Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: eTh3jGia9zL7jcFMyV7O12PIsULNMrkZEmhxe4WpRsI=
Subject key identifier: DB:A2:8D:21:6C:3D:90:5C:E6:F0:2A:85:82:A5:5F:12:F8:31:AB:AD
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019E1D59D3DD539FACD815BA24353AB35336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 82
Signing time: Tue 12 May 2026 18:01:26 +0000
Manifest this update: Tue 12 May 2026 18:01:26 +0000
Manifest next update: Wed 13 May 2026 18:01:26 +0000
Files and hashes: 1: 1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa (hash: cnjmn37Bymr+KZc+EQAJuebAi5xDmdRRwv+K/KGNEr4=)
2: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: vBXq9mZhH5KhiPl1sj/XIhOIzxHW2ou8NJ3lcsX6tYI=)
3: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d3:dd:53:9f:ac:d8:15:ba:24:35:3a:b3:53:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: May 12 18:01:26 2026 GMT
Not After : May 13 18:01:26 2026 GMT
Subject: CN=dba28d216c3d905ce6f02a8582a55f12f831abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:5c:ee:95:0e:fd:1a:a0:e2:c6:4b:7c:32:
96:6a:db:1b:c5:85:8d:e3:2d:dd:cb:25:81:da:ad:
bf:b0:9c:e2:8c:47:e4:26:11:4c:dc:38:e7:06:80:
97:52:7d:a7:14:ee:07:11:5c:6d:20:e6:8a:b3:1e:
c3:37:fe:ff:75:f3:df:78:4d:94:03:b9:29:2b:94:
f6:17:3c:27:e7:00:9a:74:08:ca:f5:66:05:36:3b:
51:99:eb:54:cd:04:98:81:dc:06:7b:06:3a:5c:c5:
85:57:de:cc:81:f1:e0:e5:39:6d:10:aa:d1:96:a4:
74:87:d3:0e:71:e6:50:9d:8d:bd:e5:e5:3f:57:53:
72:59:3f:d9:25:00:5d:b8:74:12:7d:e0:d5:e0:b4:
8f:96:9d:22:03:3b:e5:4d:ea:0a:fd:c2:c9:fa:07:
f6:61:90:19:0e:8c:bf:4a:34:19:b2:54:01:d6:6d:
30:47:23:23:f9:bb:8f:1f:8d:c1:6a:f9:02:e0:25:
67:83:e2:0a:d4:75:01:90:19:4c:5b:fd:30:93:17:
f8:b5:70:dd:b6:95:6e:45:72:0f:d0:fc:ef:87:fe:
e1:37:3b:c1:ba:0f:91:13:7f:c4:c4:45:e1:55:93:
24:10:86:1a:99:36:53:08:4c:6b:35:c3:68:6c:f2:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A2:8D:21:6C:3D:90:5C:E6:F0:2A:85:82:A5:5F:12:F8:31:AB:AD
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0f:c7:65:ae:f4:29:97:0e:ae:79:89:db:ea:0d:4d:02:5f:
fe:9c:c2:12:f5:f2:24:e6:20:d2:66:34:84:89:48:6e:79:ac:
a6:06:69:49:49:a2:ce:9a:0f:d8:a5:f8:50:d1:47:75:be:12:
03:52:5c:4c:2b:ef:79:a0:21:87:91:f9:47:1c:ae:54:09:c3:
2a:2e:76:5b:c2:5c:08:93:dd:e9:62:e6:46:61:5e:59:3b:4e:
f1:ea:a0:6e:78:c0:0d:09:27:33:9c:30:38:58:4c:0d:07:ec:
eb:7a:e4:45:a0:92:bc:3e:8b:b4:f5:51:85:9b:79:41:6e:b6:
ed:8d:ce:65:b3:df:db:a5:a3:93:4a:5c:4d:e3:15:e7:02:a0:
09:b6:ff:3d:6f:4a:9d:89:7b:72:f2:61:89:0d:f2:e5:66:e8:
3c:70:ad:df:84:88:1d:8c:d5:df:19:f0:aa:8d:7b:28:65:99:
f6:65:1b:ca:01:af:b3:b0:3d:20:a8:ab:cc:89:ed:45:74:45:
55:3f:ba:1d:a0:a6:f3:fa:ac:b2:e6:68:44:fc:3f:b1:df:08:
12:d6:52:db:a3:00:e4:4a:50:0d:67:29:70:24:c4:1a:07:63:
f3:20:80:6c:5c:a1:43:17:11:f5:8f:cf:0b:b3:92:e6:be:07:
d5:7c:ab:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:14 2026 by rpki-client