0:db:94:c3:2f:54:72:f6:d1:c4:67:5f:ed:46:06:
d2:0d:ea:c3:31:aa:22:d6:07:16:f4:55:fb:9c:4d:30:56:60:
85:99:82:ed:29:03:20:3e:74:a1:1e:a7:4f:95:26:b1:6c:05:
28:6a:7f:4e:8d:74:0a:af:1f:6f:49:fd:8e:48:77:b6:29:cd:
72:eb:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:05 2026 by rpki-client