Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 0KCZtQi4qt/6SJLqXQXnf69TryYRviSb+8sWJHZZmRw=
Subject key identifier: 11:78:88:A0:E0:5E:7B:58:72:6B:C6:47:C8:48:1D:00:28:90:0C:86
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019D9A078C15B12B14787A1BFB3669E3C06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 09C0
Signing time: Fri 17 Apr 2026 06:01:18 +0000
Manifest this update: Fri 17 Apr 2026 06:01:18 +0000
Manifest next update: Sat 18 Apr 2026 06:01:18 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 8napzvh7uNK5OdkEj7CZylWomJc5fR+S0HzitNKXw3U=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:8c:15:b1:2b:14:78:7a:1b:fb:36:69:e3:c0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Apr 17 06:01:18 2026 GMT
Not After : Apr 18 06:01:18 2026 GMT
Subject: CN=117888a0e05e7b58726bc647c8481d0028900c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:fa:56:a8:19:3b:a6:91:f5:36:3e:a1:4d:
2e:f2:89:f7:8f:ed:af:40:1b:f7:33:c3:fe:57:54:
50:0d:57:ae:c0:f0:c6:c6:67:15:27:15:0f:3a:55:
a6:9a:c6:98:9c:ba:3b:65:ea:f1:4a:25:48:78:08:
8f:57:66:20:38:66:66:6c:1d:f5:e1:c5:c4:6e:5f:
b9:1e:3b:c5:52:1f:82:96:0b:69:b7:04:1b:be:26:
10:82:2e:ce:8c:95:43:0a:18:91:21:4e:ea:77:f0:
99:ce:92:d4:28:13:77:3e:8d:c5:3d:6f:82:29:66:
a8:27:9b:02:fd:7f:5e:90:df:2b:5d:36:12:94:d9:
41:6a:f3:76:87:b9:a9:aa:bd:55:3d:a8:2b:9e:dd:
c1:e9:d2:ed:7b:7c:b6:80:09:55:35:ab:d3:20:63:
cf:7d:12:d8:b8:43:ac:76:f9:dd:a9:29:13:bd:02:
56:59:73:00:a6:39:d7:c1:97:5a:58:3f:81:19:c8:
19:f2:cb:23:8f:ec:c5:0a:69:b6:46:82:8a:c5:c6:
af:37:95:2e:d4:54:73:66:48:fb:97:17:5b:76:6e:
22:2f:96:a7:e5:68:ac:21:84:28:f5:61:82:63:e7:
de:f0:82:a3:24:99:da:a4:97:40:d9:3b:b3:30:e8:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:88:A0:E0:5E:7B:58:72:6B:C6:47:C8:48:1D:00:28:90:0C:86
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:87:81:91:10:c3:cc:c3:c8:d1:bf:98:ef:d4:c2:5d:07:
cd:07:c6:63:63:98:e2:8d:97:00:5c:06:e5:42:94:31:fb:1e:
04:d8:e7:e5:5a:6d:ff:b9:2c:4f:4c:3d:3d:9e:8c:72:b8:f3:
12:06:c6:e0:40:2c:fe:42:36:b0:11:ae:37:24:ee:44:47:9e:
f0:d2:ab:38:20:cb:22:40:d6:4e:67:f5:f4:c7:fd:63:11:83:
0a:11:60:62:7f:a5:c1:63:b2:92:8d:17:ba:61:e0:f7:26:25:
1e:29:7a:47:41:ee:53:42:94:ca:83:fd:cf:9e:55:bf:9e:71:
92:1b:34:2d:cb:7e:92:b0:c0:c1:ca:50:d6:7d:b6:c3:b4:f0:
00:5c:2b:c5:8c:df:f0:b9:75:21:d0:a2:61:02:7a:86:23:df:
76:68:4f:35:63:63:0c:59:23:9c:cc:69:25:8d:f3:ab:ff:df:
e7:de:6a:3c:80:92:01:d5:c4:eb:0f:b6:6b:31:30:2f:2c:bb:
9d:3f:ca:9e:99:1d:10:db:be:cb:71:8d:62:db:a0:4a:e4:b5:
49:0f:d6:62:49:7e:10:04:bb:3b:2b:cb:92:cb:eb:72:5b:74:
26:23:fc:77:b1:f5:95:73:55:39:fb:66:0f:c4:62:39:b2:77:
d7:ce:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:31 2026 by rpki-client