Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: d15rvrS7fJkOuQ7V+O+McTrn4LZKgVNBHbmcmyg8Q3U=
Subject key identifier: F2:1C:A7:60:AB:35:06:51:A0:4F:E3:0E:AE:20:73:F2:BC:82:D1:F9
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01A0C2FB78015165C93A9E8B8A4F93781522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 08:00:55 +0000
Manifest this update: Mon 21 Sep 2026 08:00:55 +0000
Manifest next update: Tue 22 Sep 2026 08:00:55 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: Mr/gTYzmudOJGYtgnxxPCJfyo/wSAJkIHK/SfaLH/+4=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:78:01:51:65:c9:3a:9e:8b:8a:4f:93:78:15:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Sep 21 08:00:55 2026 GMT
Not After : Sep 22 08:00:55 2026 GMT
Subject: CN=f21ca760ab350651a04fe30eae2073f2bc82d1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:27:c1:fa:a8:60:93:98:7a:75:1f:e8:12:
1f:52:ea:d0:16:69:65:ea:f9:93:de:34:82:2e:66:
4d:45:f4:33:df:81:88:26:e2:b7:03:5d:f7:c9:eb:
24:cc:ce:a6:ae:8b:aa:f9:38:61:cc:e0:ad:03:79:
3c:ec:71:f6:01:3e:2f:e1:0a:ab:03:ba:e9:0a:52:
49:0d:a2:14:02:6c:e8:78:0d:5a:93:a1:d6:3c:44:
8c:44:91:bc:93:85:7b:ef:0d:99:60:d8:b6:41:b1:
8f:f9:1f:be:e4:36:14:68:fa:2a:80:01:21:37:7b:
91:4b:a1:1f:64:e9:77:0c:82:4a:02:02:53:85:67:
4c:14:0c:d7:a2:78:13:9e:1f:77:16:7e:e9:3f:96:
2d:0b:2f:78:a2:35:f7:0a:b0:30:27:64:3e:9e:1d:
25:68:88:f8:3a:23:34:e1:4a:21:52:3e:cd:d7:a0:
1c:1c:96:13:c8:47:3d:3a:09:25:90:dd:d8:ce:b5:
e6:9b:ca:73:59:5f:73:ca:61:9f:03:06:8a:b2:92:
f7:4f:1c:37:1b:1b:8c:d8:56:5d:59:a3:7d:c5:b3:
11:c3:f2:06:dd:66:63:ae:c0:b1:74:40:0e:98:2b:
f9:ab:81:74:06:b3:c1:dc:96:8b:9c:c6:0b:0a:ca:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:A7:60:AB:35:06:51:A0:4F:E3:0E:AE:20:73:F2:BC:82:D1:F9
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3c:ac:60:e9:bc:a9:ad:d8:66:3e:ee:cf:05:04:ee:c8:75:
22:db:e5:c7:fc:4f:28:ef:6a:27:74:f8:98:55:a0:56:f2:24:
99:45:d6:56:c9:20:39:aa:0f:ba:0c:a7:9d:a7:3f:4f:d2:92:
a6:bf:34:d5:f7:65:30:62:ad:a7:c0:72:dd:30:06:2b:3a:d0:
7b:6f:e3:47:f1:4b:c6:15:44:82:8b:24:ee:58:e9:ec:7c:57:
1e:ac:5b:c3:95:c0:42:c7:23:69:35:df:ac:de:d3:03:0d:be:
b8:83:f2:ce:f3:71:41:3d:c4:be:09:79:60:49:c9:b0:58:62:
82:55:96:e1:28:f2:39:b3:1f:2f:58:b6:09:55:8b:23:0b:17:
43:b7:b4:93:82:f9:d6:8e:6c:cd:ab:d2:e4:a9:44:24:b8:2a:
ee:fd:79:92:97:25:f6:f4:7b:54:69:9f:69:97:25:31:dd:05:
c6:5d:96:9e:ae:dc:9e:9b:32:de:e5:49:1a:89:a1:f5:de:ee:
60:4c:fc:d6:34:39:a7:7d:00:a5:ed:ba:98:9c:4f:71:e4:28:
90:ee:4e:41:4e:53:33:b2:57:75:58:f5:b7:e9:09:92:7f:79:
95:1a:42:09:ad:e5:61:ab:f7:81:e2:e6:81:04:03:3c:7f:c5:
b5:55:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:01 2026 by rpki-client