Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: CQ1df7IA8I+IuKCW83Q6mlJo2I5GQsV/IQTR3GvHUhU=
Subject key identifier: E0:D0:9A:1C:85:88:DC:1D:CA:60:52:80:9F:51:44:82:71:15:47:CB
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019D375264BC7971D81EEA4DCC541428BF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 3az2OHIPZcmdiMAHhHp7XqzxSV5BVB6sP4tx7hCmbMU=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:64:bc:79:71:d8:1e:ea:4d:cc:54:14:28:bf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=e0d09a1c8588dc1dca6052809f514482711547cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:9e:92:3f:d4:70:68:85:b9:6d:bd:6d:78:
1a:55:ed:ec:ed:44:27:93:ae:3f:6b:5b:b9:bd:e0:
6e:94:d0:19:12:e0:7d:8c:50:5a:fa:fa:50:33:dd:
de:78:4c:33:6d:1a:d9:c8:e6:c3:fc:c9:7b:f1:a5:
b4:29:aa:16:74:dd:27:e0:ef:46:05:78:35:e6:54:
e1:f8:75:91:fb:7d:59:9c:29:b6:32:ce:12:ab:e0:
eb:f2:49:c7:6b:ac:69:ce:59:74:1a:2a:23:5b:71:
06:73:5a:79:f3:f8:53:f3:77:49:d7:8e:8a:fd:ee:
7b:45:52:c4:fc:47:95:f7:40:41:ae:8d:10:f0:ec:
77:c7:a2:4b:cb:03:35:39:5a:36:aa:f0:9e:9b:95:
b2:1e:bc:a4:b1:84:30:5b:ce:d1:3a:1c:dc:e9:89:
01:73:41:5e:2b:95:45:2b:29:63:2d:73:02:c8:db:
b1:a5:74:17:34:43:d1:24:10:c7:bc:12:73:81:78:
0c:94:0f:f2:f9:8c:66:59:fa:70:bb:5b:3d:e2:99:
55:2f:2e:c4:72:81:f9:48:33:27:7b:f6:05:59:c1:
06:f0:c5:66:13:14:a6:c6:01:02:17:3c:00:76:a9:
49:97:9b:fa:4f:2d:7d:12:b9:51:cb:76:63:38:de:
63:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:9A:1C:85:88:DC:1D:CA:60:52:80:9F:51:44:82:71:15:47:CB
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:66:fc:9b:e9:58:cb:9c:1d:0c:93:a4:08:c4:68:39:c4:76:
55:6e:59:99:2c:02:53:50:d6:d7:24:de:3e:62:32:e8:1c:92:
0d:94:d6:63:ee:ae:2b:b3:3a:13:02:54:63:ae:f6:7c:4c:bc:
9d:04:79:b9:05:cf:9f:08:8b:f5:01:e4:9e:4c:f8:c1:33:bc:
d0:47:15:d2:f2:40:4b:cd:ed:c9:b4:f8:a7:f5:07:85:6b:e8:
5b:aa:64:7e:2f:3e:ea:50:ea:a4:30:55:2d:f0:5e:94:a2:22:
4f:e3:25:e8:e0:48:f0:1a:64:1f:38:17:de:14:40:bf:d9:c8:
71:69:12:7a:bd:18:f4:31:a3:60:7e:a8:7a:f2:5e:11:f5:71:
e6:2c:2c:8d:36:51:2d:0f:8b:c7:57:7c:73:94:ff:e4:95:b0:
5d:e7:62:cc:5c:62:5b:93:8a:f3:ca:e2:9a:4a:ea:51:3e:b5:
c9:27:c5:14:dd:86:69:38:cc:d0:ff:ac:09:8b:16:5f:d2:25:
1e:d3:4f:d0:2e:89:c9:1d:e9:b8:79:01:a4:b1:66:f6:24:2a:
9c:68:3d:ac:a0:30:53:81:5c:97:d4:92:47:1c:83:8b:24:54:
a2:77:11:e2:30:00:9d:5a:6f:d8:d9:83:04:85:68:5d:66:7a:
07:75:e5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:49 2026 by rpki-client