Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: OzwyFe8wF6nYCiyYq7hhle2ZrK2exOQ4v5If8CByjUA=
Subject key identifier: FF:22:AD:22:9C:B2:80:D8:05:50:5C:D3:83:8D:96:4B:36:6B:2C:1C
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01A08AFA44D7E1BD272D016BCD44E269C48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 191F
Signing time: Thu 10 Sep 2026 11:00:52 +0000
Manifest this update: Thu 10 Sep 2026 11:00:52 +0000
Manifest next update: Fri 11 Sep 2026 11:00:52 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: XduWBToveXBX9ltCHdUCrd3yeCllpbtn+BRYBuyFrUg=)
2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:44:d7:e1:bd:27:2d:01:6b:cd:44:e2:69:c4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Sep 10 11:00:52 2026 GMT
Not After : Sep 11 11:00:52 2026 GMT
Subject: CN=ff22ad229cb280d805505cd3838d964b366b2c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:28:5e:b0:1e:d6:55:8f:f0:48:de:24:17:
42:d8:84:bd:e1:55:b9:36:ae:c2:a3:83:e8:a1:1b:
ca:0b:ab:f7:28:88:2e:86:3d:33:bd:df:9e:15:80:
cc:88:d8:3f:d1:97:41:17:21:54:9f:b9:2f:66:ec:
88:14:d7:2b:be:ce:09:1e:e8:95:7e:b4:9a:01:9b:
87:3d:a0:14:09:9f:f9:34:20:b8:f3:1f:df:7a:38:
2e:6d:e1:3b:3d:23:73:ef:4a:fc:9e:a2:73:4c:92:
ab:c0:a0:04:3b:4c:ce:5a:ce:58:59:96:d0:b9:50:
b0:62:18:9d:84:2b:2a:65:5d:8a:06:42:e9:eb:ba:
8c:ed:4a:1a:0d:f9:c8:de:9d:9b:7f:1a:9e:e7:5d:
92:82:bf:d2:23:54:79:69:55:57:4f:17:e3:8a:a8:
b7:b2:53:9d:32:b0:39:9a:91:de:7c:bd:78:71:f1:
c0:99:25:70:99:71:29:99:60:8d:28:0a:d2:fb:de:
9c:0b:8d:e2:94:13:41:5a:9f:9a:de:1a:e0:b1:07:
a5:a6:e2:4d:93:49:61:06:7c:45:5f:88:26:41:9d:
2f:7a:cd:ad:35:71:a0:e0:5c:2d:3a:7c:9b:91:56:
5e:19:ef:f1:cc:e2:30:15:11:b3:47:a5:ac:c6:5e:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:AD:22:9C:B2:80:D8:05:50:5C:D3:83:8D:96:4B:36:6B:2C:1C
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4f:4b:ec:2d:c6:90:82:36:2c:6a:8f:08:8e:ed:f9:11:af:
97:ef:16:70:7c:56:49:3d:a6:30:7a:7c:92:eb:c0:9c:18:d3:
a1:32:10:14:86:5b:9d:56:6d:8e:39:fe:36:3e:f2:da:30:20:
b3:f8:62:9e:82:ae:45:80:01:d2:a7:a6:5f:ed:b4:b0:a6:6c:
cc:f4:01:5b:35:2a:ca:cd:62:d5:e0:a9:48:73:21:09:3a:d6:
9e:fc:8d:b5:ea:ab:ad:89:d8:64:b0:ba:1a:24:04:80:13:c8:
34:72:9a:85:df:ad:03:1d:2d:9f:e5:54:1d:40:d6:06:05:b2:
b8:e3:67:ba:48:55:6e:b1:43:7e:05:c5:c2:f0:3d:6c:36:61:
ee:84:02:70:97:94:bf:85:18:ad:bf:4f:a1:1e:35:86:09:9f:
76:fc:fa:de:be:42:cc:37:45:a4:9b:e0:ca:4e:0c:c7:3c:d0:
48:5e:9f:cf:c9:1c:50:05:b7:c0:99:a0:3a:9a:36:cd:8b:cb:
cd:09:6f:d4:86:8a:77:b9:2c:5a:24:95:9b:a0:1f:4a:ab:a7:
ef:d7:bc:fc:7d:4b:58:b8:48:c0:6b:e0:a8:58:91:03:32:85:
f1:48:fc:38:ec:63:91:ed:7c:0f:ae:f9:6f:fe:f7:ba:88:9e:
ed:3d:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:00:51 2026 by rpki-client