Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: 0yH3kUed/cWerGi9Mfcp/K6KXO+ORURHsmVeJNW/lwM=
Subject key identifier: E0:6E:20:FE:67:AB:EE:FC:8A:90:88:5C:03:29:AD:49:82:9F:7B:5D
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 01A0C96BA2D9C07ACF6127D4E2FBC8F4CE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 14:01:09 +0000
Manifest this update: Tue 22 Sep 2026 14:01:09 +0000
Manifest next update: Wed 23 Sep 2026 14:01:09 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: NgICT7wkF61h8GNc6xFCdHJ4R9HFdVmtrZZiH3fMwz8=)
2: AHnNibYpBfUdvSGboILQ1teAIw4.roa (hash: 42GSIkMZbcrmZ8XMph6d+mXrtH34NIs/JYMf8WUp4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:a2:d9:c0:7a:cf:61:27:d4:e2:fb:c8:f4:ce:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Sep 22 14:01:09 2026 GMT
Not After : Sep 23 14:01:09 2026 GMT
Subject: CN=e06e20fe67abeefc8a90885c0329ad49829f7b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:65:be:11:4a:d3:c2:2d:b3:6d:79:27:10:
38:b4:c3:33:7b:f8:9a:1e:48:09:0f:93:31:87:b8:
5e:07:12:36:e2:e8:e8:02:2a:9d:a0:ec:0a:53:83:
6c:f0:d9:6d:ae:d2:ab:01:6a:46:2a:e3:83:54:20:
61:3f:61:f6:01:ac:98:9b:70:74:f9:38:e8:24:c9:
2e:93:2d:8e:35:93:26:ce:32:a6:e5:66:0a:09:cf:
42:46:4b:3e:5e:12:73:ba:ce:af:3b:87:4c:14:e7:
94:d6:f8:30:37:2a:0b:f7:bb:33:86:72:6b:fc:17:
ed:98:12:8a:17:58:4d:06:df:50:36:68:20:b3:b0:
62:89:57:92:29:3c:30:9a:bb:e2:07:1b:d9:de:12:
ba:be:74:4b:9a:96:2a:0f:8c:88:0a:7f:74:3e:5e:
fa:e9:37:63:56:32:ed:7b:bc:77:3c:07:0f:7d:2e:
d6:fb:cf:ab:8a:3d:ab:ce:34:ad:a5:e9:d0:9b:1c:
96:cf:8a:42:3a:09:a4:b2:a9:9f:dc:1f:87:b1:77:
ef:fb:2c:08:33:20:aa:08:8e:a2:8e:43:2b:39:5e:
dd:f1:b6:91:71:77:37:ed:e2:1c:84:0e:91:8f:e5:
87:44:03:b2:19:33:df:54:5f:c5:ea:bf:92:d1:23:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:20:FE:67:AB:EE:FC:8A:90:88:5C:03:29:AD:49:82:9F:7B:5D
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:df:51:1b:65:50:3e:50:0f:16:ab:6f:bd:ab:e2:b4:57:
73:74:d9:31:0a:02:85:5d:68:9e:f3:a6:7d:8a:ba:66:96:86:
c4:67:68:ad:8c:0e:84:82:9b:c9:95:d8:aa:a4:90:09:8b:ac:
24:de:62:71:ea:27:28:d1:2a:c5:c6:bc:72:57:de:84:41:d0:
f4:6f:3c:71:43:21:cf:34:c3:e2:96:27:7c:5b:91:15:6e:fe:
fb:69:98:57:d3:b2:75:f3:12:78:32:df:77:6b:ce:eb:03:fc:
8a:52:0a:c3:18:47:fa:42:45:0b:c0:33:3f:51:da:0c:3d:83:
1b:06:70:ac:17:a7:d9:59:05:ba:1a:5d:43:8b:48:2a:18:90:
45:95:0c:cd:e7:d9:62:3c:b4:5a:f1:30:fd:45:ba:90:0f:c1:
30:1d:e6:b2:19:ce:e2:f3:23:15:62:9d:a2:3e:f2:50:14:05:
14:e5:cb:01:9a:b8:c6:59:38:1b:61:1f:d2:8e:4f:9e:3c:be:
38:47:a4:6d:95:1a:d1:de:78:84:18:9d:7e:1f:87:cb:b8:91:
14:ad:5e:89:84:df:d2:b7:db:4f:42:59:8f:23:10:8d:f5:5e:
39:15:cd:19:81:ca:fd:04:a0:ff:69:0c:2f:1f:ba:da:35:24:
88:b9:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:31 2026 by rpki-client