Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: uMfVKc0L6YpbikY+fcQJ24BZorCek/yi9RY5GhBHFL8=
Subject key identifier: DC:02:98:42:28:F3:AE:36:A9:20:A5:95:E4:D9:E5:E1:36:0A:10:7E
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01A00213EF117A805988F80948104FCF83D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0AFF
Signing time: Fri 14 Aug 2026 21:00:55 +0000
Manifest this update: Fri 14 Aug 2026 21:00:55 +0000
Manifest next update: Sat 15 Aug 2026 21:00:55 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: GXSEr8GKwY8thnYhdJsXEiIZSMb9LXhtIP9hI8517xI=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:ef:11:7a:80:59:88:f8:09:48:10:4f:cf:83:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Aug 14 21:00:55 2026 GMT
Not After : Aug 15 21:00:55 2026 GMT
Subject: CN=dc02984228f3ae36a920a595e4d9e5e1360a107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:9b:73:2d:3c:fa:05:3f:7b:8a:93:3c:c7:
b2:b1:8c:f3:8d:7f:2f:c1:65:b4:fa:c8:5a:9e:ff:
4f:f6:d7:16:c0:ff:3b:70:17:9a:2f:1e:55:4b:cf:
28:32:71:68:9e:70:4d:3e:87:74:0c:37:0f:f2:56:
31:ba:1a:f4:a3:97:4f:c1:ee:35:0f:1e:fe:de:4c:
8f:72:55:82:2d:0d:6a:0c:11:32:75:e4:2e:b7:61:
49:76:90:20:a1:e5:67:69:8d:3b:38:6d:9e:7e:b3:
6e:ee:a1:ec:c6:8a:ce:5b:f9:4c:12:7e:92:59:58:
b0:24:b1:07:56:91:5f:f6:e9:ed:0a:65:5e:3f:72:
44:7b:be:0e:25:72:6c:1a:9c:75:26:ea:85:cb:e1:
ce:3e:aa:8b:34:66:3f:40:b2:63:cf:af:ed:3d:69:
ed:a5:83:9c:bb:bf:17:4f:73:ec:6d:93:20:00:c1:
c5:08:60:b2:b3:29:77:e1:f8:56:12:cc:d2:f5:68:
d1:a9:0a:ad:50:00:eb:bc:a0:07:92:f5:f9:c8:a5:
4a:1b:b8:ca:28:63:e7:49:58:00:3e:b3:4e:d1:b5:
2a:57:8f:93:5b:4c:0c:bd:e3:9b:a8:a3:aa:48:5f:
dc:a5:c7:7b:26:44:09:0d:80:1c:cc:69:ab:6a:48:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:98:42:28:F3:AE:36:A9:20:A5:95:E4:D9:E5:E1:36:0A:10:7E
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:3a:d4:15:d6:37:5a:fc:1e:b7:be:f5:1d:ea:e6:8c:4a:
47:78:ca:c0:14:3e:ee:41:3c:71:2f:ca:ae:d0:34:86:02:b1:
3e:7f:85:0f:73:49:03:cb:f0:4b:f1:7f:3c:f1:45:fe:02:93:
61:3b:b1:bc:23:c3:c0:30:a3:e4:32:59:a7:fb:58:5d:12:36:
3c:63:1c:45:3c:9b:b3:ee:6f:e1:b9:ab:6c:b5:c0:b2:b6:cb:
17:70:02:f9:49:84:b2:0f:5e:f2:7c:6c:fe:ce:c6:15:53:27:
54:26:7b:73:10:26:99:cc:3c:eb:da:76:66:1e:b6:89:d2:46:
60:31:2e:80:fc:ab:ee:2a:d4:ab:a8:68:06:38:5d:03:0a:b6:
93:b6:26:b4:17:df:a4:d0:1a:17:18:43:2e:21:aa:21:9f:db:
ac:61:d4:86:0b:3f:6c:55:45:4a:86:4a:9a:81:16:35:fa:22:
54:33:03:63:e9:20:1a:dc:fa:d7:99:ed:91:75:54:15:dd:52:
1b:e1:a2:6f:7b:01:31:d9:c2:b4:9f:55:4a:6e:54:b8:bb:a2:
fc:2e:d5:19:7d:9c:a6:8e:be:5f:06:c8:7e:74:e5:fe:ec:ba:
3b:1e:0d:6f:fa:b1:f0:c3:0b:9b:fa:88:65:63:3b:fe:45:cc:
f2:5a:22:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+8ReoBZiPgJSBBPz4PTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjYwODE0MjEwMDU1WhcNMjYwODE1MjEwMDU1WjAzMTEwLwYDVQQD
EyhkYzAyOTg0MjI4ZjNhZTM2YTkyMGE1OTVlNGQ5ZTVlMTM2MGExMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ybcy08+gU/e4qTPMeysYzzjX8v
wWW0+shanv9P9tcWwP87cBeaLx5VS88oMnFonnBNPod0DDcP8lYxuhr0o5dPwe41
Dx7+3kyPclWCLQ1qDBEydeQut2FJdpAgoeVnaY07OG2efrNu7qHsxorOW/lMEn6S
WViwJLEHVpFf9untCmVeP3JEe74OJXJsGpx1JuqFy+HOPqqLNGY/QLJjz6/tPWnt
pYOcu78XT3PsbZMgAMHFCGCysyl34fhWEszS9WjRqQqtUADrvKAHkvX5yKVKG7jK
KGPnSVgAPrNO0bUqV4+TW0wMveObqKOqSF/cpcd7JkQJDYAczGmraki1pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwCmEIo8642qSClleTZ5eE2ChB+MB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUs61BXW
N1r8Hre+9R3q5oxKR3jKwBQ+7kE8cS/KrtA0hgKxPn+FD3NJA8vwS/F/PPFF/gKT
YTuxvCPDwDCj5DJZp/tYXRI2PGMcRTybs+5v4bmrbLXAsrbLF3AC+UmEsg9e8nxs
/s7GFVMnVCZ7cxAmmcw869p2Zh62idJGYDEugPyr7irUq6hoBjhdAwq2k7YmtBff
pNAaFxhDLiGqIZ/brGHUhgs/bFVFSoZKmoEWNfoiVDMDY+kgGtz615ntkXVUFd1S
G+Gib3sBMdnCtJ9VSm5UuLui/C7VGX2cpo6+XwbIfnTl/uy6Ox4Nb/qx8MMLm/qI
ZWM7/kXM8loi2A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:51 2026 by rpki-client