Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: GJk0JJU2uVNde8PII7jSC67BE2B4ni300ogur0fxOjY=
Subject key identifier: 7B:99:D8:54:F3:43:10:99:75:34:9C:3A:21:01:27:07:06:02:52:D8
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 01A03CDF72745F12F10CCDDE880E304300B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 019C
Signing time: Wed 26 Aug 2026 07:01:11 +0000
Manifest this update: Wed 26 Aug 2026 07:01:11 +0000
Manifest next update: Thu 27 Aug 2026 07:01:11 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: U0rXdaxpVpr0HnbnZ8yjdbVp5C9s8LC1FL2KZyKRbuA=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:df:72:74:5f:12:f1:0c:cd:de:88:0e:30:43:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Aug 26 07:01:11 2026 GMT
Not After : Aug 27 07:01:11 2026 GMT
Subject: CN=7b99d854f343109975349c3a21012707060252d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:09:df:9b:77:da:1f:b8:49:14:1f:a8:b8:
2e:be:3c:25:08:17:db:6f:14:11:29:5d:d3:82:cf:
b6:55:3f:27:0f:7e:ee:a6:20:82:e5:d8:ab:6c:d0:
5f:12:74:fb:e5:74:23:58:57:dd:d8:c1:38:dd:e3:
6e:8d:2d:2c:39:bd:f1:93:2e:f8:a2:09:17:17:b5:
9f:43:0e:2b:59:35:d3:08:0f:d0:ea:65:7f:a3:86:
8c:2f:00:99:6a:1c:f0:88:20:44:17:e7:f2:7f:9d:
ef:73:4e:d9:41:63:71:6a:48:1b:e2:21:00:2c:f4:
ed:a5:3d:e6:13:b2:b5:db:41:2e:9f:c8:dc:74:d9:
ce:51:a2:01:b2:86:0e:96:20:73:6b:a1:46:bd:ea:
1f:f9:99:40:dc:2b:66:a5:13:73:a3:46:94:09:fd:
99:a8:b7:29:30:de:2b:c4:ed:c1:11:69:a5:8a:9d:
3d:b0:1e:dd:fe:0a:54:7c:a7:95:e6:ca:fa:22:8a:
72:fa:a8:8b:5f:b6:c7:3a:30:1d:7e:9d:9e:0f:12:
c7:0c:df:c3:eb:4d:26:13:e6:50:43:c3:8b:aa:e2:
51:1d:fd:5d:f8:29:26:54:55:82:f0:75:05:fa:ae:
d2:70:b3:51:71:3a:ef:f4:9f:11:6f:61:f3:68:51:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:D8:54:F3:43:10:99:75:34:9C:3A:21:01:27:07:06:02:52:D8
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dc:81:95:f0:b2:64:be:60:51:c6:dc:e1:10:cb:12:50:36:
fc:64:4d:71:fc:64:de:4a:7e:dc:41:71:ad:83:74:3a:a7:b5:
65:80:a5:73:6a:51:2e:cb:d4:12:b1:84:b9:9a:5d:f0:19:17:
ff:15:97:e6:0c:fc:b1:97:98:27:64:b3:31:9c:11:ea:f9:55:
70:cf:14:35:c9:de:e3:03:ca:08:a5:b6:4f:26:77:5d:e8:15:
d5:44:d4:e9:76:d4:64:18:c2:1c:3e:93:23:33:08:2d:70:6b:
c4:4c:75:59:7e:7a:07:14:b6:f9:df:4a:69:4f:de:b1:43:ba:
68:23:99:95:3c:a9:f5:61:87:e4:8b:be:e2:86:c5:fa:a9:cd:
43:7f:e0:cf:63:3a:25:a0:77:0b:52:48:04:73:98:32:50:65:
e6:58:19:16:02:0b:df:a0:14:49:1a:61:f0:2e:79:33:23:c8:
3c:d0:1e:6d:30:11:76:ff:4f:5b:dc:cf:ef:12:64:da:8e:1e:
21:0f:a6:79:85:ad:10:27:d2:be:72:4e:ed:c9:ba:42:06:e0:
52:a2:eb:5f:a9:71:a6:c7:f7:55:80:d1:d0:e1:55:b7:69:15:
c0:18:25:20:24:f2:9a:2d:d7:c8:43:28:e7:24:93:4b:49:5b:
d4:0f:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:05:15 2026 by rpki-client