Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: aCEtalNAd8qDuN/zOBf8DCsKFwl7ye+zwesp66+nufk=
Subject key identifier: 7D:A9:5A:12:51:32:56:43:39:8D:F4:47:61:DA:C3:D2:43:6A:DB:77
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019CAA58EBDF2F9B890206C25236D5D5ABE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: Kin4bk3dUUebFx6VP7GjWJf5xIB3keP2qJE1tpk1mzs=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:eb:df:2f:9b:89:02:06:c2:52:36:d5:d5:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=7da95a1251325643398df44761dac3d2436adb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:1e:f0:ec:d3:f8:09:1c:f2:4f:45:9c:32:
ff:25:05:11:03:54:1d:93:d2:bb:2c:5f:68:7b:ad:
0f:bb:0e:8a:9e:e6:96:84:18:72:b5:a4:26:5d:0a:
58:b8:f4:8c:7b:77:12:94:94:36:dc:a7:51:c6:7f:
dd:df:ae:41:d2:83:57:86:47:62:7f:f9:ad:64:89:
d8:34:89:a4:d5:0e:2b:c5:8d:4e:68:cc:48:c7:86:
9d:ff:c4:97:7d:72:32:8c:f0:35:b0:65:d6:d1:31:
49:e9:62:89:fd:c1:b1:7b:02:89:ca:75:1c:6e:64:
28:5a:db:0e:ad:25:72:5b:f1:59:43:52:fd:6e:04:
8b:31:2d:78:ab:0c:d6:d7:25:16:0e:96:a7:ec:6a:
8d:af:b7:fe:34:00:46:72:c4:9a:cd:c4:0c:92:c2:
3c:53:92:ee:d8:d2:59:d8:61:1c:c6:58:d8:42:b4:
a9:ae:a2:77:64:b4:c9:a8:a9:f4:29:d0:45:58:6a:
62:ea:54:93:6d:52:d7:b6:b1:e6:7d:fc:12:fa:9d:
f3:1a:6e:a8:cd:5b:40:4f:4a:73:e7:54:2d:b8:80:
8d:b9:e8:9e:35:47:63:99:2f:53:3a:9f:19:a5:8e:
3b:c4:4b:86:37:7b:94:2a:3d:c5:5d:48:ad:53:a9:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:5A:12:51:32:56:43:39:8D:F4:47:61:DA:C3:D2:43:6A:DB:77
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:3d:c7:60:c7:2a:fb:b8:45:43:a4:86:58:b2:aa:8b:c6:
a7:5f:a2:0a:56:00:95:7a:50:48:e4:d7:f9:53:0d:b9:a2:c9:
c0:b5:30:78:ea:dd:7f:9e:64:80:21:ea:91:07:07:f2:c2:26:
9e:50:31:c8:b6:79:8e:0b:fc:34:54:ea:55:d9:37:8b:ae:ae:
4b:d7:63:90:29:4d:9e:a9:62:2f:f4:eb:ad:da:3f:38:e9:be:
20:46:7e:94:bd:b9:f5:e9:39:5a:ff:fb:ea:51:c8:5d:af:82:
62:56:2a:69:ca:e3:ec:44:c8:f2:ec:6b:bf:a1:f8:74:c8:89:
5c:a3:65:6e:bf:0b:3a:76:a8:d9:28:b5:a1:4c:18:3e:61:03:
10:06:48:da:8c:0c:b9:96:1e:10:a0:89:7f:94:2d:b4:8e:e5:
e5:7f:ab:6c:19:51:2c:59:30:35:c4:6c:a3:00:fc:56:75:ed:
af:54:36:e1:12:cc:24:b2:b7:11:b4:20:a1:ea:11:69:4b:ac:
43:2e:ba:4f:56:0d:74:c1:62:c5:04:bf:d2:81:09:e9:39:f8:
68:2f:4f:e9:fd:fb:9a:2f:f1:bb:6c:74:43:f3:80:44:ac:ca:
ad:d3:c5:59:c9:26:49:a0:5a:e9:f9:1d:3f:22:bf:5a:d7:6d:
a4:df:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:46 2026 by rpki-client