Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: hoUIbjynJkN7p7dl6EkQFAd5rAN3BhB0TuNzB8VVQRQ=
Subject key identifier: 6E:88:ED:59:EF:B9:30:7F:56:5E:5B:31:15:3C:57:63:15:A0:72:CC
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019D3909C0C2E968D3B509CFED0D8D6EB432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 0B
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: irbqqZUlSyv5dnzLaUDzYuyO7tc46zRqX+mNO/fF8TY=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: kPSCF-W3eCngzO2pX3KFt-E9oYU.asa (hash: fdO+MLijTz2d7U7UhgKjHcK7gOjhxu+oiXaE30/3S30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c0:c2:e9:68:d3:b5:09:cf:ed:0d:8d:6e:b4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=6e88ed59efb9307f565e5b31153c576315a072cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:8d:35:08:99:a8:e5:b3:0b:85:cf:f1:ed:
79:fc:04:e0:98:1c:7f:12:16:f1:44:56:f8:ed:c0:
0e:77:5a:fd:3b:52:67:4b:94:eb:3c:66:cf:6a:a3:
22:8c:57:78:7b:49:8e:46:e4:42:f0:e1:94:3a:8f:
e0:ce:e1:83:87:92:52:fc:20:d0:34:23:81:a7:f5:
4c:a6:d6:98:6f:53:10:a4:9b:6d:1a:1c:b7:16:9a:
ab:b4:cb:ed:3a:2e:8e:49:b2:d4:59:a8:6a:91:cf:
69:37:d2:dd:ac:a5:d5:c3:0c:c8:f2:cb:b0:95:57:
27:50:39:c8:bf:cc:8c:be:4d:83:86:a2:ce:cd:01:
e1:af:44:9c:4a:dc:c2:fe:98:12:02:03:e2:cd:a0:
85:f3:74:9e:dd:ea:9d:09:af:d4:04:cd:8b:69:dd:
1b:30:54:d2:ec:93:76:ad:ac:82:37:ed:b7:ae:ce:
f4:9e:66:30:35:7d:2c:ff:e9:4f:5b:86:27:fc:d9:
37:e3:86:68:b2:b0:06:84:69:84:82:1c:6f:0e:b3:
94:3f:fb:12:63:49:75:86:83:3c:88:73:2c:dd:80:
96:d7:7c:15:b7:21:ce:85:01:5c:ba:d7:b9:6c:81:
ed:63:86:7c:73:e6:56:80:67:6d:87:7c:56:ae:0a:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:88:ED:59:EF:B9:30:7F:56:5E:5B:31:15:3C:57:63:15:A0:72:CC
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:c4:d4:3f:bb:74:e7:86:30:ff:a9:08:92:58:a8:4d:69:
7a:69:3b:6f:30:89:53:80:1c:e0:3f:32:72:41:35:7b:43:5b:
d1:df:21:2c:a1:13:72:97:33:a3:8c:b3:83:5c:a3:3e:15:b9:
de:31:56:15:9a:74:95:0f:ab:10:32:6b:ed:5c:c4:23:6f:a8:
5b:63:67:7c:d7:f5:58:b8:eb:d4:18:7c:83:a3:34:c1:54:a7:
78:10:4b:d3:b8:b2:ba:90:b1:31:bc:e4:a2:df:47:eb:52:aa:
e1:48:43:a2:4e:00:d5:e9:5c:bf:79:7a:e1:c9:fd:d9:4b:b2:
8b:ec:06:a3:b5:b3:b0:c7:7e:21:81:c9:78:00:a2:e3:31:b0:
b3:42:09:16:09:cc:25:f1:62:76:76:82:b1:78:5a:80:48:d5:
db:93:2e:86:41:83:29:28:da:0b:68:fb:7a:d0:8d:93:b4:16:
97:de:63:ec:8e:12:1f:8f:52:8e:8a:ff:cd:84:54:01:19:06:
90:ad:d5:28:8b:05:53:75:55:5c:0b:82:19:f8:3b:1d:5b:d1:
70:fd:96:bf:68:c5:da:ad:53:9d:f8:58:17:07:99:f5:47:e4:
37:8e:7b:3f:d3:e4:fc:41:9e:f2:eb:2d:b6:15:eb:e2:83:6b:
c3:37:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:57 2026 by rpki-client