Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 4NLW4SJ+QFGihvHvOLrzYAGrxVarqA4BkPWlHL4C8p4=
Subject key identifier: 40:86:BC:CB:93:F1:44:51:CE:8F:A3:E3:D7:E9:8A:0E:AB:3A:50:49
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019DA3791C0091782EEAE14F703C6AA9F65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:56 +0000
Manifest this update: Sun 19 Apr 2026 02:01:56 +0000
Manifest next update: Mon 20 Apr 2026 02:01:56 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: /GY8MGZo6PHjt5BX4MVh7PRBweChFAJfDT/boKZ1sHk=)
2: d-Vj4GQJiqWPAhJ2S_9WJs-V0iY.roa (hash: Q3tKs3eY3Zo0tWqBxw95FI72mGqjo+ppjib/b057VZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:79:1c:00:91:78:2e:ea:e1:4f:70:3c:6a:a9:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Apr 19 02:01:56 2026 GMT
Not After : Apr 20 02:01:56 2026 GMT
Subject: CN=4086bccb93f14451ce8fa3e3d7e98a0eab3a5049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:35:96:dc:6a:b1:fe:80:88:40:5c:48:6a:
cf:4d:ef:11:b6:a3:cc:eb:a9:6e:8c:96:8a:52:90:
c9:0d:97:a1:36:c3:3c:6b:b1:44:5c:26:bc:b0:00:
3e:50:4b:d0:07:a4:65:2b:30:af:be:c8:8e:c5:e6:
31:8f:b8:46:7d:a2:96:25:64:d2:f6:cd:70:04:de:
ae:18:56:bf:d2:c3:f6:79:f6:ab:01:20:13:7c:33:
7f:30:99:76:a1:0f:4e:c4:f2:14:12:5f:a5:c7:f2:
45:a9:2d:0c:3f:eb:7d:b7:97:a3:23:6f:a6:50:33:
be:e2:a0:f4:9a:9d:f7:80:02:2a:76:6f:83:89:c6:
ea:43:8c:12:86:08:01:d3:45:5f:18:4a:09:6a:01:
31:8f:83:83:c3:df:5f:01:92:ff:86:12:f2:38:4c:
27:09:b2:ed:41:f9:0d:b5:da:fa:99:36:21:2c:f0:
75:cf:86:b6:ba:0f:50:54:1f:95:4c:a0:0a:17:80:
d9:4b:28:f7:78:8b:0e:b3:f5:1d:a3:64:4a:4e:cd:
63:25:ef:57:3a:20:30:fb:ff:0b:35:4a:18:c0:a5:
65:12:ed:8f:f4:22:b4:ab:d7:6d:49:ae:e4:68:d6:
9d:37:30:01:2f:c0:c1:e6:59:f1:68:ff:4b:07:28:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:BC:CB:93:F1:44:51:CE:8F:A3:E3:D7:E9:8A:0E:AB:3A:50:49
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:08:69:b6:a8:4b:d9:08:81:11:9d:e2:50:17:a1:99:f1:a6:
c8:7b:87:76:86:a4:26:b1:44:a5:99:96:d2:1c:41:39:8f:30:
d4:32:8b:ca:61:94:ec:ff:6b:cf:95:32:65:10:a5:3a:ca:e2:
29:2b:d7:12:20:bc:9c:89:5b:0e:0a:74:d2:8f:26:13:f1:67:
98:75:3a:00:96:fd:db:25:4b:8a:2f:8d:83:82:95:f6:69:dd:
32:9a:8f:2e:5d:c5:bb:65:6c:b7:a2:dc:7f:83:03:15:72:40:
37:ad:d9:3e:d5:fa:fc:21:bf:c3:fd:a8:d1:59:63:bc:7d:da:
b5:81:ae:eb:b6:ed:0d:dd:5f:72:7a:19:9f:e0:f1:59:92:e3:
84:51:d7:a2:78:60:75:c1:c4:93:98:34:6a:c8:14:27:79:5b:
07:d5:d7:5c:e0:b8:bd:eb:e3:bf:85:0a:ae:a5:d4:46:e0:d8:
11:44:41:29:61:c7:80:2c:3b:f0:2f:00:ac:d0:56:b3:ba:87:
1c:25:c1:00:46:5f:7a:eb:0c:2e:f1:96:f8:d8:3f:55:16:f8:
c2:95:fd:00:20:62:73:62:71:8c:22:30:b1:b2:97:2d:b8:9f:
f5:90:3e:76:3f:70:88:79:a4:3b:7a:0d:23:46:b7:3a:f9:36:
c0:c0:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:31 2026 by rpki-client