Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
File: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft (raw, json)
Hash identifier: 1m5jVSd9lPKi8VQIxrPsZ7+lyhBG0q4aIfahVyDEmRk=
Subject key identifier: 4D:A2:81:1E:56:97:F6:C6:70:90:E0:41:C2:BF:E2:A7:CC:F5:12:61
Authority key identifier: D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
Certificate issuer: /CN=d5a42a0ffd0274c655070609549e6420b63284df
Certificate serial: 01A0C66AC3FED863900D52EE263AAFC33977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:20 +0000
Manifest this update: Tue 22 Sep 2026 00:01:20 +0000
Manifest next update: Wed 23 Sep 2026 00:01:20 +0000
Files and hashes: 1: 1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl (hash: BCnrCcxZMxn5PjIf0ErStBEYV6vAr2GRTfVq9ni+yz8=)
2: FCEeIR0U57Dc4ziNJx71ZqeKh9Y.roa (hash: vbWMXzKS4D5+2q+2t821SHbD4J+yqJXDqLxiG6blyO0=)
3: sAks3DmPZ6CqoQlRY3bGSvOGHik.roa (hash: Ee7Zl0TzS27Mz1IwdlPhsbhVTUojNkqd2MBy8kTqIm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:c3:fe:d8:63:90:0d:52:ee:26:3a:af:c3:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a42a0ffd0274c655070609549e6420b63284df
Validity
Not Before: Sep 22 00:01:20 2026 GMT
Not After : Sep 23 00:01:20 2026 GMT
Subject: CN=4da2811e5697f6c67090e041c2bfe2a7ccf51261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:97:78:5a:89:7c:24:66:9b:30:8d:2d:d7:
e5:c1:c1:95:e0:51:c2:a3:18:92:c9:16:e7:7b:db:
26:5a:89:28:fd:ac:87:2b:91:3e:b2:b6:9f:11:eb:
ad:99:40:e8:f7:81:29:59:8b:29:1a:60:89:3f:2f:
15:c6:27:ab:aa:9e:67:10:90:d1:92:32:f4:d6:76:
7a:31:a5:3c:48:c9:0b:aa:63:63:9c:d1:b9:21:5f:
be:34:20:c0:b6:36:0f:a6:a4:9c:9c:58:7f:07:dd:
d7:50:91:ea:a3:1e:be:f8:d3:e1:11:d8:a5:ba:7b:
64:55:1a:94:db:68:0a:4b:ce:f4:e5:19:a8:8d:60:
12:f7:b5:8a:9e:d6:44:bb:5b:e0:a1:b3:db:6a:8e:
7c:ef:10:c1:49:3a:0f:4e:53:03:b3:cd:d6:09:dd:
0c:05:1a:e4:7c:d0:4f:4b:a9:9b:01:fb:cf:86:c0:
b0:a0:b3:b6:95:d1:ee:c5:9c:26:54:0e:db:0c:bb:
3f:9c:e1:0b:92:7a:11:87:ad:77:61:a6:57:c2:67:
67:9a:99:f3:09:de:72:b5:94:d2:66:9b:75:70:6f:
d0:03:74:cf:04:1a:e0:a0:0b:8f:c4:97:3f:c0:17:
c4:d0:fd:0e:5d:23:ee:14:cd:a6:d1:12:b3:22:3b:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:81:1E:56:97:F6:C6:70:90:E0:41:C2:BF:E2:A7:CC:F5:12:61
X509v3 Authority Key Identifier:
keyid:D5:A4:2A:0F:FD:02:74:C6:55:07:06:09:54:9E:64:20:B6:32:84:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aQqD_0CdMZVBwYJVJ5kILYyhN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/1aQqD_0CdMZVBwYJVJ5kILYyhN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:32:49:42:a2:4a:f8:e8:ca:c1:fa:30:14:13:a3:f0:c2:de:
