Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 1lEuaMcOhDKmtVYrQU9PIeGAZ26xHMhbu4ezveUn39A=
Subject key identifier: 58:54:4F:84:70:A5:0F:08:BD:4F:FA:4F:4F:DA:4F:D1:25:3D:25:45
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019EBD6C1994BF62B6573798D8FF6EC6DED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 20:00:38 +0000
Manifest this update: Fri 12 Jun 2026 20:00:38 +0000
Manifest next update: Sat 13 Jun 2026 20:00:38 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: yG5JafWoTms8eceJtaijdfdEus/mT1r0gINu3Th0Y6Y=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:19:94:bf:62:b6:57:37:98:d8:ff:6e:c6:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jun 12 20:00:38 2026 GMT
Not After : Jun 13 20:00:38 2026 GMT
Subject: CN=58544f8470a50f08bd4ffa4f4fda4fd1253d2545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:e9:51:87:ac:b1:6e:95:f8:80:63:30:8e:
68:a3:03:f5:04:82:ee:28:63:ab:4b:f1:b9:a3:2c:
a1:c1:77:9c:b9:14:25:81:0f:38:1d:2b:54:7a:25:
3b:b6:b4:88:9c:73:f3:54:09:0e:ad:07:cb:2e:a8:
ce:ee:e0:05:f1:a3:1a:5a:62:82:42:42:c1:9b:cb:
38:40:4a:a1:99:c6:c7:ba:fe:d8:8c:46:80:4c:12:
16:b6:45:3f:d4:e1:14:46:ed:85:5e:68:fd:b6:7c:
ed:2e:fb:18:22:fd:d5:96:a3:cf:18:ce:69:26:f1:
43:55:f6:d8:0b:ae:e9:e3:02:c0:cc:8b:ab:a3:f4:
71:91:b0:12:05:6d:d4:90:18:34:e7:1b:ba:66:8f:
e1:36:c9:4e:6f:ec:f7:e8:c7:cb:ee:da:fd:02:db:
9d:22:39:08:ed:3e:b5:86:f2:03:82:bb:98:ef:8d:
67:c9:a2:e3:fc:22:6e:8d:3d:f9:4d:62:0b:28:4b:
b7:43:73:5b:8a:03:03:18:78:e2:d2:c0:6c:04:6c:
8d:c9:e1:84:20:57:5a:2d:a1:2c:2d:6f:23:3a:20:
68:54:76:0f:f3:53:cd:77:20:5e:31:d7:42:af:cd:
52:77:f3:1c:ac:ce:cf:5f:83:8c:85:2b:f4:7a:ad:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:4F:84:70:A5:0F:08:BD:4F:FA:4F:4F:DA:4F:D1:25:3D:25:45
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:77:0c:94:56:3e:e8:6d:ff:3c:71:8c:8e:3f:01:5e:22:
dc:a4:ff:ab:21:3f:2e:9f:b6:cc:01:b6:3c:68:48:22:b5:f1:
c9:9c:2b:41:8e:05:12:ad:de:f8:19:9a:0f:46:40:cb:83:18:
f8:6e:2f:db:7d:a6:c8:71:8a:c9:d0:61:8f:fc:bd:8b:bf:e6:
53:cd:4f:40:16:89:b3:44:62:e3:6b:38:11:4a:5e:2e:ef:b6:
c0:64:ed:6b:3c:c6:d2:bf:9c:04:ac:d9:c9:1c:3e:8c:af:1e:
4f:33:46:c7:bc:f4:69:2c:6f:a7:16:a7:57:fa:96:12:06:0f:
a8:88:cd:6b:72:25:e3:55:3e:a8:ad:1b:16:8e:97:b5:3a:37:
62:5a:26:18:8d:dd:bb:63:00:43:18:4c:a8:89:43:c0:a1:02:
46:cb:a2:66:6d:22:f0:41:e0:f7:13:3a:59:eb:f1:ae:33:63:
14:9b:3a:14:4d:96:da:de:22:45:e7:c4:a3:88:58:e5:c1:3a:
bf:9d:5f:23:09:82:c6:90:24:7f:b8:b3:37:04:d8:bd:74:90:
3f:e0:29:f6:42:10:1c:83:e1:10:43:83:0d:6f:e0:dc:19:97:
6b:76:9f:35:17:c0:4f:59:c8:f0:af:b6:66:08:72:67:b3:ea:
a7:b9:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:11 2026 by rpki-client