Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: 4ydMoCTf7T1LtFv2GnOX6GWVtgWZujXrqc6DZ2lTR28=
Subject key identifier: FB:92:34:BD:B9:23:F0:78:18:F6:47:8C:D5:54:E5:87:69:17:15:30
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019FAC0815C23F0FCE85F18858B6A94D6D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 0151
Signing time: Wed 29 Jul 2026 04:00:38 +0000
Manifest this update: Wed 29 Jul 2026 04:00:38 +0000
Manifest next update: Thu 30 Jul 2026 04:00:38 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: aSFQNfbTy1rQSSnCP4aOTMa90T4tz9tNP1lJ+EBV3bo=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:15:c2:3f:0f:ce:85:f1:88:58:b6:a9:4d:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Jul 29 04:00:38 2026 GMT
Not After : Jul 30 04:00:38 2026 GMT
Subject: CN=fb9234bdb923f07818f6478cd554e58769171530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:59:12:a2:3c:33:e7:ff:62:b0:56:16:7d:
fb:6d:47:cb:cc:8e:cc:22:77:35:7f:05:5d:64:1c:
46:c9:45:d6:a0:bc:17:ee:6a:7a:1f:c4:7d:38:5c:
46:13:ba:62:b3:9e:b7:7e:c5:4f:5d:17:0b:84:9f:
b7:9f:e2:68:b5:b1:fa:ef:67:5c:3f:17:f7:87:8d:
1b:7c:aa:93:34:56:c3:74:f4:ad:13:36:5f:36:aa:
7a:dd:88:c2:ca:84:18:15:6a:a6:e8:81:e6:f3:30:
01:96:cb:6b:17:a3:10:71:44:c1:ae:5d:e3:c5:1a:
52:5e:80:da:e6:ba:d2:38:a4:53:45:65:4f:35:2c:
7d:4b:c5:c4:a1:a8:75:52:d2:0f:3a:b3:7e:65:de:
1a:77:b3:9d:33:2e:51:71:f6:98:36:c6:ac:00:89:
6b:68:69:2f:74:4d:a4:70:05:b2:95:4c:ab:dd:c1:
ea:4b:aa:3d:6b:39:7f:1c:7b:06:f5:21:9c:1c:1c:
51:85:ff:36:12:0e:b6:2e:72:6d:7e:51:c8:4b:79:
1b:1e:ab:b2:58:10:28:7e:52:5b:e6:81:07:b1:a8:
9f:34:c4:ee:d0:19:2f:cc:c7:bf:52:97:d4:c9:bf:
f5:a8:34:c9:7e:3e:9f:ad:46:0a:63:bd:27:c3:b9:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:34:BD:B9:23:F0:78:18:F6:47:8C:D5:54:E5:87:69:17:15:30
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:cc:94:18:a1:25:be:fa:0f:ea:b6:18:53:1d:e3:b1:93:
c7:f9:08:8a:e2:8d:9e:28:eb:79:4a:87:9d:46:92:16:34:7e:
b8:83:09:33:4c:23:9b:29:a0:b5:e2:c8:2d:da:1f:33:e4:8d:
c1:71:8d:b1:93:40:0d:99:f1:3c:c5:70:88:4b:23:75:cc:0f:
48:ec:9f:3c:2a:34:67:0b:28:b9:bb:38:16:b4:ad:26:c7:8a:
b0:13:3d:d5:1e:54:e0:45:56:ab:03:aa:a5:0c:8f:ee:14:f5:
b8:08:e0:75:5c:2c:ad:f1:73:98:ea:db:74:f0:65:34:84:a9:
43:59:65:d1:3c:3d:fc:f5:ce:bf:e5:dc:2b:9f:0c:91:b1:0c:
32:1a:ff:29:90:b8:e5:4e:cc:59:a8:ff:e0:49:8a:53:33:e8:
c2:0e:f8:7d:82:96:a2:27:c7:69:a7:0f:d4:49:87:df:fa:e7:
55:60:e3:20:c8:92:c9:cd:6a:e4:b3:e3:98:42:cb:ac:aa:2d:
42:6f:cc:9d:db:b1:c1:68:f5:3c:dc:8f:d6:a3:f3:af:14:f0:
ab:b4:4b:af:96:80:29:5e:0e:ba:4f:9a:9a:2e:86:9c:83:bc:
d2:58:fe:22:e2:5b:2a:a9:d7:b6:64:97:03:27:3f:79:2f:eb:
97:05:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:15 2026 by rpki-client