
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: m+f0P69au3Z2X6lZ/VTJ/eLPjMYT3APiRuwP3ZCZm98=
Subject key identifier: 2A:F3:0B:B7:A7:EE:33:BA:8C:72:39:DE:44:B2:0B:B4:BA:4A:B2:9B
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 01A001DD49960A2742D1BCF75D9EDF815975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 20:01:14 +0000
Manifest this update: Fri 14 Aug 2026 20:01:14 +0000
Manifest next update: Sat 15 Aug 2026 20:01:14 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: G6bP7jl9aNIORcJdFGAP/2MQ7M31utdRDBkaNUgeg1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:49:96:0a:27:42:d1:bc:f7:5d:9e:df:81:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Aug 14 20:01:14 2026 GMT
Not After : Aug 15 20:01:14 2026 GMT
Subject: CN=2af30bb7a7ee33ba8c7239de44b20bb4ba4ab29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:2d:42:d2:8e:63:7d:2f:34:6d:4d:43:da:
de:4e:db:9d:59:82:ff:00:e3:de:ec:6f:bc:0e:4d:
62:65:24:3e:02:4a:f8:e9:b4:12:90:c9:79:e3:d4:
25:e4:b9:56:07:ab:03:96:9f:8f:f4:04:9d:af:6f:
5e:d7:7f:6e:03:e8:40:a3:a9:0e:70:32:3c:3d:00:
12:3f:b2:9e:ee:f1:20:e4:1d:49:aa:23:f4:63:41:
74:77:6e:c6:35:18:69:40:6f:81:ca:45:85:57:71:
3b:ad:67:e7:ae:b9:c2:8e:8c:e8:54:a2:4b:f5:9c:
fc:3d:c5:da:d3:2b:e1:ca:cf:3e:2e:00:ac:56:69:
fe:7e:21:ba:61:b8:19:93:68:e0:bc:61:c7:80:56:
06:ac:b9:f5:99:68:e7:0b:03:06:da:9c:c9:1a:79:
e0:bf:36:72:ea:cd:e6:8e:49:bf:58:da:e8:1b:f9:
1d:cf:88:92:77:75:61:a5:7c:3d:f6:4e:66:b3:68:
01:da:5f:f3:8d:0e:e6:1c:0f:24:2e:a5:7a:ec:d6:
d8:16:94:1f:52:3c:c2:29:d3:5d:2f:76:2e:25:e3:
44:df:6e:df:95:98:ab:e2:fe:66:d5:e9:49:87:49:
27:5f:53:cf:7a:99:6a:be:e7:13:c7:78:95:fe:0b:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:0B:B7:A7:EE:33:BA:8C:72:39:DE:44:B2:0B:B4:BA:4A:B2:9B
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:f9:d4:09:24:02:a1:7c:d1:43:b8:0a:54:b4:29:5c:95:
f5:d0:a0:70:99:66:21:2b:f7:de:fa:df:ed:03:76:b5:f7:0e:
20:91:3e:bc:f5:80:25:97:f4:73:de:92:98:e2:57:95:a7:b2:
27:ca:4e:dc:c6:f4:23:d5:28:f8:22:53:cd:d1:cb:7f:f0:6b:
40:a8:49:c5:6f:a2:39:f3:c0:3e:23:dd:bc:68:d8:1b:2e:99:
a1:70:bd:24:0d:e8:bc:25:49:0b:47:79:d9:7c:ab:39:1f:db:
ea:c6:61:d4:3e:19:f8:8d:00:fc:09:3c:a4:7a:d6:01:a5:c8:
4d:d4:df:41:e1:63:bb:4e:f4:17:8c:fa:7d:58:76:25:b1:b2:
33:81:ad:3b:5e:2e:d8:15:c2:73:69:2f:07:9a:9e:a1:04:a9:
68:2e:41:51:d3:66:66:10:21:2f:dd:53:7c:c3:b2:24:61:c8:
70:cd:aa:c5:75:f6:b1:1d:36:ae:74:ae:50:84:ae:26:9a:22:
a7:57:f8:f6:50:b8:07:a3:d1:f7:d9:48:db:70:16:6e:0a:28:
67:f6:7b:3d:bd:85:ee:7b:3e:22:d5:fd:b1:cf:49:be:b2:9c:
ac:e8:ff:aa:50:0a:e8:2e:0d:01:90:04:9b:90:aa:b3:e1:b4:
b4:ed:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:05 2026 by rpki-client