Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: 0ecpjQ0jFMGdQLLJT3U0t7x1dwYxvqQA6rCAKWg96iA=
Subject key identifier: EE:D0:07:40:90:5F:68:1E:4B:CE:CD:78:C9:1E:3E:8F:4D:52:69:25
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019DA59CFA752332D12FA76451F560279E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 44
Signing time: Sun 19 Apr 2026 12:00:21 +0000
Manifest this update: Sun 19 Apr 2026 12:00:21 +0000
Manifest next update: Mon 20 Apr 2026 12:00:21 +0000
Files and hashes: 1: 1-vmYfgEUqKIEgCFM0WvqVzZWhlI.asa (hash: cnjmn37Bymr+KZc+EQAJuebAi5xDmdRRwv+K/KGNEr4=)
2: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: Tms2XZ5f3VDpO3cYY2BkzQIckWXLmD+tOBWgTwhqUlw=)
3: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9c:fa:75:23:32:d1:2f:a7:64:51:f5:60:27:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Apr 19 12:00:21 2026 GMT
Not After : Apr 20 12:00:21 2026 GMT
Subject: CN=eed00740905f681e4bcecd78c91e3e8f4d526925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:04:d7:5e:21:6d:aa:e5:c5:6d:bb:2a:2a:
72:5e:5f:e9:67:a8:f3:77:d1:06:9a:64:2d:ff:ee:
03:16:22:2b:ba:ab:ee:23:9b:5a:ad:5c:ba:c9:9a:
8c:be:62:84:a4:00:f5:ac:e5:2a:2a:4e:61:bc:50:
41:a5:7f:0a:e2:58:fd:fc:07:a2:61:88:15:3e:10:
1f:3f:ee:7e:ac:4f:f5:92:e9:64:67:44:ed:3e:9a:
45:ff:c3:5d:34:02:02:4e:2f:77:36:bb:9d:df:b0:
4b:dc:85:21:a9:39:25:74:78:7c:39:68:80:81:a8:
63:91:44:13:06:25:29:1c:84:8d:9e:f4:63:0d:1b:
7e:0c:44:6e:fb:fc:64:f1:c9:f2:b9:cd:1c:3c:f3:
ce:bb:b6:28:dc:1d:df:c8:85:34:9d:94:03:6d:fe:
db:c7:87:ad:40:6c:52:4b:5a:56:60:20:3b:fd:21:
cf:34:af:50:c1:15:65:b2:68:d5:d6:1f:08:c8:3b:
d0:9c:35:ef:07:90:3d:5c:ef:1f:1b:54:78:4b:56:
44:d6:4d:61:e4:7f:39:78:c4:24:65:c0:61:91:a0:
10:94:b6:43:05:eb:1b:93:94:85:8e:25:c6:cc:07:
b9:1b:1f:a8:7d:11:da:7a:4e:de:e7:23:e2:58:c4:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:07:40:90:5F:68:1E:4B:CE:CD:78:C9:1E:3E:8F:4D:52:69:25
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1e:71:f6:62:34:a4:22:67:be:ec:53:b6:c1:69:64:fd:3a:
c1:77:4f:36:7e:3c:f7:bb:15:bc:a3:de:f0:85:e1:e8:7d:ee:
2b:c8:23:14:48:b2:8e:7d:44:73:31:7a:e0:21:e5:70:17:d9:
6a:4b:72:55:19:4c:67:a0:74:b8:44:b6:92:42:3e:f2:35:b4:
be:ac:12:38:b8:e4:f7:b7:91:35:81:cb:cc:89:99:2b:3f:f9:
1a:a6:49:53:a7:af:c0:9c:83:fc:da:7a:13:af:f2:49:d7:66:
da:16:b9:6c:35:0a:d0:66:fd:1f:ae:1a:71:b8:7c:6b:4b:1a:
20:24:4b:29:f4:2d:e8:69:02:b3:db:25:ef:27:5c:6b:d3:27:
15:fc:27:fa:39:54:2d:92:5d:b7:ab:c0:51:96:b9:95:c6:69:
0a:f5:cd:06:f3:92:73:d5:18:2f:75:62:03:bd:46:7c:48:80:
9a:a4:9c:63:2e:b0:27:83:1f:d1:d1:3d:66:05:a4:47:ae:80:
f0:f0:2f:cf:5c:1f:e6:e0:99:08:a2:e8:64:c7:02:ab:e4:d1:
65:14:b7:e0:43:b5:86:f3:af:8b:01:d5:95:4d:dd:cd:f1:66:
60:0d:8d:9e:aa:8a:26:ed:0a:99:f2:7d:e9:c0:72:08:3c:4a:
3e:a6:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:57 2026 by rpki-client