Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: vF/CBkOcYLNNPC1XXbljct1/LpUDqqjuRB72DcnGa9s=
Subject key identifier: 3E:2E:89:BF:DF:2F:07:26:29:FE:B8:2A:1A:25:18:03:97:E5:8D:05
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 019CAB6BAC65EEF0D8479B799FB56EA955F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0A34
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: aITNNxAduqvUYX624pJCkSd1Nbr41YnnYLTOCBhxEvc=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ac:65:ee:f0:d8:47:9b:79:9f:b5:6e:a9:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=3e2e89bfdf2f072629feb82a1a25180397e58d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:2c:65:cd:e9:25:6c:b5:01:14:a7:41:1e:
a5:08:ca:ba:e3:66:2a:e4:b1:7b:f5:f4:2c:56:5c:
9f:23:d6:67:0f:4c:a0:68:e7:c2:d9:df:e4:a5:73:
d6:a1:58:56:6a:48:b0:bb:40:54:97:82:42:70:34:
f2:17:1b:a5:f9:e2:aa:47:0c:87:ba:cb:64:cc:b6:
ac:91:77:76:32:20:44:32:43:bc:94:86:75:28:81:
c2:1e:6a:43:1c:ae:fa:aa:97:c3:99:df:22:be:df:
b3:2b:ec:64:30:f1:97:c4:9f:99:1c:c5:2a:57:e7:
23:50:06:31:d8:6c:5f:dd:3b:f2:0c:c6:dd:9e:97:
3a:98:36:2a:79:a3:9e:dc:df:9b:e0:1d:b6:5a:a3:
b1:a3:c3:fd:ce:30:6a:a1:31:45:29:9c:15:72:fd:
ee:fb:22:0c:bd:f3:df:ef:64:89:cc:a3:18:40:d1:
4b:66:4b:13:64:8c:29:9e:e7:59:87:f8:fa:43:70:
69:79:30:36:87:0f:49:50:c2:76:74:47:0a:ae:25:
15:24:04:32:ec:61:76:86:7e:71:9a:76:38:2b:33:
47:ff:35:d4:5b:5d:aa:ae:c2:f7:a0:b9:71:ce:74:
5e:d4:89:0f:f2:59:4a:04:ac:04:81:dd:a1:5c:b7:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:89:BF:DF:2F:07:26:29:FE:B8:2A:1A:25:18:03:97:E5:8D:05
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:c5:ed:62:dc:87:52:fa:73:c7:c5:98:c0:b2:2c:4d:c9:
2f:c1:9b:7e:a6:21:a5:b6:18:8d:41:ff:df:b8:d1:21:fd:9d:
f3:9f:65:a1:8a:fd:1a:90:83:94:e5:6c:73:1a:73:73:a1:32:
42:5d:29:02:6c:44:98:fb:df:95:82:60:12:f9:05:d7:90:73:
a5:bf:60:04:9f:cf:4a:c6:d6:94:d1:eb:f9:03:b3:cb:0a:c5:
88:94:2c:e1:68:d4:e8:a4:33:7a:0f:87:c9:69:b7:93:b2:a8:
3b:2e:80:06:b7:90:79:81:ca:34:bf:9c:17:56:26:b3:12:45:
33:e8:0f:e0:e0:77:67:90:eb:76:37:ce:c6:02:da:2d:31:2a:
af:95:fb:83:f8:55:12:08:19:95:82:1c:19:f8:3c:cc:f5:dd:
2c:f6:67:75:25:48:ca:8c:4f:6c:9d:b7:ec:13:34:50:56:4f:
77:f2:e7:4a:14:5e:f9:30:16:73:39:b8:67:34:8b:97:0b:c2:
e0:64:58:66:42:cc:87:fa:6e:70:c9:1a:c7:ae:f6:32:32:04:
f0:6d:e7:0f:1a:5d:54:42:ec:76:b6:be:a9:9f:7a:51:07:9a:
3d:9b:22:6a:13:89:7d:2f:60:b5:57:05:75:37:dc:ac:e6:27:
1b:2a:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:42 2026 by rpki-client