Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: DzwfGGMj/3A/tbfPeFPnZ6G3qxCcmIVvuZNUgT0lT7A=
Subject key identifier: 0A:77:A5:A0:07:BD:E7:C6:B4:6C:AF:50:66:3D:38:EF:E4:12:4C:28
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01A136DAFFCA9894E9FA394BD07506AA08C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 20:01:24 +0000
Manifest this update: Tue 13 Oct 2026 20:01:24 +0000
Manifest next update: Wed 14 Oct 2026 20:01:24 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: AsF8e0HDufRV7rUik8PyeufTuCGTMP6TyPQ1msb4hXU=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:ff:ca:98:94:e9:fa:39:4b:d0:75:06:aa:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Oct 13 20:01:24 2026 GMT
Not After : Oct 14 20:01:24 2026 GMT
Subject: CN=0a77a5a007bde7c6b46caf50663d38efe4124c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:87:3a:ce:6e:66:fa:6a:c8:74:b7:ff:1a:
f0:0f:01:82:0b:c3:ee:e5:bf:65:f5:3c:1e:6f:bd:
d7:8e:00:ac:21:27:ff:22:90:2d:32:06:b2:c3:55:
90:2c:eb:bb:66:bc:5b:2f:b5:08:ed:21:3a:0f:23:
a6:30:a4:a8:6f:60:15:de:7f:b9:54:90:1a:e6:f5:
82:93:30:ff:4d:fe:d3:26:69:47:76:76:d2:ae:b7:
47:df:54:ba:53:6b:71:5f:83:9e:f1:d3:a7:20:bc:
53:ec:c9:33:be:a0:13:ce:41:c7:89:b2:5f:cc:80:
9a:47:f3:f7:53:53:f0:89:30:cc:50:e2:f4:49:50:
11:fb:55:91:5f:a1:d4:e6:e8:78:99:bc:2d:0a:f5:
e2:ab:6d:30:51:cd:20:d2:91:32:dc:7c:e1:c9:eb:
29:09:79:04:4d:1b:cf:17:cf:4a:1d:86:11:7f:56:
70:b7:08:ec:1a:c1:90:53:30:83:44:c8:be:1e:09:
d2:ac:0f:f2:42:70:c5:1c:10:8b:e1:63:ec:17:c9:
26:35:b0:f6:60:e0:10:c0:cc:e8:52:51:e9:21:bf:
6a:6d:b2:53:00:21:61:c1:8d:9b:ec:6e:5d:8c:49:
a4:fc:01:9a:24:92:53:d4:9a:30:68:aa:d5:aa:a0:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:77:A5:A0:07:BD:E7:C6:B4:6C:AF:50:66:3D:38:EF:E4:12:4C:28
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:eb:72:c3:05:a0:70:f6:49:fc:de:f8:6f:62:40:72:23:
1c:5b:14:26:db:59:16:59:6d:b9:94:f6:1d:ae:f0:5d:7b:9a:
b2:ce:d2:ed:bc:3e:ae:c6:b6:6c:2a:ba:0c:cd:cd:c4:2e:a9:
6a:87:bb:8d:95:54:9b:35:3e:69:b7:a9:a0:65:7b:4d:2e:88:
43:9d:b2:83:c2:2e:50:1a:5f:95:74:44:ad:56:80:ed:05:48:
75:a0:80:77:b9:6c:44:43:83:13:93:59:97:dd:f7:ba:df:f9:
a6:36:a4:a7:56:1b:c6:2c:1e:cc:b2:40:98:63:37:f8:e1:79:
40:2d:31:16:93:fe:b4:45:bf:ba:6f:9b:72:b4:68:19:8d:cf:
5a:31:96:3c:86:67:55:f1:5a:45:36:1d:e7:e5:35:12:00:31:
67:f6:55:ba:6a:1d:cc:12:5d:e6:e6:91:48:0b:10:90:f0:d4:
ee:04:1f:80:8b:fb:28:50:9e:e7:84:ac:90:ec:42:6f:7c:06:
af:9e:b2:7b:f0:e0:46:cf:3e:11:17:cc:88:aa:4b:f9:97:cb:
c9:76:c8:dc:0a:17:e8:e9:75:3d:d0:28:8f:a1:ba:1e:24:1d:
39:ea:ce:66:48:43:44:f9:2d:82:56:15:3f:35:09:14:ca:a2:
7b:9f:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:06 2026 by rpki-client