Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: +NERcjy91+qDWb0XMC0JPC0J6NoOgtapBi5Hksooc5c=
Subject key identifier: 83:DF:29:CF:C0:34:CE:F3:DE:B3:4C:35:81:08:61:1A:FA:60:39:39
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019D27DFB22D7092A7ABECC00FBA7904043E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:01:04 +0000
Manifest this update: Thu 26 Mar 2026 02:01:04 +0000
Manifest next update: Fri 27 Mar 2026 02:01:04 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: mxoDVMQaENnp20gSYQ951IRAXVdX3eQOzomu+AmeO4Y=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:b2:2d:70:92:a7:ab:ec:c0:0f:ba:79:04:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Mar 26 02:01:04 2026 GMT
Not After : Mar 27 02:01:04 2026 GMT
Subject: CN=83df29cfc034cef3deb34c358108611afa603939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:27:b3:ae:8b:c6:d1:14:49:c7:77:64:98:
58:66:b2:31:23:de:fb:4a:b4:21:4a:69:ee:8a:27:
d9:33:e7:30:f1:98:9a:a2:ff:32:24:0f:63:5b:c1:
45:8d:c7:18:66:e0:f3:6d:d9:93:8c:c6:2e:ff:0d:
9b:31:b1:6f:7d:54:fe:be:01:86:85:1e:bf:a7:e1:
3c:81:b1:98:17:f1:59:17:33:d8:4b:a7:c1:f8:a0:
14:a8:2f:f0:0a:15:29:d0:6c:18:cb:8f:8a:02:16:
05:4a:f1:a8:c7:0a:50:37:2c:46:62:5f:e3:fd:93:
df:a5:88:26:e7:40:45:3c:c5:a6:cc:6b:48:e8:25:
21:19:db:83:fb:f0:85:f8:51:a8:9a:8f:08:4d:0a:
94:e1:06:85:39:59:40:1c:53:f4:6b:90:d1:f5:4d:
fa:ed:75:0a:f2:a7:f7:93:fd:a8:1b:17:ae:67:9b:
eb:38:8a:c5:4e:8d:bc:1d:c2:c0:86:b5:9e:52:54:
28:14:df:08:18:02:a0:6e:be:bb:f4:f4:49:fa:72:
06:16:7b:b7:46:0e:9a:16:45:55:0a:bc:7b:3e:eb:
4c:55:37:d0:57:d1:0a:1b:0e:3b:1d:3e:09:29:8f:
20:5a:c1:4b:36:81:cb:e7:fc:50:d0:b4:29:c1:18:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:29:CF:C0:34:CE:F3:DE:B3:4C:35:81:08:61:1A:FA:60:39:39
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:df:9e:e8:80:19:d1:34:62:1d:fe:ad:60:3c:7e:6b:92:92:
07:c5:93:85:cc:1a:f4:1f:b6:33:80:7f:63:98:a3:29:05:43:
41:aa:38:24:0d:14:a2:6b:be:03:8e:01:29:55:93:c7:35:2e:
58:df:e1:2c:f3:99:28:21:cf:49:ab:03:82:f0:5f:b3:89:1f:
18:f7:b9:8a:30:f4:f3:39:77:fb:2e:97:dd:b1:bc:8a:d9:99:
85:da:88:c3:39:49:1f:2c:12:b3:4e:91:7f:5e:b0:56:2a:06:
e5:8d:43:1b:b0:c3:18:27:6a:54:93:61:7e:b7:63:36:cc:41:
d2:95:ed:f8:e4:d3:63:cb:c5:f2:ff:2c:ad:1b:b6:b6:53:3e:
e8:59:47:ef:57:b4:0a:75:9e:28:ed:af:e1:c8:06:8a:2d:53:
af:49:8e:90:9a:56:05:1e:29:9d:ee:ba:ea:01:b0:16:09:e2:
9b:8a:43:52:b3:ef:dc:ed:14:f8:88:ad:b7:ec:c8:65:c1:b2:
e3:e6:57:57:a1:3f:b7:1b:f2:9b:65:bf:3b:0b:3f:7b:71:37:
09:3f:27:9d:76:9c:3a:89:a3:b6:34:66:1d:b8:fe:c0:93:14:
17:38:45:e6:99:22:5d:e2:2c:c0:69:01:84:4c:8e:29:be:1a:
52:00:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:47 2026 by rpki-client