Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
File: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft (raw, json)
Hash identifier: VVJoH0F9iC5AaU6gzq1h/RlfEUJc5g24T9+vZe38ltI=
Subject key identifier: EF:89:9C:C3:AD:84:AC:70:C2:72:35:92:C5:F9:A3:17:90:39:4A:41
Authority key identifier: D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
Certificate issuer: /CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Certificate serial: 01A0C21F07402C4E2F39FD560EDBE9521ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
Manifest number: 01E1
Signing time: Mon 21 Sep 2026 04:00:08 +0000
Manifest this update: Mon 21 Sep 2026 04:00:08 +0000
Manifest next update: Tue 22 Sep 2026 04:00:08 +0000
Files and hashes: 1: 1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl (hash: blX8w680Zk02eE0NsjTv6NuDyqHGfBNX6XtYJlrUSBs=)
2: aLvo7jTFSqWbm8QJidyuJFZE-Mo.roa (hash: 5VnvKBLjIbUzjUAD4NNpPyYJkWIiP+uY0rq7wSA5l/o=)
3: eK3tLVpZdRV9tifBjsjw43XkaOk.asa (hash: HYTEmgVSYgGpvosVlfYdOixkNUKuyIfU5kaCs8fC4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:07:40:2c:4e:2f:39:fd:56:0e:db:e9:52:1e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a3f3d093fa2867200a43aece450d74b39096ff
Validity
Not Before: Sep 21 04:00:08 2026 GMT
Not After : Sep 22 04:00:08 2026 GMT
Subject: CN=ef899cc3ad84ac70c2723592c5f9a31790394a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:48:bc:21:90:24:4d:a5:ce:29:8c:2e:72:
c0:21:e2:fa:50:d4:b2:67:b3:ad:87:ff:ed:b8:50:
8e:6f:07:39:04:ba:a3:21:1f:67:a8:d7:a3:97:ae:
13:23:83:65:92:34:80:26:69:fe:3d:63:c6:78:5e:
59:78:e4:11:f6:3f:aa:44:62:f2:24:d9:a9:51:ed:
7d:08:7d:07:ca:db:70:7c:64:a3:79:2e:a6:05:a9:
24:90:90:e6:67:61:85:f4:cf:5b:51:c9:76:d3:b6:
f5:5b:c3:79:db:54:e9:48:09:1c:e3:7f:f4:ca:35:
88:5d:88:cc:70:46:17:61:af:55:89:95:dd:48:54:
65:74:9e:8b:64:b1:d4:3d:20:72:a0:51:a8:4c:5b:
68:02:34:1e:05:a2:cb:b5:84:c9:47:f9:79:84:f5:
29:40:63:b5:52:b7:47:69:30:57:5b:ec:1d:25:6c:
ca:c6:25:d3:b8:f1:de:99:73:6c:d2:e1:3e:a2:59:
c8:63:91:2a:d4:a2:9c:7e:39:10:b0:9d:4e:26:ed:
34:08:b2:3c:42:0e:eb:7e:ff:50:71:13:b9:5e:4c:
f1:f5:03:a2:36:a8:47:f8:0b:10:08:e8:56:d7:05:
74:c1:97:83:8c:68:b3:3a:14:25:fe:cf:8f:6a:fb:
45:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:9C:C3:AD:84:AC:70:C2:72:35:92:C5:F9:A3:17:90:39:4A:41
X509v3 Authority Key Identifier:
keyid:D5:A3:F3:D0:93:FA:28:67:20:0A:43:AE:CE:45:0D:74:B3:90:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aPz0JP6KGcgCkOuzkUNdLOQlv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3ad2b1-a4ac-4c00-a279-07b623668f3b/1/1aPz0JP6KGcgCkOuzkUNdLOQlv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:69:72:c2:ce:58:a6:08:61:a4:05:ea:b4:56:c9:a2:47:7a:
6a:a6:e1:45:4a:80:af:e2:e8:30:f2:54:c7:e9:6e:df:0f:ff:
22:15:9d:cf:c1:2d:8b:5a:4a:6e:51:9d:7e:c3:22:7b:74:25:
64:0c:e4:de:3f:07:d2:cd:b1:26:db:5f:7e:e5:10:f8:48:e1:
a3:0f:1d:19:b7:00:24:8b:ff:d0:60:9d:be:4c:bc:cc:a0:49:
bf:b5:6d:fe:fe:0c:0c:99:10:c9:69:46:91:f4:80:3e:c6:18:
72:50:d0:cf:5b:d4:91:4c:4f:bf:8c:62:9f:dd:4e:ae:d5:7b:
0a:20:50:b8:11:70:ad:d2:45:24:99:a3:40:48:10:14:84:b2:
16:a6:cf:45:3e:c1:12:b6:d1:90:65:2c:35:4c:7f:27:98:9d:
85:46:24:64:58:06:ec:90:86:14:e8:5e:4d:19:69:c3:4a:9b:
41:bb:68:0a:02:1f:c3:a2:3c:51:44:8b:16:fc:6f:9a:ec:0d:
b7:8a:52:3a:5d:69:90:05:81:ee:2d:9f:83:2c:3d:71:84:e3:
0a:15:75:9a:e2:b4:c6:ab:57:62:49:89:fd:8d:dc:c3:ad:fb:
7e:60:cb:9e:fb:64:07:9e:4e:fa:b3:8c:26:9c:c4:58:bc:34:
5e:0a:b7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:46:43 2026 by rpki-client