Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 2uoulTqiy4kpGMUu4hkaWQhnuUMz7wA+i5TAlW3X+ME=
Subject key identifier: BE:27:86:F7:BE:4B:1A:39:58:5F:5E:A5:E8:D7:01:73:6C:78:F2:C1
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01A001DD0A76D2EA378D31D83F2039DA1F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 20:00:58 +0000
Manifest this update: Fri 14 Aug 2026 20:00:58 +0000
Manifest next update: Sat 15 Aug 2026 20:00:58 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 1eT3YFbpX7OJpJcpMidtiCkpaxV7AMc1EMqlWOPT/G0=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0a:76:d2:ea:37:8d:31:d8:3f:20:39:da:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Aug 14 20:00:58 2026 GMT
Not After : Aug 15 20:00:58 2026 GMT
Subject: CN=be2786f7be4b1a39585f5ea5e8d701736c78f2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:99:db:3c:ff:47:db:ac:54:c6:cd:46:21:
62:6f:6b:41:3a:65:b1:93:db:c8:6e:1b:07:b7:67:
c2:84:84:01:8d:b3:b9:f8:b2:03:f6:67:0f:90:65:
91:bf:ac:b5:63:53:31:83:9d:89:93:44:c8:32:00:
b8:60:75:70:5e:a3:86:33:18:d5:07:83:39:f5:bd:
49:14:e4:11:58:90:a9:82:5a:b4:4a:8e:7a:bc:92:
09:f9:7b:29:44:30:d3:67:ea:a7:1b:22:e9:40:6f:
6a:33:a4:1a:98:55:23:d4:75:f8:e1:71:03:c3:e5:
6e:72:aa:36:bb:5d:4b:38:72:80:e1:8d:2d:71:d0:
e2:81:0a:cb:52:35:b2:1e:9f:7b:75:ca:7f:b2:8d:
50:7b:ba:cf:4d:10:37:00:18:0b:4e:a8:d7:b9:9f:
07:9e:0d:85:ac:6a:ca:2f:22:a3:1d:c3:4c:9b:de:
5b:95:3f:77:00:62:bf:dd:3c:d3:12:96:88:79:e3:
22:53:91:7d:6f:6e:09:52:0b:10:5e:f6:cc:bb:12:
05:a6:4c:75:e0:b0:7f:d4:63:6a:57:49:67:84:cb:
b0:d0:72:12:be:fa:f2:fb:75:e2:2d:dd:89:8f:70:
76:2d:7d:d0:13:0a:21:4f:dc:5f:73:01:67:5c:e6:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:27:86:F7:BE:4B:1A:39:58:5F:5E:A5:E8:D7:01:73:6C:78:F2:C1
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:46:af:68:6d:e8:b4:f4:16:6b:a5:d2:87:16:72:74:79:
41:ae:00:3f:47:f7:94:2d:24:99:dc:ed:5d:93:a9:99:20:67:
e2:51:ae:23:e4:64:96:16:f2:e9:d7:af:b0:3b:20:44:68:cc:
8d:75:6e:ac:a4:9d:0b:65:28:bc:a9:59:cd:7b:02:bc:11:ac:
bf:1f:1c:dd:a2:83:c9:2d:61:ec:f7:6f:38:9f:9c:ca:ac:fe:
af:80:46:f8:b8:26:67:f9:50:53:d1:78:a8:b5:5b:1c:9a:ff:
01:d6:fe:4d:68:ce:91:f3:12:ed:c6:ef:7c:01:82:91:d8:cd:
48:ab:cc:b5:b3:c0:d4:7c:2e:bc:ea:8a:17:a7:a3:d3:ba:ea:
01:ac:26:b4:76:a7:4e:3f:5f:b1:33:2d:dc:59:f1:94:03:65:
ef:1f:56:06:e1:0a:f7:07:f0:40:6c:23:01:08:5e:ae:dc:e9:
d4:22:f3:47:82:cb:32:cd:40:1f:67:71:34:0c:c7:9b:51:3e:
ef:f9:3f:75:99:8b:fc:50:a2:e9:c7:fb:d3:d6:37:e7:af:79:
d6:36:ef:6b:34:47:6f:ae:ee:de:78:ec:9a:0b:35:9b:a7:15:
df:af:db:c6:d5:a4:60:5c:6f:2e:ba:5a:79:54:ea:df:8a:32:
19:03:e6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Qp20uo3jTHYPyA52h+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy
OTkwOTQwHhcNMjYwODE0MjAwMDU4WhcNMjYwODE1MjAwMDU4WjAzMTEwLwYDVQQD
EyhiZTI3ODZmN2JlNGIxYTM5NTg1ZjVlYTVlOGQ3MDE3MzZjNzhmMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RiZ2zz/R9usVMbNRiFib2tBOmWx
k9vIbhsHt2fChIQBjbO5+LID9mcPkGWRv6y1Y1Mxg52Jk0TIMgC4YHVwXqOGMxjV
B4M59b1JFOQRWJCpglq0So56vJIJ+XspRDDTZ+qnGyLpQG9qM6QamFUj1HX44XED
w+Vucqo2u11LOHKA4Y0tcdDigQrLUjWyHp97dcp/so1Qe7rPTRA3ABgLTqjXuZ8H
ng2FrGrKLyKjHcNMm95blT93AGK/3TzTEpaIeeMiU5F9b24JUgsQXvbMuxIFpkx1
4LB/1GNqV0lnhMuw0HISvvry+3XiLd2Jj3B2LX3QEwohT9xfcwFnXOa7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4nhve+Sxo5WF9epejXAXNsePLBMB8GA1UdIwQY
MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt
MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm
LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu1Gr2ht
6LT0Fmul0ocWcnR5Qa4AP0f3lC0kmdztXZOpmSBn4lGuI+Rklhby6devsDsgRGjM
jXVurKSdC2UovKlZzXsCvBGsvx8c3aKDyS1h7PdvOJ+cyqz+r4BG+LgmZ/lQU9F4
qLVbHJr/Adb+TWjOkfMS7cbvfAGCkdjNSKvMtbPA1HwuvOqKF6ej07rqAawmtHan
Tj9fsTMt3FnxlANl7x9WBuEK9wfwQGwjAQhertzp1CLzR4LLMs1AH2dxNAzHm1E+
7/k/dZmL/FCi6cf709Y356951jbvazRHb67u3njsmgs1m6cV36/bxtWkYFxvLrpa
eVTq34oyGQPmfg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:06 2026 by rpki-client