Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 83Z9EELc3BW7A/mQ9PmKOaF79PkdGMPD7QOzncXIDno=
Subject key identifier: 7B:71:F5:51:46:3C:E1:32:AA:83:9D:AD:5B:AF:AD:07:0D:38:8A:97
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019F8FEC7A3E2A837EAD5A1EAD09AAB82345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 17:01:07 +0000
Manifest this update: Thu 23 Jul 2026 17:01:07 +0000
Manifest next update: Fri 24 Jul 2026 17:01:07 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: wp+iowU7qmsnhALXp4uRox+yGxj02EpQ6UGRSEN6JXk=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:7a:3e:2a:83:7e:ad:5a:1e:ad:09:aa:b8:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jul 23 17:01:07 2026 GMT
Not After : Jul 24 17:01:07 2026 GMT
Subject: CN=7b71f551463ce132aa839dad5bafad070d388a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:52:f2:5f:90:88:6f:75:11:b5:43:e5:70:
ba:d4:ab:72:48:b7:a5:12:8c:2c:96:e6:1b:3f:d1:
e2:61:fb:e7:50:59:85:1f:9c:ef:a4:1e:d4:4c:fe:
cd:f0:64:a4:fc:97:d0:c3:25:89:c6:17:ef:1b:8b:
ff:74:ab:5e:a6:9c:05:07:65:89:9e:4d:54:2b:bd:
6a:d5:f4:b0:f5:0a:c9:67:9e:a4:57:53:82:de:b1:
f2:c6:e2:5c:b7:2b:70:7f:ef:1c:d0:06:32:c2:e4:
19:a8:32:06:fa:d2:dc:e2:0a:fe:41:d9:94:03:fc:
8e:61:aa:69:f5:5a:20:5c:cd:fc:eb:65:54:89:e9:
a5:32:a5:88:b9:9a:a6:4f:9e:f9:97:f6:cf:0b:84:
ab:fa:cd:0e:99:00:1b:8f:5a:53:cd:04:05:96:5a:
c9:42:8b:60:20:52:2c:03:e8:b4:62:bf:23:e0:55:
ba:8d:e9:07:26:32:fe:7a:0a:c5:9c:4b:5e:10:66:
d0:ca:04:e8:57:d5:15:16:32:4d:26:20:6e:8e:2c:
4f:30:a4:ac:48:78:e7:c1:07:ff:0c:24:f8:81:13:
9c:88:29:b0:4e:18:e8:41:23:ff:a4:08:8d:fa:e7:
af:ab:2e:b9:7a:99:d4:3e:5d:73:ce:bf:57:af:e7:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:F5:51:46:3C:E1:32:AA:83:9D:AD:5B:AF:AD:07:0D:38:8A:97
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2e:90:51:36:de:4b:d3:32:da:63:b7:ba:55:46:0e:88:64:
12:62:8d:cd:9f:62:41:62:e5:fa:90:51:ed:9a:93:86:39:04:
cd:e0:33:e5:b3:68:79:a1:5a:9a:ec:51:68:54:1e:73:74:01:
f0:da:d0:4a:fd:7e:6b:fd:f9:b9:72:71:87:a6:9f:ee:fa:15:
bc:65:43:d0:5f:f0:e4:0f:66:02:43:c1:8f:82:52:bb:cd:d7:
73:87:e7:0e:28:20:86:bb:5f:f7:ea:27:d4:73:ba:6b:2b:b7:
a4:01:63:4d:be:bd:c8:cd:a6:ee:e6:d5:2d:c5:7e:bc:07:88:
71:58:9b:e6:5c:9a:38:67:db:89:ed:3b:93:68:58:99:19:57:
b7:a1:68:33:3d:05:d5:79:c3:a0:2a:5e:93:62:ba:d3:7a:f9:
0e:d9:d2:ac:42:fa:d9:e7:1b:8c:93:82:82:ac:a8:f3:f8:c4:
f9:3b:15:5b:36:60:cb:3c:e9:4c:90:92:5b:ec:f2:e1:49:2f:
1b:88:89:7c:6e:bd:2c:d9:81:07:c1:be:21:83:52:e0:34:c0:
32:13:37:5e:b6:f0:25:2f:0e:d8:2b:6f:c7:17:e3:7e:52:36:
74:eb:2c:ef:ad:b4:51:ce:3c:b9:29:7f:4b:f2:00:09:78:cb:
fe:5d:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:26 2026 by rpki-client