Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: hqucMeRc57c4JwgthIFgfwNwOVsIo8t7dlxdYYpiKYo=
Subject key identifier: 81:F1:E3:27:62:A1:0B:E9:CC:7B:C6:00:2F:42:7E:06:2A:FF:22:0E
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019F1A1EB562F2CFAD1A3F1FA96024291541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 20:00:47 +0000
Manifest this update: Tue 30 Jun 2026 20:00:47 +0000
Manifest next update: Wed 01 Jul 2026 20:00:47 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: nT5mP121aNHYfsnv0ZZdq75RkvKf05icM+EnaPvrubE=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:b5:62:f2:cf:ad:1a:3f:1f:a9:60:24:29:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jun 30 20:00:47 2026 GMT
Not After : Jul 1 20:00:47 2026 GMT
Subject: CN=81f1e32762a10be9cc7bc6002f427e062aff220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:97:45:5e:07:6e:13:84:93:ec:d2:12:ff:
b5:c7:4f:78:9a:d9:f7:05:21:43:ad:97:68:1b:d2:
d7:78:89:10:74:ea:03:cb:eb:c8:53:cb:07:d5:46:
d8:c8:7e:7b:92:ce:7a:9e:f0:a0:91:de:73:7a:71:
29:38:14:cc:9f:5b:ac:0c:4e:09:76:9a:4f:ff:7c:
dd:e5:17:12:bb:68:a1:d5:fe:d5:b5:ce:39:ee:c1:
11:ac:66:5d:75:1e:8f:76:98:95:84:e1:82:d0:f2:
d0:33:7e:7c:32:ca:7c:76:0e:89:9f:25:a0:87:1b:
f0:9c:a4:5c:4b:99:b0:1a:2e:6e:e0:25:67:5e:1f:
95:1e:ca:95:33:5a:20:db:ce:20:19:ed:93:29:42:
36:92:f3:f7:a2:91:1a:27:28:76:72:12:a2:99:85:
59:b1:d2:4b:1b:13:a7:97:83:dd:55:49:09:bd:91:
15:f1:93:a3:a3:f3:dc:71:23:6c:00:75:06:e8:b2:
60:cc:61:2c:70:da:0d:2e:42:50:d5:bc:12:a1:24:
ad:00:1b:6b:e6:6e:b8:d6:ee:8d:66:af:ad:33:3c:
19:b8:a9:fb:fb:79:33:15:52:80:32:b2:c3:47:70:
72:9f:38:f7:2e:51:d0:c3:e7:75:6f:09:03:7d:b8:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:E3:27:62:A1:0B:E9:CC:7B:C6:00:2F:42:7E:06:2A:FF:22:0E
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:47:96:c5:3b:d2:76:5c:bd:8c:6f:4e:bc:dd:a3:5c:50:
59:d8:dc:83:a4:ed:8e:bd:28:14:d8:a4:69:23:52:a5:0c:b2:
51:80:55:20:a5:7a:7b:d4:11:43:52:83:94:02:e2:b8:a3:45:
ae:f7:79:f4:83:89:30:4d:b3:d9:63:2e:60:35:1f:c6:5e:23:
c5:fb:46:81:35:91:a0:d1:a6:01:82:d8:2c:49:17:be:cf:2c:
ce:96:9a:fb:bb:88:4a:9a:47:c6:c0:10:49:ef:34:93:15:f8:
3c:8a:24:55:25:fa:cd:a7:93:68:59:07:e7:44:56:d1:33:fe:
3b:99:d1:26:d9:57:cc:30:3b:1d:40:0d:c6:38:36:85:99:f2:
7c:27:80:b8:9b:a6:e9:db:43:e6:ff:c9:c5:f6:18:0c:16:3a:
47:03:92:0c:4a:78:4d:2b:9c:08:9b:ce:0d:26:a8:c7:30:c2:
ce:46:63:34:c4:57:15:76:2a:27:d5:e5:3d:a7:cd:15:44:56:
f4:e0:68:ff:33:bc:69:97:ab:06:85:67:9d:db:d8:b4:2d:7b:
42:3d:1b:40:c0:7a:3a:97:55:7e:f6:6d:78:6f:cf:5e:3c:84:
6c:7e:c9:7e:a2:f9:25:e6:25:62:e8:72:26:84:85:d2:46:cc:
ed:38:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:46 2026 by rpki-client