Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: mBpFk9J4pEt9dE91bnC7KXahrEUCz8Fxce4ytzop9zU=
Subject key identifier: AC:74:B2:3C:B3:35:C8:DC:E2:62:51:E7:CD:C6:AC:A4:C0:35:03:3C
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 01A0D94CFEFD6FF114E4917B29196706B6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0C5E
Signing time: Fri 25 Sep 2026 16:01:36 +0000
Manifest this update: Fri 25 Sep 2026 16:01:36 +0000
Manifest next update: Sat 26 Sep 2026 16:01:36 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: hCqY8wSTIVP7WbVv+AS99at0x9OJVjMRbjXKMTIu9hQ=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:fe:fd:6f:f1:14:e4:91:7b:29:19:67:06:b6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Sep 25 16:01:36 2026 GMT
Not After : Sep 26 16:01:36 2026 GMT
Subject: CN=ac74b23cb335c8dce26251e7cdc6aca4c035033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:63:7e:5a:29:ee:60:a0:6a:c4:e9:6e:51:
23:e1:3a:09:ef:f4:88:5e:04:9d:41:ec:a2:b7:2a:
a0:32:d6:65:c6:c2:8f:35:28:c3:da:ac:da:2c:7d:
71:01:60:08:dc:1c:0e:ad:8c:7a:41:ed:0f:9d:7d:
c3:00:17:50:d0:56:7c:c8:bf:a0:b6:57:36:e6:0c:
ae:0c:e8:a3:d8:d9:95:3f:a6:3f:94:8d:55:43:78:
f6:a9:00:ed:c7:88:11:6e:ee:4d:b7:db:1e:d0:20:
e7:6c:76:9a:99:b7:87:14:78:0d:53:53:51:b5:b1:
0a:51:14:5a:60:64:15:33:f8:05:2a:c3:c0:fb:cd:
d0:2e:1c:ec:88:ff:0f:2b:5b:89:2c:9a:76:91:ea:
d4:f9:47:f2:f5:25:ca:0f:74:38:86:b6:56:9e:01:
9c:3b:6b:f6:32:30:b5:1b:39:54:de:b8:9b:c6:f3:
33:28:54:92:44:fd:6d:2d:30:2b:7c:be:bf:44:70:
e5:3a:69:ad:56:1b:c4:46:ed:b0:47:e4:6e:fd:08:
3d:99:7c:25:47:7a:73:0b:7e:43:cf:be:d4:a7:40:
aa:8a:f0:52:65:ff:0a:d7:ec:b2:16:7f:5d:24:ee:
d9:7f:ef:0d:4e:ef:83:76:2d:a1:fe:2e:f5:29:49:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:B2:3C:B3:35:C8:DC:E2:62:51:E7:CD:C6:AC:A4:C0:35:03:3C
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:79:4b:dd:04:74:0a:91:83:d3:a2:77:08:2f:51:88:1c:09:
0c:65:22:f3:77:f6:2a:23:6e:32:c0:5a:e4:65:2b:8d:83:62:
4c:2e:4f:35:03:30:72:a6:72:bb:87:23:e6:d7:51:25:df:f2:
0b:8f:90:ac:10:ec:34:92:d1:7b:35:08:ea:d9:b0:f0:d4:e0:
4e:79:4e:73:17:85:a1:5c:53:48:77:c9:59:6c:a3:27:7a:5d:
ed:24:8e:b2:d8:7b:32:b8:a7:f4:ba:09:0f:9b:a4:48:60:0f:
89:09:f4:aa:f9:bd:d4:6a:b6:18:57:2c:48:02:b2:60:af:d3:
f5:64:ec:7b:cf:98:80:c4:7e:86:f3:18:5c:77:71:de:70:46:
0a:b9:0c:9e:8f:13:6a:0e:3d:3a:08:95:b5:98:24:41:6e:74:
7e:84:fd:93:a6:fe:16:94:55:58:10:49:b7:0a:2b:ee:3c:d8:
7d:61:67:13:c4:35:6e:0a:cd:89:3c:17:5a:ff:de:59:7c:c3:
6b:b0:c2:e3:6b:0c:4c:15:91:20:71:74:6c:8e:7d:8f:17:28:
72:ff:e3:af:1f:a6:ff:83:d7:3e:59:58:08:52:cb:aa:e9:9d:
a3:2e:54:e6:e8:7c:5c:35:35:69:7b:43:c8:47:ea:29:c9:fc:
0b:28:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:22:11 2026 by rpki-client