Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: bkfIYnJeWhAK7cwFdIj8fjh9KmUo7MPNMJdKT+kjF4M=
Subject key identifier: C9:AE:E4:9F:11:F4:87:0B:80:7C:BB:B4:1A:16:2A:87:51:37:08:59
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 01A02167E3F572E2321446DE7FC8F7B50803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 0A3F
Signing time: Thu 20 Aug 2026 23:00:51 +0000
Manifest this update: Thu 20 Aug 2026 23:00:51 +0000
Manifest next update: Fri 21 Aug 2026 23:00:51 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: zfI9GXVRI1LxM/S/YlDCO2de1hXPwK6b8Egit075gck=)
2: iswbdq-9V8dK2lt-q7TWOV5NsnA.roa (hash: gjZR/5snwpqcxytGpgCEoK1OzMncCQSVwjv9VDuQVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:67:e3:f5:72:e2:32:14:46:de:7f:c8:f7:b5:08:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Aug 20 23:00:51 2026 GMT
Not After : Aug 21 23:00:51 2026 GMT
Subject: CN=c9aee49f11f4870b807cbbb41a162a8751370859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:31:10:d8:7f:a3:28:b4:1e:c0:48:48:c2:
cb:ff:8f:ac:2e:b6:96:2a:52:54:e8:33:f1:01:9d:
76:05:1f:fa:eb:f8:2d:57:67:b6:0c:14:72:7f:f1:
94:b9:c9:d0:63:83:66:1f:b8:8f:2f:14:15:9a:5a:
ab:53:c8:af:02:79:2c:7a:13:0c:b3:f4:b6:a6:aa:
0f:34:17:71:81:51:ba:68:ae:9a:6e:9c:96:ac:fd:
78:e7:ad:fe:72:ae:52:5a:53:09:94:2a:a6:4a:78:
89:8b:b9:b9:2f:86:0e:9a:3e:4a:c6:10:3d:04:83:
a1:8c:6c:11:94:1a:8a:8a:18:ac:2f:46:d9:0f:32:
19:89:8f:fd:a6:ae:84:b9:21:14:3c:c0:7a:29:ec:
a1:52:30:32:22:63:00:bf:3e:61:c3:5b:3b:14:0d:
78:ed:6c:86:7d:76:2a:b3:9f:a2:a5:6c:0d:14:ab:
b0:d9:c9:45:37:6c:28:88:5e:9c:56:39:c5:e6:3d:
b6:37:db:19:14:0c:00:27:30:10:fc:9a:b7:b1:a6:
15:a1:ad:54:49:29:cd:c8:6a:bf:9b:de:22:c1:3c:
66:af:e4:92:7c:85:aa:a6:c4:63:1b:ad:84:52:e6:
22:c8:5d:3b:cb:9a:c6:f9:38:ab:42:69:fc:6f:cb:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:E4:9F:11:F4:87:0B:80:7C:BB:B4:1A:16:2A:87:51:37:08:59
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:d0:24:2e:c3:95:32:35:06:4c:63:7b:99:5a:d1:61:48:
bc:c3:12:08:50:d5:01:55:70:3d:1a:12:c4:fc:9c:29:b1:41:
ef:6e:cc:35:0f:14:56:91:c5:e1:e7:74:86:24:a1:e8:0a:76:
9e:1a:7b:21:8b:94:57:7b:82:18:eb:da:38:3c:98:59:ac:9c:
9f:cc:37:24:d3:8a:32:22:d5:83:8e:dd:20:82:15:60:cc:ab:
20:7c:99:66:49:4e:eb:3c:75:e1:bf:f4:be:77:3a:fb:b0:13:
4b:0c:15:38:0f:71:4c:5b:ea:40:fe:7f:8c:c9:1d:f6:99:1c:
27:1a:9e:ec:5a:65:f9:82:22:9e:a3:fa:16:c1:62:cf:f2:d6:
73:64:71:68:5b:8e:98:31:62:2b:be:c3:c3:94:f0:5f:9b:b5:
e4:2b:dd:6b:59:3d:9f:92:5e:9d:c7:f1:c2:84:a6:de:ec:59:
d5:e1:4c:6c:bd:42:94:27:14:3e:fe:3e:4c:c5:97:2b:62:c2:
0f:bd:29:e4:e3:ca:6d:ea:6e:9c:e4:e8:c3:68:69:b6:2c:8c:
4a:d7:b7:8f:37:f2:90:38:07:fa:f4:bc:7f:65:ca:0b:f5:02:
7d:7b:bd:d3:73:0e:2c:d0:df:b0:dd:c2:aa:27:05:1e:9c:7a:
d6:b9:f3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAhZ+P1cuIyFEbef8j3tQgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy
YTQzOTAwHhcNMjYwODIwMjMwMDUxWhcNMjYwODIxMjMwMDUxWjAzMTEwLwYDVQQD
EyhjOWFlZTQ5ZjExZjQ4NzBiODA3Y2JiYjQxYTE2MmE4NzUxMzcwODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucYxENh/oyi0HsBISMLL/4+sLraW
KlJU6DPxAZ12BR/66/gtV2e2DBRyf/GUucnQY4NmH7iPLxQVmlqrU8ivAnksehMM
s/S2pqoPNBdxgVG6aK6abpyWrP14563+cq5SWlMJlCqmSniJi7m5L4YOmj5KxhA9
BIOhjGwRlBqKihisL0bZDzIZiY/9pq6EuSEUPMB6KeyhUjAyImMAvz5hw1s7FA14
7WyGfXYqs5+ipWwNFKuw2clFN2woiF6cVjnF5j22N9sZFAwAJzAQ/Jq3saYVoa1U
SSnNyGq/m94iwTxmr+SSfIWqpsRjG62EUuYiyF07y5rG+TirQmn8b8uaXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmu5J8R9IcLgHy7tBoWKodRNwhZMB8GA1UdIwQY
MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt
NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2
LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNLQJC7D
lTI1Bkxje5la0WFIvMMSCFDVAVVwPRoSxPycKbFB727MNQ8UVpHF4ed0hiSh6Ap2
nhp7IYuUV3uCGOvaODyYWaycn8w3JNOKMiLVg47dIIIVYMyrIHyZZklO6zx14b/0
vnc6+7ATSwwVOA9xTFvqQP5/jMkd9pkcJxqe7Fpl+YIinqP6FsFiz/LWc2RxaFuO
mDFiK77Dw5TwX5u15Cvda1k9n5JencfxwoSm3uxZ1eFMbL1ClCcUPv4+TMWXK2LC
D70p5OPKbepunOTow2hptiyMSte3jzfykDgH+vS8f2XKC/UCfXu903MOLNDfsN3C
qicFHpx61rnzTA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 05:13:23 2026 by rpki-client