Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: r/c5RArdVLgPKx+fzoGs1wVC2egUX65PfALROn1p6bc=
Subject key identifier: 84:FD:9B:9F:23:63:D9:19:6F:55:28:16:A5:53:D1:5A:6D:BD:C1:24
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019E30A980C49861952F0FBBB0C4F2D363B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0A0E
Signing time: Sat 16 May 2026 12:01:15 +0000
Manifest this update: Sat 16 May 2026 12:01:15 +0000
Manifest next update: Sun 17 May 2026 12:01:15 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: RxtdGQpJOvl0qArGx4BNS4aqEXLSfMKR0vXVDS0vOsY=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:80:c4:98:61:95:2f:0f:bb:b0:c4:f2:d3:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: May 16 12:01:15 2026 GMT
Not After : May 17 12:01:15 2026 GMT
Subject: CN=84fd9b9f2363d9196f552816a553d15a6dbdc124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:d6:f3:de:47:81:b2:a6:b6:9a:82:65:ab:
5e:97:82:f3:db:e6:21:63:9b:02:9f:0b:8f:a5:df:
6c:86:bf:d7:6e:eb:4c:1a:15:2e:0d:22:6c:3a:e9:
90:30:7b:fb:9f:a9:ce:15:2c:20:3d:08:6d:fb:5c:
79:81:2b:84:e5:04:77:d2:67:31:d7:cb:01:b7:f8:
3d:a6:b3:07:1a:63:fc:e0:2b:f8:d5:68:d1:48:59:
de:48:55:89:c8:49:e9:5d:a6:ca:a4:dd:95:2c:16:
76:94:14:07:b9:0c:43:02:0e:6c:0e:42:1f:b1:f4:
dc:db:4a:de:35:3d:09:60:7c:f4:4d:ea:48:cf:6c:
c8:29:bc:26:15:46:4c:0e:7e:30:cf:5a:e2:72:90:
83:66:de:cc:53:25:27:32:50:15:4b:f6:86:c5:a9:
5a:6d:c3:9c:4d:6d:2a:e6:58:80:eb:89:31:83:48:
62:20:08:45:4d:29:c7:36:ad:3e:66:8c:32:46:a6:
74:e1:1e:2f:82:4b:d2:48:70:4d:07:0d:cc:d0:bf:
75:e6:58:19:28:29:84:fb:bf:de:71:6d:5b:da:e5:
0a:9c:f2:d2:ea:80:9f:73:8b:41:38:81:4a:76:e8:
87:82:c8:8e:55:97:5e:39:cc:ea:d8:9b:80:f7:59:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:9B:9F:23:63:D9:19:6F:55:28:16:A5:53:D1:5A:6D:BD:C1:24
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:b4:22:f0:62:9d:5e:5f:6a:23:98:19:58:9c:5b:36:21:
d2:f9:11:3a:c0:0c:c7:77:42:b7:ca:9a:8c:a9:77:34:9e:20:
30:15:2d:31:6f:8f:54:13:15:0e:e2:3a:c6:6c:8a:c8:f6:44:
93:25:c4:a7:b3:cb:b6:a8:13:90:22:99:85:25:1e:e1:2c:e2:
6d:c6:50:9a:a2:51:6b:6a:fd:d0:8b:2b:57:a1:bb:cf:1b:61:
05:67:2c:91:3c:a4:14:b5:0b:43:37:96:47:52:33:03:f7:95:
cc:9e:49:dc:88:fb:54:a7:39:5f:7a:90:bb:dd:c7:96:78:ea:
75:6c:27:8f:3c:98:c9:66:5b:55:c3:16:f2:2e:a4:f2:1f:db:
80:ff:6c:f4:c1:bb:40:d5:f1:9a:ee:5d:91:45:17:30:13:94:
14:54:ad:58:d9:26:33:f9:66:10:75:d4:99:bf:ad:69:3f:19:
28:d1:00:9c:5d:94:7d:90:c8:bb:9c:a3:fa:f5:1f:5d:bf:ab:
43:bc:a1:f5:b9:42:16:37:e1:0d:de:26:02:68:83:2b:b6:80:
83:e9:ff:a0:49:27:a2:35:d3:e2:c8:ff:00:71:8d:8d:d5:48:
17:f0:6c:f9:a6:5d:bb:24:08:80:04:6b:b1:0e:ad:bb:e7:3a:
86:33:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:11 2026 by rpki-client