Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: 6NgJ8Iu1LZMx42w6wbV7bk7wf1i3eRQ4eEeaC5xN/p4=
Subject key identifier: 96:19:38:8E:61:07:6F:D3:80:04:8E:B0:78:3B:F3:10:F5:53:CB:F4
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019E28EF99C28C51DE65750ECA3A42872769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 88
Signing time: Fri 15 May 2026 00:00:51 +0000
Manifest this update: Fri 15 May 2026 00:00:51 +0000
Manifest next update: Sat 16 May 2026 00:00:51 +0000
Files and hashes: 1: 1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa (hash: cnjmn37Bymr+KZc+EQAJuebAi5xDmdRRwv+K/KGNEr4=)
2: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: 3DVfF1Yo/a6ZmcrQFzXoPzB2rB5L5bIwYw6eIAGt0QQ=)
3: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:99:c2:8c:51:de:65:75:0e:ca:3a:42:87:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: May 15 00:00:51 2026 GMT
Not After : May 16 00:00:51 2026 GMT
Subject: CN=9619388e61076fd380048eb0783bf310f553cbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:0b:97:22:46:2e:90:96:cf:fc:2e:27:82:
20:2e:b9:19:b5:a1:76:cd:16:4c:9b:c0:be:b7:26:
dd:cc:ad:d3:1e:00:da:e9:6b:3a:84:07:24:71:1f:
84:ee:2d:6a:4e:ef:42:00:a0:51:99:f1:95:dc:02:
0c:13:2d:04:64:90:f3:39:53:aa:4f:43:50:70:a1:
b3:5c:da:0f:ea:f1:c1:4e:2f:c2:f9:53:dd:04:8a:
b5:7e:38:07:52:0b:a9:68:f4:27:c2:53:6b:02:19:
fe:a8:d1:a5:9b:38:c1:cb:c8:c9:51:ad:e5:d6:ac:
8b:0e:e0:0f:62:fd:b3:4e:d4:4f:dc:be:73:0f:ba:
27:f4:b0:57:4a:3f:77:23:7e:65:db:af:0c:6a:f3:
82:01:c0:c6:13:92:5c:0d:73:3a:fb:91:9d:89:bf:
33:e7:14:31:35:e1:cc:dd:88:7e:8a:15:4a:47:0b:
c2:8e:c3:9a:a3:6b:f1:42:f4:e1:e7:5d:98:99:92:
ae:fa:ac:93:e4:ca:a3:1f:5a:69:3b:99:21:79:be:
4f:84:48:0c:c4:d2:8c:7e:52:e6:09:93:e7:c4:fd:
b8:de:db:32:56:0e:fa:fd:16:89:ce:3f:df:0c:79:
62:c4:e3:0a:81:e0:6f:58:ad:12:41:22:86:3f:df:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:19:38:8E:61:07:6F:D3:80:04:8E:B0:78:3B:F3:10:F5:53:CB:F4
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b3:dd:98:7f:a6:96:2b:34:c5:0b:04:f7:44:f9:97:ec:49:
c5:3c:86:89:41:6b:36:b7:c6:9d:b6:ab:51:f4:57:4f:99:00:
e3:e5:bb:ec:64:54:71:80:f9:9d:cd:c1:95:a4:67:d9:b1:f0:
d5:f1:ea:10:8b:cb:d0:1e:e4:60:b4:a2:96:69:f3:6d:ad:a9:
3b:c8:93:c5:76:40:a6:77:39:89:9f:4c:7a:71:c7:bd:c0:68:
65:55:f1:fe:bc:77:06:28:01:1e:74:82:78:b6:1e:f0:9d:be:
75:4c:0f:18:0c:cc:d2:9e:89:6d:69:58:40:5e:3a:57:5a:27:
e5:e7:cd:3e:2d:ab:f5:41:7a:bc:08:6e:db:af:bc:82:86:e7:
df:05:19:e2:05:33:24:ee:b0:20:98:a0:3b:8c:e7:01:90:43:
cb:7a:60:15:36:0d:ee:27:85:45:77:ce:cf:57:b3:0d:25:d1:
ad:ff:c1:79:44:a8:bc:d9:7e:6a:ed:92:9d:e1:4a:e2:4e:17:
e6:ed:88:1a:2f:76:fd:35:86:d1:a4:d0:53:6e:ec:b7:ac:77:
11:f6:09:68:e5:7b:8c:54:6b:6b:5b:09:57:09:a7:b8:96:98:
8f:c6:3d:1d:2c:31:f3:7e:20:2a:24:f2:e9:d3:4e:02:2e:1c:
73:d1:ae:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:08 2026 by rpki-client