Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: vp0nShZ51EuCCWKgenbQp2tNPclWXewGQhtQjzpeLeY=
Subject key identifier: 53:FF:3E:50:1C:50:B5:C6:E4:94:1B:79:78:A9:26:16:BB:EE:50:9C
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01A1DEDE2D3FB137D9C51E31D46908B3CBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 11:01:04 +0000
Manifest this update: Sun 15 Nov 2026 11:01:04 +0000
Manifest next update: Mon 16 Nov 2026 11:01:04 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: ujkvBVDNEVwJF57o/nvu+V991Q9xECuanDrN27olSMc=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:2d:3f:b1:37:d9:c5:1e:31:d4:69:08:b3:cb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Nov 15 11:01:04 2026 GMT
Not After : Nov 16 11:01:04 2026 GMT
Subject: CN=53ff3e501c50b5c6e4941b7978a92616bbee509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:8d:de:36:12:42:d8:b3:f7:64:8c:b1:71:
55:1a:a4:ff:b2:8d:a2:48:86:2c:43:9c:fb:0e:4e:
56:a6:34:15:6f:bd:e0:59:1d:5c:6d:7e:35:4d:62:
f6:e4:fb:0d:86:a0:76:d3:d6:4c:94:f6:d0:ae:a7:
37:10:bf:22:42:b6:bf:9d:9d:bf:f7:0c:2e:2e:d4:
dd:70:f6:f4:0b:dc:0a:a5:5f:e1:1d:91:4b:7a:01:
04:05:27:ca:81:b5:00:64:08:ce:c6:3b:3b:9d:db:
63:f4:36:90:2b:24:74:03:fb:52:50:5a:80:21:03:
0e:36:41:f8:7b:93:89:8c:0f:73:55:a7:c3:49:0b:
7f:20:65:cb:2c:07:4a:e4:53:a5:ea:a3:35:6f:85:
1c:cd:1d:5e:52:94:54:32:f8:b4:04:16:31:7e:37:
f9:28:b2:03:88:cf:75:ee:03:da:e2:36:17:25:42:
9e:a9:a4:12:c4:a2:cd:0a:45:f8:93:5d:d0:4a:84:
9c:c0:53:b8:64:dc:29:b4:b4:cf:3b:1b:01:84:ff:
d7:01:05:85:5c:12:1c:85:06:b2:3d:69:cd:4d:d3:
5e:f4:27:d6:71:74:7f:75:7c:36:07:6c:d3:6f:54:
8b:86:dc:95:17:0d:98:88:b0:f6:d4:93:54:08:d9:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:3E:50:1C:50:B5:C6:E4:94:1B:79:78:A9:26:16:BB:EE:50:9C
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:88:7e:b3:b7:e9:8d:68:87:41:7a:1e:aa:08:25:cb:bb:
81:24:ad:96:70:6b:87:85:3b:34:c5:55:5e:9d:6c:0b:af:22:
24:fc:94:ad:75:6b:9c:03:7c:89:81:d0:ee:8f:f4:c4:59:fe:
64:dc:ef:96:bb:59:d8:02:07:9f:c5:64:2a:9b:d0:82:54:b9:
cf:be:53:c1:d6:82:fd:d5:75:e5:1d:bb:31:91:b1:66:17:05:
8c:88:d1:ba:97:dd:0b:87:db:14:32:78:ea:80:87:ce:ad:7f:
fd:30:ee:5b:bd:4b:73:1f:2b:8c:0c:9c:58:7a:6f:e8:7e:40:
86:e8:5c:96:9c:0a:58:17:c1:33:7e:e9:86:11:98:28:85:26:
44:75:4d:34:3f:c1:bd:88:6b:ea:6e:cb:48:9a:0e:9f:fb:c1:
2d:93:bf:8d:e6:7a:f6:ab:af:28:8a:c2:79:16:f4:48:8e:e0:
f3:b1:8d:52:08:e0:13:88:be:cb:58:1d:c5:64:25:9f:f3:25:
be:47:a8:5f:6d:8a:0c:50:e9:42:f7:a9:93:80:0f:b9:a2:e4:
c7:ec:ca:6c:27:ff:5e:ff:bf:5d:7e:4b:3f:39:9c:b1:3b:35:
68:c6:9c:5e:e3:db:9a:c6:d5:16:d5:19:5f:cb:74:7a:00:12:
70:95:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:24:22 2026 by rpki-client