Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: ypHXTS2Rouj9HM+21ss++/FwjsCdz9UXGdjA34+DXvY=
Subject key identifier: 52:2F:0B:97:D1:7D:37:C0:94:2A:A4:D2:24:73:99:A5:AB:D5:DA:B2
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 01A160E989D5B063846C83837270F40D699F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: 0130
Signing time: Thu 22 Oct 2026 00:01:20 +0000
Manifest this update: Thu 22 Oct 2026 00:01:20 +0000
Manifest next update: Fri 23 Oct 2026 00:01:20 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: k8QRIU44a1PETO2A6c4e3+xA4IWsh2FpEahCeAMmsaQ=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:89:d5:b0:63:84:6c:83:83:72:70:f4:0d:69:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Oct 22 00:01:20 2026 GMT
Not After : Oct 23 00:01:20 2026 GMT
Subject: CN=522f0b97d17d37c0942aa4d2247399a5abd5dab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:75:45:cd:d1:e2:a6:44:71:44:f6:5f:33:
99:25:f7:fe:63:da:69:88:d1:7d:96:c3:2b:74:b5:
a8:86:8b:99:9e:2d:83:c7:54:a6:3c:db:3c:28:78:
c5:de:75:20:a7:98:83:4d:cc:76:41:15:27:89:7f:
33:43:78:6e:bf:b1:c0:09:d4:39:f4:8b:c8:f7:b4:
de:89:bc:ce:1f:c1:a3:3c:dd:69:a4:d0:a7:8e:4e:
ae:f3:d0:8f:3c:33:ca:15:58:f5:ca:c4:2f:05:b8:
8c:f0:89:d7:0b:48:1f:47:a9:0c:1c:19:6b:bd:52:
13:dc:97:0a:6b:59:94:94:06:aa:a0:7e:78:3f:86:
8d:76:6c:ac:81:3c:c3:2b:04:47:d0:44:7f:22:24:
80:e3:a3:cb:59:a7:eb:76:77:74:00:4a:ec:37:d3:
50:a2:fa:78:5d:bf:f8:df:ca:21:e8:7d:ad:fe:4a:
cc:87:41:85:1e:e1:b9:c2:8f:a7:13:b1:9a:44:52:
81:58:03:4d:85:e5:ea:f1:10:af:e3:f4:aa:5c:8e:
62:d9:98:59:a3:31:fa:84:1e:df:52:9b:ff:11:84:
73:52:c2:a1:87:26:a9:ba:d6:b5:34:31:20:31:77:
75:d7:0f:87:a4:b0:5c:b9:d9:15:12:8f:c6:22:5f:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:0B:97:D1:7D:37:C0:94:2A:A4:D2:24:73:99:A5:AB:D5:DA:B2
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f7:76:15:75:e8:62:2e:71:18:fe:31:a9:da:8d:ef:31:89:
a8:fa:39:3c:84:30:8e:3d:f5:f0:fe:49:6a:fe:0d:7a:06:6f:
3b:8c:ed:d4:d7:85:73:14:ec:45:6a:99:af:a0:86:f1:29:99:
a4:67:ad:df:43:f6:d9:62:af:4f:02:bf:e8:ca:d1:0f:af:4f:
b4:b6:c8:15:12:7d:a2:3e:a4:5e:c3:8e:85:dd:37:1e:a1:d6:
81:12:82:69:8b:2a:b8:2e:bd:8f:ee:75:b2:af:56:51:1c:3c:
cf:f3:2a:ce:85:85:ab:ad:b4:8e:bf:2e:b7:be:9b:74:2a:81:
4a:82:41:90:97:8f:f7:0a:44:25:0c:f7:61:5b:a6:0b:37:34:
cf:f9:90:32:f3:86:ca:9d:98:4b:18:20:78:f3:78:8c:64:95:
56:35:26:a5:22:fc:94:35:40:9a:d9:cd:14:4d:44:5a:14:be:
62:05:0b:47:f5:b6:a4:4e:5c:38:0f:f0:b3:ad:b2:f3:c1:20:
78:93:96:a9:d7:f5:be:89:f3:92:57:1b:54:5d:92:1d:6d:13:
3e:18:54:c2:3f:e6:18:92:01:b1:8b:e3:1d:6e:c2:be:10:33:
04:55:79:cc:8c:4a:c7:2d:31:f1:33:33:64:dc:2d:36:08:9c:
c6:d1:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:54:19 2026 by rpki-client