Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: q54kWdGESdn1nA3fhKpciHpA0XQk/n1OxDYZKoC5hzw=
Subject key identifier: 96:6C:02:82:F3:3E:51:45:D2:56:6E:0C:C5:CE:AC:DF:35:AC:8B:B6
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019EC06E3BF3205EFD8BC335A98E79A8274B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: D7
Signing time: Sat 13 Jun 2026 10:01:50 +0000
Manifest this update: Sat 13 Jun 2026 10:01:50 +0000
Manifest next update: Sun 14 Jun 2026 10:01:50 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: DW/HDPkUsVunLY0GTIFD/3N0SAnt26PeKYe/e+h/7O4=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:3b:f3:20:5e:fd:8b:c3:35:a9:8e:79:a8:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Jun 13 10:01:50 2026 GMT
Not After : Jun 14 10:01:50 2026 GMT
Subject: CN=966c0282f33e5145d2566e0cc5ceacdf35ac8bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:09:f0:52:55:39:81:f6:f4:66:8d:ae:c1:
e7:89:aa:26:91:8e:12:fd:d4:69:69:60:86:16:a5:
a3:12:04:86:87:20:dd:83:45:14:e7:a3:d4:22:dc:
1f:69:01:1a:35:8b:dd:fd:c8:a2:67:09:14:ac:30:
88:96:d9:13:fe:4a:6f:b2:1a:cd:14:be:64:dc:5e:
ae:ee:5e:5f:e1:80:e6:56:1d:87:7a:76:13:ab:42:
cb:29:a5:0b:d6:2a:00:f4:9e:8d:b4:6a:4a:f0:f8:
3c:fa:f9:8a:e2:b4:ab:9f:38:cd:d5:e7:6a:b3:c3:
f6:a0:b8:d6:42:00:b8:2d:2a:03:cc:76:79:7c:7e:
ea:16:dd:ee:2f:0e:87:e1:27:1a:48:65:4d:56:90:
7a:39:3b:b0:97:9e:b5:4d:1f:e0:a7:07:8b:25:b1:
3c:2b:bf:d4:4c:cc:1d:02:69:25:1e:45:3e:1e:1f:
79:ff:d1:e1:9e:a7:e2:23:ed:79:86:8c:42:b9:d7:
d9:3d:61:be:dd:2c:d8:65:47:b5:1a:92:5d:3e:23:
a6:58:63:af:28:ef:a9:d0:66:e6:0d:22:05:bf:ef:
30:67:a8:7a:57:18:55:2b:69:cd:be:a8:0a:22:92:
53:0b:26:af:ce:79:06:29:34:6c:95:92:a6:c3:a2:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:02:82:F3:3E:51:45:D2:56:6E:0C:C5:CE:AC:DF:35:AC:8B:B6
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:98:e0:3b:22:82:60:75:8a:aa:60:1b:f3:cf:9f:06:d5:e8:
16:92:1b:bd:42:fa:19:98:1e:2d:6b:1a:d1:d2:89:10:87:17:
86:3a:81:df:8b:93:a2:cf:cc:b6:0a:e1:08:98:bd:46:93:d6:
41:68:52:11:82:8f:75:5b:20:f4:35:92:62:48:7e:89:4a:e1:
32:50:ba:bb:e5:e0:00:4b:0f:4f:a6:92:56:4c:40:f1:5f:01:
ce:5e:a8:ae:62:2c:c9:1b:98:31:79:a3:b2:58:e1:60:5d:9a:
b2:1b:c1:99:01:27:cd:78:6c:c4:5e:56:88:29:21:23:81:f9:
4d:28:47:63:74:09:ba:27:99:f1:4d:63:8d:60:0f:23:87:34:
7f:71:e3:58:c3:ad:89:9f:f0:be:b5:13:d5:e8:30:14:c5:e1:
92:da:49:ee:17:f6:d9:f2:4b:0d:74:b8:f1:24:79:d4:a3:46:
51:8a:2d:54:b1:30:ec:08:ee:49:5a:d5:b2:30:0e:98:9d:70:
65:39:4f:a0:60:d2:be:f5:7d:d0:72:b9:80:d2:35:8a:2c:db:
56:75:35:8e:14:4c:33:96:92:68:70:9e:f1:76:6c:3d:d4:d6:
54:5e:a3:39:c9:83:7f:32:cd:af:2b:f9:f5:22:7d:18:6a:74:
40:b4:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:38 2026 by rpki-client