Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: BVsecWEUhqw3CPiOvVHlC+KPnvbECnF/0NtKeVoWce4=
Subject key identifier: 28:B7:18:F0:0F:B3:7E:74:3D:10:53:C8:D7:C7:6D:FA:47:85:90:25
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019E1C475B2A75398C4FDE56F70FDE2419F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0AF3
Signing time: Tue 12 May 2026 13:01:38 +0000
Manifest this update: Tue 12 May 2026 13:01:38 +0000
Manifest next update: Wed 13 May 2026 13:01:38 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: sgldgRhAOsbOCMI+sVOXSkHfkv4HKeUtxBWBxohIxOs=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:5b:2a:75:39:8c:4f:de:56:f7:0f:de:24:19:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: May 12 13:01:38 2026 GMT
Not After : May 13 13:01:38 2026 GMT
Subject: CN=28b718f00fb37e743d1053c8d7c76dfa47859025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:30:55:24:36:d2:14:4b:bd:8e:db:37:df:
11:25:da:71:4a:5a:33:ed:0e:93:e8:9e:f3:c2:e1:
d4:2d:c6:f0:27:18:2e:51:95:e2:5c:05:4c:cc:cc:
98:3e:0c:19:e8:83:44:c3:fa:b4:c9:8b:47:73:37:
25:03:72:18:c0:d5:1c:10:d6:69:dd:af:8c:74:31:
44:28:1d:cf:1c:10:b9:53:eb:4b:f7:cd:d8:c6:16:
4d:49:02:b9:41:66:c4:b6:f7:1e:3f:33:6c:c0:99:
c5:38:3e:ef:5e:7d:17:65:31:89:c2:d7:e7:7f:de:
8e:6c:c7:3d:a6:55:01:82:3b:34:91:4a:6f:ba:d0:
a2:d6:8b:1a:60:16:83:de:14:6c:ad:64:59:10:78:
09:22:d7:bd:e5:e8:60:a9:f0:1c:ec:d2:21:28:86:
d3:17:87:09:9b:93:f1:21:32:a9:bb:4e:dc:08:99:
b2:f9:a0:1a:98:21:26:21:6c:b6:55:c3:c6:cf:59:
89:03:b0:50:d2:98:d8:71:2e:0b:38:18:34:f4:95:
83:08:70:7d:59:8c:25:cf:c7:59:24:1d:f9:54:00:
6b:b2:98:1c:a5:71:27:65:cf:f2:5d:d8:9a:4a:8c:
ad:bd:1b:9c:41:94:a0:80:c0:76:e8:78:90:cf:40:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:18:F0:0F:B3:7E:74:3D:10:53:C8:D7:C7:6D:FA:47:85:90:25
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:3b:8e:f3:e8:89:cd:f8:39:cc:07:6b:09:aa:e3:6e:71:
79:57:6e:b7:15:22:10:00:e4:51:32:6e:d7:7b:c1:70:f4:49:
f7:56:40:e9:a5:b6:2f:83:5a:2f:a1:21:8f:95:c1:a2:68:82:
c2:eb:13:2e:be:09:4a:2e:e4:0a:e9:0c:15:87:d5:dc:ba:96:
bd:00:96:4c:3b:a2:dc:19:54:e0:ec:44:7b:15:d2:92:ec:a9:
bd:54:a5:a1:74:ba:c8:d6:ae:da:56:e0:b2:a8:bc:54:5b:5a:
40:08:77:0e:13:34:1a:84:3e:cb:1a:33:ca:17:91:48:31:7b:
be:de:60:01:8f:07:69:83:4e:8d:ce:ae:14:c4:36:08:c5:3c:
86:e5:e9:46:15:05:1a:34:dd:98:32:a3:c8:c1:83:d6:02:99:
a4:5b:dc:ab:93:99:60:14:08:0e:1f:a0:12:57:f5:98:f9:e8:
c1:3f:ea:69:2e:83:f0:95:bf:6b:97:9f:42:04:62:69:ff:b2:
7b:18:1c:87:cb:3b:79:be:52:43:71:37:66:65:5d:ce:a9:78:
b9:0e:b1:6b:bf:c2:3d:02:25:d5:3a:c1:aa:ad:7b:64:fc:6e:
23:06:35:ae:43:f5:c8:10:48:33:6f:79:4e:01:84:bd:75:04:
02:b6:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:25 2026 by rpki-client