Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: r7ZxSyRU2o7dXiOWKQhvxwxGkyZsQNquCGhNQ2CMfV0=
Subject key identifier: 57:F7:6C:C3:7D:1A:72:40:0C:31:53:2C:C4:B8:F3:D9:94:59:03:FB
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01A112607428B9474E1CBADD9E12995A42DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0B8C
Signing time: Tue 06 Oct 2026 18:01:13 +0000
Manifest this update: Tue 06 Oct 2026 18:01:13 +0000
Manifest next update: Wed 07 Oct 2026 18:01:13 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: MXMtcs/MOmqOBiFwE086xfx4xlHh3gHg6DiD36fnJYA=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:74:28:b9:47:4e:1c:ba:dd:9e:12:99:5a:42:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Oct 6 18:01:13 2026 GMT
Not After : Oct 7 18:01:13 2026 GMT
Subject: CN=57f76cc37d1a72400c31532cc4b8f3d9945903fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:6d:3f:4d:e7:64:b1:52:8e:7e:72:5c:cf:
dc:5e:72:e2:c1:66:e1:8a:87:68:b1:84:3f:b7:66:
a6:9d:7d:96:57:ee:cd:e4:c7:62:62:43:44:bc:7b:
e7:d7:1f:ef:52:34:8f:3b:33:5e:6d:53:14:d5:ff:
fd:97:25:70:89:43:7c:d7:9b:06:69:26:0e:9f:dc:
72:21:fc:6a:65:35:6b:7a:be:d0:d8:31:07:4a:13:
22:ee:87:c5:17:be:cb:f5:f7:07:a8:c1:1d:f2:ef:
d5:0f:33:33:ae:7e:75:82:e9:cf:0b:02:d4:4f:b9:
0f:19:53:18:3d:95:2a:2e:de:a4:4b:77:50:1c:69:
10:71:83:be:b2:b3:ff:51:13:05:b3:3e:52:c8:24:
bc:ab:3f:d0:f6:ab:2f:a7:bf:f4:f6:1d:df:76:c3:
ab:1e:d4:e3:ed:8b:84:00:d6:93:7d:eb:36:4f:13:
b6:02:40:04:be:d5:b5:38:d7:3a:40:21:0c:d9:57:
88:8d:dc:b1:2d:ea:e0:11:6a:6c:c1:7c:1f:84:7b:
fb:97:7c:8b:e0:17:3a:1f:d7:7f:db:03:45:eb:e2:
17:e8:23:06:ff:c0:15:5d:de:87:91:46:34:5b:89:
de:e5:8e:dd:05:d8:c9:1f:cd:8c:1b:ac:33:32:11:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:6C:C3:7D:1A:72:40:0C:31:53:2C:C4:B8:F3:D9:94:59:03:FB
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0d:8d:68:23:47:f0:43:a7:c0:f8:79:9a:f1:ba:48:21:03:
14:e2:5e:50:05:47:6b:96:0d:e3:f4:36:fd:97:70:2f:e7:f1:
3c:43:85:62:ac:67:ae:7d:bc:9f:fe:75:82:2c:9b:27:e3:90:
12:3d:d9:0c:1f:47:59:92:45:0b:e5:48:dc:ac:54:be:c4:7d:
2b:52:f9:be:53:c8:22:79:df:5c:da:4e:30:d8:8e:28:42:ce:
db:37:79:ad:5e:ce:19:fa:6a:a9:0b:19:44:79:b9:44:d9:87:
42:18:ae:45:d4:1a:84:fc:40:f8:79:7d:0a:5b:95:3e:48:11:
59:f3:95:07:f2:ae:5c:80:a5:c5:61:4f:6b:71:ed:06:98:28:
3e:16:d4:02:3b:83:ac:da:9c:2c:a0:b5:a2:cc:1c:7c:a2:88:
c2:2e:d2:7a:52:ba:4a:f8:23:33:07:39:86:73:79:a7:69:8c:
06:45:ff:18:69:7d:8d:6b:ab:64:a3:8b:1b:56:cb:12:08:98:
68:62:7d:31:82:e2:be:d6:ca:b1:fe:f2:63:47:a2:13:a9:68:
d9:f6:89:55:1b:2f:ba:cf:15:aa:d6:e9:16:22:a0:2e:a3:32:
b5:e9:f1:5f:82:32:e6:5b:03:63:d6:38:77:49:9b:4d:e8:7d:
21:36:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:44:25 2026 by rpki-client