Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 6AZtxakL8kUGs04cN8LxEo7osAsU5U4+/s+tlyyPDao=
Subject key identifier: 7B:B0:38:65:C7:50:0E:37:33:16:C1:20:F4:B2:C4:17:F4:03:F9:60
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019F1867B98AF5DCD076B23649839D0B80A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0A86
Signing time: Tue 30 Jun 2026 12:01:18 +0000
Manifest this update: Tue 30 Jun 2026 12:01:18 +0000
Manifest next update: Wed 01 Jul 2026 12:01:18 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 6Ny9wHuQ001RliCuUciOUjzukr7S8IfN4k+PxZ6u5Qc=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:b9:8a:f5:dc:d0:76:b2:36:49:83:9d:0b:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jun 30 12:01:18 2026 GMT
Not After : Jul 1 12:01:18 2026 GMT
Subject: CN=7bb03865c7500e373316c120f4b2c417f403f960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:6b:d9:51:c4:9f:ec:5e:73:54:08:57:9c:
37:93:ef:67:98:52:7c:7a:d9:bd:61:48:43:55:85:
fe:59:db:41:cf:ce:f4:f0:2f:f8:d9:07:15:36:7c:
8d:f3:92:08:10:37:99:15:fa:fd:74:6e:19:d6:10:
41:f8:9f:df:c2:49:11:80:cd:51:ae:c8:01:8d:b3:
32:55:c2:c2:af:a5:56:48:13:f8:fe:ca:a1:ed:97:
07:a3:2e:8b:d0:62:40:79:91:74:64:17:1b:f3:f3:
35:6b:a4:88:fd:6d:fd:1c:6e:0e:94:29:31:66:e1:
16:8f:f4:8a:b3:37:f0:7c:5f:1b:5b:03:43:bf:f2:
58:8a:68:37:b3:ce:07:33:81:97:3e:2b:8e:67:75:
b1:c5:96:35:28:e3:8d:ff:a4:0e:d5:45:94:e6:bd:
01:0f:eb:ca:cb:74:cd:90:91:fe:cf:37:4b:60:5c:
f5:91:de:e7:df:d1:fc:97:11:a1:f7:02:c3:06:b5:
31:ad:ae:d5:19:3a:be:4f:bd:6a:d4:a4:10:f5:ee:
6c:62:ff:d2:dc:a6:c1:b5:7a:7f:61:0b:d7:ee:c7:
3e:ff:00:00:1e:17:ca:43:69:58:3b:f3:80:46:1d:
ed:b8:99:88:f6:f1:10:9a:ea:2c:e1:27:a2:57:58:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:38:65:C7:50:0E:37:33:16:C1:20:F4:B2:C4:17:F4:03:F9:60
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:53:8d:5c:10:6f:28:bf:cb:60:93:41:72:3e:4d:0b:f7:94:
c9:a6:4d:9e:94:b2:c1:42:5a:3c:60:e8:9b:80:6f:ad:51:d9:
e6:7d:58:47:a4:ef:4f:f3:7a:9d:59:bd:e2:d5:9c:57:e8:88:
67:76:a2:89:93:ca:9c:7d:fe:62:78:6c:10:f5:4c:d3:9a:47:
5c:84:4d:0e:61:a3:7c:9f:d1:be:8a:ce:d1:33:38:a8:ee:2d:
84:b3:5b:c1:04:65:fc:d0:09:cd:0f:23:46:d1:29:d0:11:a2:
6e:c2:cd:ab:49:96:17:7a:23:c0:61:d2:9d:9b:d3:a8:97:70:
3f:93:7a:d0:7d:58:a8:f7:b2:50:30:58:dd:77:75:4b:52:bc:
16:e8:b4:21:11:72:86:de:c8:30:78:af:3a:be:8a:2d:2b:f2:
1b:29:8a:17:28:32:60:ae:a6:c0:c4:17:5e:78:37:de:8e:54:
c9:34:db:e7:58:9b:05:cf:80:7d:2c:72:ed:2a:b6:53:c8:12:
7a:3c:69:e4:71:0a:d2:88:06:4a:52:a1:fd:dd:e4:ae:07:6a:
01:2f:3b:9f:70:91:20:61:26:16:0e:56:39:b0:bc:54:c2:d2:
39:18:c5:e5:0a:37:d6:12:9a:c8:0d:7b:b8:63:05:71:cc:38:
7d:d2:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:50 2026 by rpki-client