Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: tTYdxsYvfpjpyaaBUzZJ/9lzq2T0xz0XDHdrQ5Vyqp0=
Subject key identifier: 3E:B8:CF:BC:C3:CF:E7:B0:08:21:2B:78:F1:35:8E:3F:2C:50:40:17
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019E1D2272990893C6B96CDC00198A3F787C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:00:57 +0000
Manifest this update: Tue 12 May 2026 17:00:57 +0000
Manifest next update: Wed 13 May 2026 17:00:57 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: R5dyshcP7L0ZaF6iNu2xix3CMvT+YaIeP6dRziqPjhk=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:72:99:08:93:c6:b9:6c:dc:00:19:8a:3f:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: May 12 17:00:57 2026 GMT
Not After : May 13 17:00:57 2026 GMT
Subject: CN=3eb8cfbcc3cfe7b008212b78f1358e3f2c504017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:a0:1b:44:33:22:fd:64:63:df:f4:c3:5d:
7e:49:38:3a:6d:68:a0:cf:d1:a9:e9:f0:96:07:3e:
cb:2b:17:0e:f2:48:4f:89:99:14:90:7c:8d:dc:71:
5b:6c:0c:44:55:50:6b:76:78:c0:b9:d2:e8:1d:70:
f5:58:15:9e:5c:55:e6:ce:ba:4c:40:30:b7:84:ec:
fa:c6:ad:5d:e8:be:71:d9:7f:1d:0a:a6:fc:48:08:
d9:0b:87:3a:53:36:9e:75:0d:06:90:b5:de:d2:be:
f1:f7:59:88:ed:f8:40:9e:9f:c0:6f:c3:67:f4:a4:
e7:9f:d8:1e:f0:df:19:e2:3e:54:fb:a4:9a:1c:0e:
46:a5:a7:ff:c2:25:3d:06:7c:bc:dc:ce:71:04:52:
11:f0:ec:0e:d3:e4:44:58:73:9c:5f:2a:cd:16:4e:
ef:09:61:8b:f9:e5:5c:e8:ae:cc:0e:67:91:af:6d:
0f:b4:81:14:ea:74:31:4d:21:dc:f1:e4:06:2e:3c:
54:f5:ff:01:03:33:eb:d5:cf:12:03:ad:16:ab:65:
9a:c5:1b:55:ab:c9:da:ee:d4:4f:76:dc:91:aa:78:
37:44:21:d9:ac:46:de:bd:d8:ee:af:68:b8:0d:36:
58:59:79:f0:96:73:a3:0a:9a:22:63:e5:4d:2b:86:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:CF:BC:C3:CF:E7:B0:08:21:2B:78:F1:35:8E:3F:2C:50:40:17
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:8e:19:d5:f4:93:d4:58:e6:61:f1:8e:d6:3a:37:af:73:
70:5d:63:1a:a3:bb:f4:55:23:c8:a6:17:7a:af:98:51:7b:91:
13:5b:fb:4f:0e:e7:97:00:b1:59:9a:e8:c3:00:e0:12:96:58:
df:75:82:3d:51:5f:5a:90:fb:f9:a4:0b:e7:52:56:4d:a9:92:
9b:67:e2:70:4c:f3:7e:19:cd:67:e9:90:5f:a9:ea:7d:80:ca:
60:d4:85:a2:25:fd:e3:ed:c1:a0:22:5d:49:81:17:47:ae:cb:
06:a0:48:4f:69:8c:c2:ac:90:ef:3d:e6:99:9e:d1:4c:c8:c4:
d4:58:90:31:f8:91:9c:ba:7f:5d:87:2b:90:05:80:12:0f:9b:
ad:cf:94:55:38:1b:55:95:6f:79:b8:6d:d7:50:ab:b1:5e:f3:
d5:cb:82:9f:08:5d:13:73:bc:47:d0:31:8f:6c:c4:d2:57:ea:
d6:5a:f4:f6:04:36:cc:f8:3f:0c:9c:9b:44:9a:d1:d4:3a:c8:
7e:87:30:cf:fc:9f:16:6a:1d:95:71:29:6c:a8:4e:19:ba:4f:
d3:65:18:5f:54:7f:3c:2d:a8:11:8f:66:b0:56:13:18:6f:41:
c1:4d:78:15:ca:21:50:38:54:e3:37:df:af:ab:d8:2c:53:9f:
4c:93:2f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:39 2026 by rpki-client