9c:3f:db:e9:81:3a:0e:19:db:79:56:be:83:cd:79:7f:42:a3:
0e:66:45:67:bd:6c:38:93:4f:78:6c:6f:9c:38:62:07:1b:29:
b4:b3:a6:79:d8:90:bf:91:df:c1:6b:ce:da:47:7c:a9:17:a2:
c9:14:01:9b:eb:26:3c:ca:2e:0b:c7:97:d5:da:ad:01:1c:8e:
6e:db:c2:7e:98:94:cb:57:f9:73:13:8e:fd:13:df:f6:54:48:
c7:05:83:a9:c8:a9:e9:89:17:90:c5:da:04:37:b5:e5:61:e7:
96:31:46:66:99:51:2b:41:5c:7b:3c:53:15:ae:e7:f9:f2:64:
a2:15:44:5c:70:1d:49:86:32:ee:86:25:33:92:31:48:8d:a1:
4a:e2:4a:c5:68:11:96:d6:00:86:39:91:97:b3:af:81:05:35:
75:5a:27:52:2a:23:db:bb:e6:28:e3:61:f3:11:27:3e:c8:43:
7a:54:85:57:67:c0:97:9f:1b:fd:ba:73:29:ba:91:40:bc:0a:
f9:91:c8:ad:86:ef:67:6f:c8:2a:47:71:a7:55:96:63:76:8f:
8b:e1:77:0f:bd:2c:70:cd:0a:cc:9d:14:c1:29:d7:a1:c7:61:
b8:6c:25:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGasP+2GOQDVLuJjqvwzl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTQyYTBmZmQwMjc0YzY1NTA3MDYwOTU0OWU2NDIwYjYz
Mjg0ZGYwHhcNMjYwOTIyMDAwMTIwWhcNMjYwOTIzMDAwMTIwWjAzMTEwLwYDVQQD
Eyg0ZGEyODExZTU2OTdmNmM2NzA5MGUwNDFjMmJmZTJhN2NjZjUxMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMCXeFqJfCRmmzCNLdflwcGV4FHC
oxiSyRbne9smWoko/ayHK5E+srafEeutmUDo94EpWYspGmCJPy8Vxierqp5nEJDR
kjL01nZ6MaU8SMkLqmNjnNG5IV++NCDAtjYPpqScnFh/B93XUJHqox6++NPhEdil
untkVRqU22gKS8705RmojWAS97WKntZEu1vgobPbao587xDBSToPTlMDs83WCd0M
BRrkfNBPS6mbAfvPhsCwoLO2ldHuxZwmVA7bDLs/nOELknoRh613YaZXwmdnmpnz
Cd5ytZTSZpt1cG/QA3TPBBrgoAuPxJc/wBfE0P0OXSPuFM2m0RKzIjsqawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2igR5Wl/bGcJDgQcK/4qfM9RJhMB8GA1UdIwQY
MBaAFNWkKg/9AnTGVQcGCVSeZCC2MoTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFRcURfMENkTVpWQndZSlZKNWtJTFl5aE44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvMWFRcURfMENkTVpWQndZSlZKNWtJTFl5aE44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvMWFRcURfMENkTVpWQndZSlZKNWtJTFl5aE44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDJJQqJK
+OjKwfowFBOj8MLenD/b6YE6DhnbeVa+g815f0KjDmZFZ71sOJNPeGxvnDhiBxsp
tLOmediQv5HfwWvO2kd8qReiyRQBm+smPMouC8eX1dqtARyObtvCfpiUy1f5cxOO
/RPf9lRIxwWDqcip6YkXkMXaBDe15WHnljFGZplRK0FcezxTFa7n+fJkohVEXHAd
SYYy7oYlM5IxSI2hSuJKxWgRltYAhjmRl7OvgQU1dVonUioj27vmKONh8xEnPshD
elSFV2fAl58b/bpzKbqRQLwK+ZHIrYbvZ2/IKkdxp1WWY3aPi+F3D70scM0KzJ0U
wSnXocdhuGwl6A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:52:56 2026 by rpki-client