Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: ssCBAevvHQqQ/sxVP0TpAZ5C+0/sLXpkqJPTKyHhw6U=
Subject key identifier: D7:FD:F5:05:77:6B:6E:A0:47:03:02:E0:4A:21:64:13:8D:F1:08:FC
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01A0CAB49BFF3D4EDBA6560C50DC0CAE5974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 20:00:29 +0000
Manifest this update: Tue 22 Sep 2026 20:00:29 +0000
Manifest next update: Wed 23 Sep 2026 20:00:29 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: RxMT6yTPVRZo3W96xC7Dfi0UMhMYDfW/AmcaDxzpNxM=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:9b:ff:3d:4e:db:a6:56:0c:50:dc:0c:ae:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Sep 22 20:00:29 2026 GMT
Not After : Sep 23 20:00:29 2026 GMT
Subject: CN=d7fdf505776b6ea0470302e04a2164138df108fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:c7:2a:c7:82:12:2e:10:d2:e0:eb:6d:79:
4f:99:c7:57:8c:94:be:9b:e4:2d:47:30:db:c7:b4:
7a:ed:63:a9:99:18:9e:0c:d3:96:d0:04:32:0d:33:
01:4e:ec:41:73:15:ba:73:21:e9:24:ad:67:e2:4f:
dd:90:1e:ac:a4:e3:b1:12:ec:60:00:74:2d:28:ce:
b9:b7:e2:50:02:4e:6d:00:c1:cf:bd:75:c6:b1:03:
e9:0c:3a:b1:ea:34:04:91:c3:fd:83:e3:1d:cc:c2:
95:32:46:f2:11:13:8d:0a:fc:ee:73:ed:7c:4e:9e:
e7:40:e2:78:79:6b:45:aa:6b:f0:12:e9:30:8b:36:
4a:c5:87:af:50:af:d8:25:aa:1c:3f:93:e8:ea:5e:
c9:b4:a7:ca:ef:54:22:17:5f:cd:f6:74:45:a0:f6:
fe:5c:5f:f7:9c:7b:c2:19:32:a0:68:c9:66:54:35:
1d:90:46:78:71:c0:c7:b2:5d:d7:e8:cf:50:30:79:
43:f6:c6:86:55:af:3a:5c:39:29:7f:8b:33:be:81:
bc:c1:bc:9a:10:9b:2a:2f:3d:03:6f:dc:61:64:d1:
14:8a:19:03:ae:ad:47:5f:7e:51:4d:18:43:65:a1:
81:f3:fc:16:7a:b5:ef:91:ac:c8:34:8e:bf:48:02:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:F5:05:77:6B:6E:A0:47:03:02:E0:4A:21:64:13:8D:F1:08:FC
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a6:90:d2:13:0f:07:ed:8e:df:cf:79:8e:ef:ac:25:a7:91:
17:e1:97:26:52:e1:2f:3e:ee:d6:23:30:0c:87:18:84:c1:3e:
a5:1e:dd:60:d7:dd:59:bf:78:80:98:53:69:f4:dc:b6:df:af:
d8:5f:3f:45:f1:7b:ae:08:ab:fc:fd:7a:d6:bf:97:64:5b:7e:
56:21:7d:d0:2a:71:f7:df:69:63:e0:de:2d:ab:08:ec:22:2f:
fd:32:2a:20:8f:0c:d1:8a:1c:9e:02:6f:d2:56:d2:0e:98:3f:
24:16:fd:a3:23:2f:15:2b:b7:aa:7f:eb:2f:53:72:f9:dd:60:
ce:af:5e:fe:e5:a0:c3:3d:46:93:c5:95:51:01:29:3e:86:cd:
9e:02:35:1d:a0:0c:83:c8:34:8c:10:1d:61:47:f8:43:02:cb:
e0:ab:ea:42:ee:f5:49:16:2d:4b:8e:ef:b1:c3:e0:38:28:be:
19:fb:4f:c2:a5:9d:52:fa:3d:5f:2d:76:1f:b9:9a:df:3c:e1:
fb:11:0c:43:0b:4b:32:e5:fe:62:0e:a3:f3:55:01:d8:fe:89:
20:25:74:f7:5d:b4:1b:b7:5d:73:32:52:11:a0:48:6d:20:79:
21:e3:a7:1e:fd:42:52:82:d0:a1:39:44:31:e5:19:83:e7:48:
49:06:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:17 2026 by rpki-client