Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: iNd+PWqMjGYRQUBkzJ+ne1MdyDzZuMtebdgqd+cCfqM=
Subject key identifier: EB:6D:77:F3:B2:56:46:CB:A6:BD:38:3F:04:38:89:6D:C2:6D:00:0E
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019FA93E3A14C10BA6402946F58E2A2A62B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0AD1
Signing time: Tue 28 Jul 2026 15:00:55 +0000
Manifest this update: Tue 28 Jul 2026 15:00:55 +0000
Manifest next update: Wed 29 Jul 2026 15:00:55 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: CVERc+haxtXoNTYqwEhvyOFHvL2G0hiXFr8DNjB3dKE=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3a:14:c1:0b:a6:40:29:46:f5:8e:2a:2a:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jul 28 15:00:55 2026 GMT
Not After : Jul 29 15:00:55 2026 GMT
Subject: CN=eb6d77f3b25646cba6bd383f0438896dc26d000e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:5e:ad:91:56:26:1f:9e:0d:59:f4:d8:a9:
86:0c:ee:7d:98:f3:a1:eb:d9:4f:7d:a2:5c:12:c6:
8a:91:d5:3f:1a:0c:12:00:fc:f1:92:83:b4:9c:5c:
95:fa:48:12:89:5e:40:5b:8e:b7:83:7a:2f:dc:ec:
07:a2:c7:37:0a:5d:d4:90:9b:e0:38:a8:be:6a:d8:
74:32:d9:90:7a:fe:fb:dd:dd:a1:8c:cd:60:8a:57:
77:e6:93:63:ff:e8:c3:db:91:b7:4e:95:bd:7f:84:
b4:69:9e:bf:34:6e:7f:0b:42:70:4a:16:da:42:64:
f0:d1:b7:e8:89:fd:e4:ad:ab:6a:8a:fa:db:ac:5e:
1d:12:15:8a:5f:54:64:2c:bd:8c:f6:34:5c:08:75:
28:51:ed:e9:d4:36:be:aa:fc:fa:e8:f4:07:90:59:
be:7b:fa:6f:6c:a0:0c:36:6c:99:16:bc:67:55:f5:
5b:5f:24:c1:77:1e:b5:98:82:04:a2:6c:a2:f6:ce:
15:27:72:f1:2a:73:8a:95:b3:2e:75:c5:cc:2d:5c:
fd:ec:9d:2d:95:9b:65:a5:0b:4f:54:20:c3:df:88:
4a:13:4f:ef:17:77:ab:73:92:a7:aa:5b:8f:6e:42:
19:1f:78:53:53:cc:83:fa:1a:47:20:a6:81:7d:b2:
59:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6D:77:F3:B2:56:46:CB:A6:BD:38:3F:04:38:89:6D:C2:6D:00:0E
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f4:35:54:0c:93:b9:bc:91:07:01:19:82:ec:c4:ae:07:1e:
8f:ef:18:a2:c0:36:1c:97:99:b5:43:ab:ca:8e:5b:69:0d:e1:
10:8e:49:c2:86:46:ca:16:61:b8:d4:a1:97:b0:9d:93:dd:3a:
1f:f6:10:e9:86:b3:8d:c6:ff:1b:b2:ca:30:a5:31:9b:1a:4f:
c4:9e:8c:49:a3:17:aa:70:71:dc:c7:43:38:b3:68:2c:78:48:
33:e1:5a:11:e5:d1:32:8d:62:d9:39:aa:33:96:83:2e:1c:88:
56:91:43:07:dc:a8:1b:49:b0:19:6b:7b:9d:25:92:50:3a:34:
93:8d:a0:9b:47:5d:70:c7:c2:7d:4d:67:62:59:4f:0e:1e:29:
6d:6f:84:10:fd:26:6a:a7:da:b0:44:2f:f4:11:7d:50:ec:b4:
92:d6:2b:dc:ae:40:db:da:ca:aa:8d:e8:a2:66:5d:cd:42:23:
e1:d5:b7:7e:c1:ea:db:67:bc:db:fd:a0:d0:b7:67:1e:41:dc:
83:ed:f5:bb:3b:fa:bd:e3:ac:35:d2:60:01:f6:f2:be:01:fd:
90:40:d8:34:67:7f:e1:9a:f1:97:44:2d:39:22:aa:07:5a:de:
dd:e1:3f:11:5a:88:89:ba:f1:21:95:f6:18:54:8a:37:11:49:
0a:80:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:50 2026 by rpki-client