Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: D+tbEIQrqfYvhPqORlebQv3j/xt1/3X30mkf5MJyVMo=
Subject key identifier: 7E:54:42:4C:CB:1B:73:A8:CA:BE:E7:6B:63:A3:5C:B9:41:AF:56:99
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 01A0CFA4B81FAF83E75ED03E4C82AE94D9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 01E8
Signing time: Wed 23 Sep 2026 19:01:13 +0000
Manifest this update: Wed 23 Sep 2026 19:01:13 +0000
Manifest next update: Thu 24 Sep 2026 19:01:13 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: o5dT5qNjftUL4nplc2yhz0CUHA39sRTJZYMSQkXfNrg=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b8:1f:af:83:e7:5e:d0:3e:4c:82:ae:94:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Sep 23 19:01:13 2026 GMT
Not After : Sep 24 19:01:13 2026 GMT
Subject: CN=7e54424ccb1b73a8cabee76b63a35cb941af5699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:c0:14:7c:61:44:90:5c:c9:28:1d:1f:3a:
33:ab:36:0a:92:5f:a5:fa:ce:b0:63:a1:dc:27:4b:
3f:fb:c6:cc:c4:5b:11:ff:f5:32:35:57:5e:53:4c:
d3:78:eb:10:3d:9e:33:20:67:cf:1a:8d:f7:39:81:
4e:67:75:8a:e1:76:14:bf:cb:81:24:f3:05:54:3f:
eb:6a:93:18:e6:d9:a5:34:6a:44:17:87:d3:90:a0:
5e:47:54:4a:bf:45:52:0a:38:7f:08:85:2a:7d:62:
24:d1:f3:ce:20:c1:ab:57:6d:ba:1e:db:9f:54:3d:
07:fd:a2:a3:86:a7:80:0d:64:b8:b8:45:81:75:63:
4a:fc:79:87:6b:bd:0c:4c:52:34:60:c5:03:bb:50:
b1:59:87:31:0a:ba:ad:6a:1c:97:0c:bf:2b:52:03:
df:b9:94:44:54:15:bb:61:b2:23:3d:f8:6d:72:04:
76:1b:c0:7d:9e:61:7e:63:6f:fb:4c:38:c2:c2:58:
5e:ca:42:41:11:30:c0:03:80:67:a2:fb:f9:55:a4:
29:92:77:d4:ae:e5:d3:0f:1e:06:b3:44:33:04:84:
16:2f:34:e1:77:47:04:96:d7:b5:4a:47:73:20:8f:
59:0b:e4:ac:33:1a:e7:c2:8c:65:72:5d:ff:a4:1c:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:42:4C:CB:1B:73:A8:CA:BE:E7:6B:63:A3:5C:B9:41:AF:56:99
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2c:5c:7f:0b:14:80:9a:c4:99:26:9e:58:a9:eb:3f:1e:55:
46:23:58:25:cb:af:01:6d:ac:d7:6d:6e:35:8b:f9:84:27:35:
fc:71:31:6b:87:ac:d1:f1:ab:f7:fb:58:6e:f6:f1:3d:be:10:
5e:28:78:ad:94:bc:c6:28:c3:24:f7:7b:b2:1e:5b:87:37:18:
ca:ac:2f:3a:a4:f0:57:45:9d:a8:1b:76:d9:5f:1b:1e:ea:dc:
c2:10:3e:39:ed:e1:31:55:5e:0a:ef:d6:48:d2:c8:bb:4a:22:
8b:a6:ad:3a:79:4b:2e:18:21:93:34:ae:7f:0e:dc:82:d4:3a:
3e:f1:00:d7:40:17:93:64:10:a0:d5:24:5e:b7:44:bd:cc:75:
b9:81:bc:4e:ed:87:b6:75:7c:26:1f:92:4e:ed:2b:7a:ba:a4:
81:c4:c7:5d:ab:17:84:4a:0a:2b:3b:d3:b4:58:26:c1:ea:3e:
09:89:d2:0e:e9:d0:82:da:a6:1b:3d:ac:8d:a4:67:01:ac:c2:
56:0e:23:b5:3f:db:6a:57:c0:81:b0:30:2f:80:e7:4f:82:2c:
d4:ec:df:35:dd:2d:ad:87:6c:0c:de:18:b6:57:32:37:40:31:
bd:7a:ff:77:69:9e:7d:de:7d:be:ae:0b:ca:d5:5f:68:8b:8f:
82:b4:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:50:54 2026 by rpki-client