
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
File: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft (raw, json)
Hash identifier: FzAgaoA1O51g4j+Xpf0q4ySm/y6sfPz1YR4MOQgdjKM=
Subject key identifier: 61:0A:71:A2:02:D6:45:D1:62:34:74:DD:4C:CB:22:73:F3:62:74:7E
Authority key identifier: FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
Certificate issuer: /CN=fac020f12091a4eba81e4c0466de771db7561650
Certificate serial: 01A040BBA0FD0CE662FF5101C19FD67AEE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
Manifest number: 01C2
Signing time: Thu 27 Aug 2026 01:00:33 +0000
Manifest this update: Thu 27 Aug 2026 01:00:33 +0000
Manifest next update: Fri 28 Aug 2026 01:00:33 +0000
Files and hashes: 1: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl (hash: YKjAu8VQF5Lyxe5wAmIANF4m7fSyJ5KVKRbjSg4Cpes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:a0:fd:0c:e6:62:ff:51:01:c1:9f:d6:7a:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac020f12091a4eba81e4c0466de771db7561650
Validity
Not Before: Aug 27 01:00:33 2026 GMT
Not After : Aug 28 01:00:33 2026 GMT
Subject: CN=610a71a202d645d1623474dd4ccb2273f362747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:de:c5:d2:27:c3:be:33:c8:b3:10:35:1d:
24:3c:51:68:dd:40:53:e5:38:e2:b9:25:cd:4b:b7:
fe:08:06:1f:73:b8:75:15:35:3e:e1:26:fa:08:f0:
4f:93:5a:82:16:82:40:36:10:2d:87:31:9b:57:65:
07:62:fa:74:77:bb:98:4c:b9:e3:56:3f:e3:31:d0:
2f:60:9e:ad:81:fe:53:43:54:6e:c1:e2:f7:91:a0:
b2:22:f7:2a:2a:af:0c:f8:03:71:80:d1:b2:a1:5b:
5a:35:2f:f9:3f:d1:5c:14:0d:9e:d7:df:ce:87:f1:
90:28:e6:eb:17:f4:4e:89:bf:15:c1:cd:b7:cb:d8:
cc:41:7e:4f:3e:88:68:34:b9:84:df:68:db:7c:96:
4c:db:20:d0:f3:e6:0c:5a:ee:c3:fc:af:71:87:a5:
9d:2e:eb:a2:eb:e8:aa:d0:67:6b:fd:cc:a0:7c:e9:
97:5b:97:13:c8:5b:a7:78:fb:63:15:fe:46:52:f5:
c8:fd:7d:1d:2a:82:35:6f:be:e5:01:78:dd:76:63:
e5:83:2f:68:fd:14:7f:2b:80:6a:2d:73:53:e8:75:
f8:19:84:89:01:a9:60:4c:43:75:58:26:37:14:0a:
2b:de:ec:9b:1d:dd:7c:ac:2b:87:73:26:4c:69:97:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:71:A2:02:D6:45:D1:62:34:74:DD:4C:CB:22:73:F3:62:74:7E
X509v3 Authority Key Identifier:
keyid:FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7e:3d:13:08:f4:5c:37:a1:91:42:88:8e:86:58:6d:fd:d0:
0e:d4:2d:50:02:26:73:7b:74:6a:b7:d0:5c:0d:7e:94:05:2b:
a6:c4:16:da:96:c1:fb:02:63:18:c2:63:b4:53:1c:18:e0:9b:
3b:0e:73:37:70:3d:cc:65:b0:03:aa:00:60:47:4f:02:e5:4e:
0d:36:6f:ed:22:2e:32:fd:1b:ae:90:6c:c3:c4:0a:ff:e4:04:
50:0c:97:ed:41:ff:f9:85:20:09:b0:5e:49:e6:a3:d7:da:6b:
de:73:58:99:d8:e3:3f:2e:00:ef:49:2b:46:86:9d:d9:85:62:
73:82:92:11:12:10:77:2a:0c:69:ec:96:75:e1:9b:70:e8:fa:
5a:5a:28:0b:73:c5:59:07:89:a0:f4:5e:65:33:2c:00:28:32:
0b:10:68:9e:88:21:4f:c7:18:e6:a8:5e:7e:d6:43:e2:c5:4c:
02:27:3f:39:20:c4:17:53:ae:b8:d6:08:70:f4:3a:ce:cc:00:
09:9b:67:ff:38:05:f2:3a:62:45:63:d8:17:6e:ab:47:f3:c4:
d9:03:d3:62:a5:ba:d8:34:2a:c8:82:aa:e9:d1:da:21:c9:fa:
a5:de:9c:90:14:f8:7c:e3:63:88:73:a5:af:4e:33:01:ee:fb:
2b:6d:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:23 2026 by rpki-client