Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 9Jxso5sjHK33kiO3435lA7A8lF+abCtPH4oeGFQUrcU=
Subject key identifier: 66:FA:5D:F2:9F:38:C2:F2:5F:7F:E8:95:AC:4F:98:EC:AA:21:41:23
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019E3072DFA412F88B829EA70DB8DEA2BA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 11:01:35 +0000
Manifest this update: Sat 16 May 2026 11:01:35 +0000
Manifest next update: Sun 17 May 2026 11:01:35 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: iKqYsDhBijEVv0g4kYSumu+VHMsp2KKxBzYAto3s9ps=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:df:a4:12:f8:8b:82:9e:a7:0d:b8:de:a2:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: May 16 11:01:35 2026 GMT
Not After : May 17 11:01:35 2026 GMT
Subject: CN=66fa5df29f38c2f25f7fe895ac4f98ecaa214123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:c7:38:12:aa:75:86:a1:1f:30:96:e8:2b:
23:28:b1:b5:df:f3:be:dc:41:9a:11:43:5b:0c:51:
a4:86:32:88:a0:fc:6e:c0:5e:7c:5b:ab:cf:c3:e7:
d5:60:ce:95:6c:38:75:f7:d4:08:59:60:cc:24:2f:
7d:09:f5:7c:36:d5:20:61:52:2b:b4:b7:e1:63:5b:
0f:ce:72:45:4e:e4:67:1a:0e:e0:07:e2:e4:ea:4d:
f4:7a:db:57:16:5c:9b:0b:c1:8a:db:62:94:18:80:
93:be:79:4c:95:04:85:55:d9:2f:1e:81:64:0f:10:
33:1f:6c:97:21:c9:cf:2b:76:48:cf:f1:4d:1b:fe:
e9:5d:ba:e1:0a:5a:59:e8:84:d3:73:8d:5a:63:e2:
74:6f:20:a8:ff:a5:79:6c:a8:d8:dd:a7:07:44:8a:
3a:61:0d:b5:2a:61:2f:91:c0:5f:a5:b9:2a:df:b2:
7b:cc:e8:6e:2b:45:32:0f:f2:00:df:60:f3:8d:db:
da:c9:f5:41:52:6e:9d:04:47:1e:7b:11:de:29:a7:
f4:56:d6:4b:06:1c:10:b4:3f:85:49:9b:47:c8:de:
71:62:aa:3f:59:81:b0:73:e9:be:45:71:50:ea:91:
c2:cb:71:80:30:4e:85:b3:79:06:20:0b:0e:88:78:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:5D:F2:9F:38:C2:F2:5F:7F:E8:95:AC:4F:98:EC:AA:21:41:23
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:e2:16:7d:05:58:b7:76:d7:a0:af:99:10:81:43:fd:f2:
63:18:95:97:cd:b5:2c:1f:de:85:55:43:ac:10:07:53:56:16:
a6:34:5e:a5:67:fd:1c:e9:ed:bd:71:aa:98:fe:d9:bd:a6:62:
4e:d6:1d:87:39:70:b6:3b:4e:8b:01:9b:7a:08:1d:d9:c4:2d:
93:e0:a3:53:a4:cf:f1:20:d0:25:79:51:be:58:d5:f3:76:07:
cf:09:de:15:8f:bf:31:86:fc:9d:96:ff:33:03:79:10:00:7c:
6b:e2:49:44:bb:47:ba:b1:1d:f3:9e:72:81:fb:35:12:e1:c2:
3c:31:3a:76:d5:34:45:30:ac:09:05:58:fa:97:f0:54:4d:9c:
77:37:11:4f:d7:03:41:58:67:0a:0c:17:32:a2:0c:8f:d5:cb:
3a:fd:05:27:ff:f6:1e:08:37:d8:7e:7b:0c:fb:3b:ae:fd:3e:
c9:70:a7:75:fc:c7:f9:b8:59:3c:cd:b5:d5:1e:64:6a:3b:23:
fa:57:fd:7a:fb:75:24:90:9c:6d:ba:f6:65:a0:ee:48:c3:53:
d7:59:81:37:52:17:5c:a6:6b:9d:74:60:79:bb:0e:49:49:a4:
b3:f2:69:dd:57:b2:4b:24:fa:5b:e0:f7:c0:47:e1:18:64:e2:
3a:93:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:09 2026 by rpki-client