Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: wFPimHxvhWa5N4SjlS6oSmA3cU0LAyIh0bK2NNMeVyY=
Subject key identifier: AC:4A:00:34:60:17:26:2D:E3:7F:49:96:40:58:4C:E9:DF:6A:4C:F2
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019F90FF447551156E0720974271E605EA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 0143
Signing time: Thu 23 Jul 2026 22:01:15 +0000
Manifest this update: Thu 23 Jul 2026 22:01:15 +0000
Manifest next update: Fri 24 Jul 2026 22:01:15 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: DQev/3DH84ftcBehDxGEBvElbqgkjgHxT2SHJixFWhs=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:44:75:51:15:6e:07:20:97:42:71:e6:05:ea:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Jul 23 22:01:15 2026 GMT
Not After : Jul 24 22:01:15 2026 GMT
Subject: CN=ac4a00346017262de37f499640584ce9df6a4cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:bb:39:71:2c:b8:96:36:57:b5:44:59:f7:
e5:bf:87:75:c3:8f:b4:d5:df:8d:63:49:04:90:69:
8b:19:17:f4:b0:7b:a0:50:5b:74:75:f7:f4:fc:4c:
1f:0e:fb:55:e1:40:c2:b7:ed:19:d1:33:f5:e4:3c:
70:95:8a:e9:99:05:99:68:f0:15:91:12:f6:a8:a0:
0a:03:30:ec:4f:d2:5d:23:9d:a3:27:b6:f6:cc:d3:
a8:fa:63:41:2b:95:e7:99:97:20:ca:b4:f1:d8:81:
e0:53:bc:3a:dd:6b:8c:90:f0:58:3a:ae:8c:a7:95:
db:70:f4:95:c8:a7:03:df:dd:66:59:37:8f:d0:86:
16:0d:de:ac:91:9e:39:c0:c5:ca:85:1b:4e:4c:00:
25:98:a6:fb:16:1d:d6:9f:f1:b8:79:cf:91:0f:b1:
95:34:ee:0c:29:97:14:43:bd:d1:ed:9b:df:e0:63:
4a:8a:65:cd:73:3c:5c:6b:44:13:ba:3e:83:70:bc:
65:f0:b8:dc:15:c9:ce:8c:a2:a2:73:74:f8:9d:47:
48:a8:48:2e:d6:bf:f3:ac:66:45:c0:b3:04:2f:5b:
30:08:f1:f4:f2:0c:ca:91:81:f6:eb:47:2d:42:08:
9b:89:52:da:e6:ff:aa:0f:c8:f0:c9:d1:73:25:70:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:00:34:60:17:26:2D:E3:7F:49:96:40:58:4C:E9:DF:6A:4C:F2
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:02:65:14:c4:f2:d7:91:f9:1c:f9:84:09:92:a6:1c:aa:
5c:26:c2:8b:07:ff:09:e4:a9:b9:10:bf:1b:5d:15:01:ec:a8:
26:5f:43:48:5d:79:2b:85:f8:8c:cd:18:49:87:a9:6b:b0:2c:
e0:ce:a1:a2:fe:36:a4:8e:ea:9e:66:33:d9:76:a7:92:e4:3e:
ae:c1:84:b8:d2:3e:9b:9a:1c:73:6d:ee:8b:6b:69:df:98:0b:
3d:af:ce:07:49:b5:3b:a1:b0:f9:d8:6c:7b:54:5a:c9:50:2b:
d1:10:64:02:fe:f9:ff:47:c8:4b:d4:96:e7:91:05:98:6d:06:
f7:4b:a4:c3:0a:70:b5:be:c4:87:df:9d:fc:e7:aa:d6:fd:d6:
55:3b:62:2d:cc:c9:93:01:42:5e:c9:fe:93:21:70:06:05:0f:
f5:8c:06:40:3d:c0:c3:41:dd:02:67:13:5b:a6:66:26:f9:c2:
8e:c6:0d:af:f9:a5:ca:f1:48:1f:0d:6e:e2:2b:8c:e0:61:e5:
c4:ef:17:20:b5:1a:7c:82:7f:46:ce:89:22:41:be:c8:56:7d:
07:d9:28:4c:83:20:ae:17:11:84:28:0a:6a:96:7b:b2:45:6d:
cc:ad:78:e6:3e:29:f8:c7:70:63:c2:2c:4f:ed:fd:28:99:60:
47:6f:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:12:38 2026 by rpki-client