Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: CbKCTDbtUNw6nY6FLj8DHFVk9u2qHO8zF4JezjHuy8M=
Subject key identifier: DB:8A:F8:6B:A6:DB:FD:C8:DD:03:C7:A9:A2:DF:29:8D:35:81:1F:13
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019D3789BDCDEB79E62CEEF9939CA7B32730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 098D
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: R40u2+zW6KXR2NhgGwj0TKdj9hPh3vzo8NVDhRS66cE=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:bd:cd:eb:79:e6:2c:ee:f9:93:9c:a7:b3:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=db8af86ba6dbfdc8dd03c7a9a2df298d35811f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:0a:ee:85:c5:ff:f4:d5:a2:e3:07:01:f5:
cf:e2:09:87:ff:3f:1d:05:db:8c:fc:c1:32:47:b3:
db:e2:32:32:c8:ea:7c:99:4a:5c:fd:ae:91:69:3f:
c3:cd:bc:61:ca:11:e2:7e:69:a6:25:e6:b0:30:bb:
65:96:1a:f7:cc:29:d7:f8:4a:9c:a7:f6:d6:7c:f9:
87:76:4c:08:27:42:f0:63:02:5c:a8:40:69:90:31:
65:9d:ef:94:99:d1:c8:7d:45:bc:9d:dd:0e:ff:92:
e9:59:af:3a:2c:1c:76:d5:4b:c6:8e:3a:6d:50:72:
2a:f0:d6:b2:e2:72:9e:9d:0e:b5:6d:00:f7:09:84:
8a:bc:31:5d:ad:e9:31:6f:01:a4:0f:3e:23:1f:f7:
f4:0c:a8:e6:08:99:a0:09:43:94:27:c0:ae:19:08:
2b:a4:6e:a8:b9:bd:0a:d4:fd:c1:02:15:77:4b:41:
b6:79:aa:99:c1:2a:49:54:fe:49:3c:0b:fb:c6:e6:
68:de:7b:88:15:fa:07:48:25:fc:6a:ff:02:6d:c6:
fe:bd:72:29:ac:67:93:db:cf:c8:4b:ac:14:6c:95:
f9:97:19:34:af:25:d0:b6:11:ef:57:c7:83:12:b1:
30:c0:d2:f8:b9:52:8a:e7:8f:cf:7e:d7:2b:a4:b2:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:F8:6B:A6:DB:FD:C8:DD:03:C7:A9:A2:DF:29:8D:35:81:1F:13
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e8:a8:d5:62:75:0c:ca:f9:ee:fe:1a:6a:9f:bd:1a:84:7f:
12:48:f8:50:79:6b:84:ad:86:78:0e:f9:62:5c:98:2f:4f:a6:
74:7c:bc:17:df:f8:6d:cc:36:3f:d4:d2:7c:e4:da:18:14:8b:
c2:5e:2f:60:20:2f:8b:40:df:51:5d:84:43:7a:45:df:0e:01:
7d:99:0d:74:77:97:1f:a4:52:3c:b0:14:63:71:18:99:60:8a:
90:6a:a0:26:ba:e8:28:d9:6e:63:1d:a1:0e:6f:5f:78:bb:ff:
cf:8b:0c:4a:9d:00:44:04:a3:95:7e:e5:58:a7:b2:f3:5d:4f:
f3:9c:9a:76:a9:1d:b9:7e:dc:65:19:47:c2:e8:8f:7b:a3:f0:
25:98:cc:b0:5b:fe:d2:12:17:a1:f4:4c:bb:64:c9:bc:81:1e:
d5:6c:7b:74:6a:d6:e2:a5:5b:92:a3:48:b4:d4:62:0a:8b:e5:
5d:83:b4:f1:38:00:45:61:43:43:dd:d6:43:b4:80:41:78:30:
7d:ca:9b:62:d8:8c:60:3f:6b:ce:64:c5:ff:ec:dd:cd:2d:38:
80:f4:a2:2a:da:e0:79:82:07:7d:92:ce:51:9e:b9:5c:ba:65:
58:32:6c:79:79:2d:3b:fd:37:f7:3e:05:e5:e0:bf:7d:c5:75:
ae:fd:89:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ib3N63nmLO75k5ynsycwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjYwMzI5MDMwMTA3WhcNMjYwMzMwMDMwMTA3WjAzMTEwLwYDVQQD
EyhkYjhhZjg2YmE2ZGJmZGM4ZGQwM2M3YTlhMmRmMjk4ZDM1ODExZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q4K7oXF//TVouMHAfXP4gmH/z8d
BduM/MEyR7Pb4jIyyOp8mUpc/a6RaT/DzbxhyhHifmmmJeawMLtllhr3zCnX+Eqc
p/bWfPmHdkwIJ0LwYwJcqEBpkDFlne+UmdHIfUW8nd0O/5LpWa86LBx21UvGjjpt
UHIq8Nay4nKenQ61bQD3CYSKvDFdrekxbwGkDz4jH/f0DKjmCJmgCUOUJ8CuGQgr
pG6oub0K1P3BAhV3S0G2eaqZwSpJVP5JPAv7xuZo3nuIFfoHSCX8av8Cbcb+vXIp
rGeT28/IS6wUbJX5lxk0ryXQthHvV8eDErEwwNL4uVKK54/PftcrpLIPDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuK+Gum2/3I3QPHqaLfKY01gR8TMB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeio1WJ1
DMr57v4aap+9GoR/Ekj4UHlrhK2GeA75YlyYL0+mdHy8F9/4bcw2P9TSfOTaGBSL
wl4vYCAvi0DfUV2EQ3pF3w4BfZkNdHeXH6RSPLAUY3EYmWCKkGqgJrroKNluYx2h
Dm9feLv/z4sMSp0ARASjlX7lWKey811P85yadqkduX7cZRlHwuiPe6PwJZjMsFv+
0hIXofRMu2TJvIEe1Wx7dGrW4qVbkqNItNRiCovlXYO08TgARWFDQ93WQ7SAQXgw
fcqbYtiMYD9rzmTF/+zdzS04gPSiKtrgeYIHfZLOUZ65XLplWDJseXktO/039z4F
5eC/fcV1rv2J9A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:25 2026 by rpki-client