Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: n8LYRNymHtPwanzOxZo6weyUioDPLrhzuno75wjd8n8=
Subject key identifier: 93:80:96:BB:99:FD:5B:49:C0:EF:18:C0:BE:A8:DE:2D:19:CB:F6:D5
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 019EBE7F431344EA117947EF9FB5BC91692F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: D6
Signing time: Sat 13 Jun 2026 01:01:11 +0000
Manifest this update: Sat 13 Jun 2026 01:01:11 +0000
Manifest next update: Sun 14 Jun 2026 01:01:11 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: kKVQ7a5Hstba2ZvRa/HM6tGdVJo4tNg+nGzLvqqy0ew=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:43:13:44:ea:11:79:47:ef:9f:b5:bc:91:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Jun 13 01:01:11 2026 GMT
Not After : Jun 14 01:01:11 2026 GMT
Subject: CN=938096bb99fd5b49c0ef18c0bea8de2d19cbf6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:0d:72:37:4d:54:2c:c2:f5:05:bc:34:7a:
27:c0:5e:af:2d:e0:92:62:d0:73:6f:a2:02:9c:2c:
05:b8:fd:14:45:9b:50:b5:4e:06:7b:20:f0:d1:ed:
13:52:c6:db:b0:b1:d2:b8:67:b8:0f:72:df:d4:0d:
d7:52:f1:51:01:3a:0e:0b:ac:8a:87:8a:cb:11:5c:
cd:59:21:4e:f8:6c:96:53:00:7f:52:1f:46:2e:76:
5b:e0:29:9e:53:2d:41:1a:26:fd:52:b5:13:e7:6c:
8b:72:17:cb:fd:5f:8e:a6:1c:2d:11:59:a1:ca:d2:
2d:df:c3:ce:0b:0f:09:22:16:53:ca:3e:d2:e8:e2:
02:3e:8e:87:89:f0:a7:2e:46:cd:7c:bb:60:d8:0b:
11:a4:48:d9:8a:c6:5b:ce:28:ab:98:23:47:92:b5:
4c:c2:4b:d1:97:2a:c8:82:6f:c2:e4:4f:df:b1:7e:
a7:a4:e1:c8:d1:6c:c1:c1:7c:c6:e8:32:bf:f9:cf:
91:5d:7c:98:6b:66:18:57:d7:77:c5:92:f2:54:1f:
96:57:3f:c0:37:37:47:e7:16:07:85:ff:c9:b3:58:
2b:09:7c:85:59:6e:ba:47:83:94:36:9a:6a:ee:02:
cf:e8:5b:6c:38:dd:48:1b:f4:66:10:64:23:12:47:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:96:BB:99:FD:5B:49:C0:EF:18:C0:BE:A8:DE:2D:19:CB:F6:D5
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d5:e5:01:84:c8:0b:b5:40:4b:86:e9:7a:c5:54:08:91:19:
03:49:ab:d0:75:21:fb:5c:5b:bd:fa:13:78:b1:68:64:5b:68:
ab:64:4e:81:57:17:5b:62:74:e2:82:57:64:64:bc:a6:67:6e:
df:aa:3b:67:c5:32:ea:4d:f4:5a:c5:a3:d9:a2:70:fa:0f:5d:
59:32:09:17:33:ca:61:28:16:d4:31:00:c8:27:90:ed:0b:ac:
89:0a:bc:42:77:5c:c0:e7:07:e7:a4:07:87:da:f0:82:8b:06:
37:ef:15:8e:3a:eb:9b:b9:d2:05:5a:01:bb:da:02:03:1f:9d:
9f:c1:14:a8:ef:27:12:62:88:04:ee:9c:d0:a2:b1:f5:72:08:
b2:f8:b0:50:c3:f4:5f:61:95:f9:8f:7b:72:e9:54:8c:38:1a:
9e:03:e5:c9:60:a9:37:ae:0f:26:ee:1b:0b:76:e3:f8:39:8d:
e9:89:1f:10:e5:50:09:a3:74:a7:ae:e2:d1:a5:0c:6d:b0:bb:
6d:b7:1a:96:f2:42:7a:13:a2:4b:2e:70:07:6a:bf:3a:e2:d1:
bb:fd:82:be:68:43:b1:c7:b0:29:a5:bd:85:b6:75:0c:dc:6c:
9a:d3:18:53:75:40:af:70:80:c6:6c:a9:11:da:2a:5b:ab:26:
23:64:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:24 2026 by rpki-client