Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: xo3Qke+kt6BGGZfIjg5iwTwSbG+vY2yNwbwljnAQ4BE=
Subject key identifier: 2B:ED:12:64:13:C8:5E:C7:D8:B4:E4:1E:08:0C:2D:4E:5E:57:C2:13
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01A125B06A73A248D624FA13AA43AD38DB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0B96
Signing time: Sat 10 Oct 2026 12:01:20 +0000
Manifest this update: Sat 10 Oct 2026 12:01:20 +0000
Manifest next update: Sun 11 Oct 2026 12:01:20 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: y5Zu3fneqchN/4h0Andqxc5/T3Mh6h7YIxbLbxgCkuM=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:6a:73:a2:48:d6:24:fa:13:aa:43:ad:38:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Oct 10 12:01:20 2026 GMT
Not After : Oct 11 12:01:20 2026 GMT
Subject: CN=2bed126413c85ec7d8b4e41e080c2d4e5e57c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:67:f9:dc:37:76:14:74:11:32:7d:9f:51:
87:cf:8c:31:b1:ec:75:18:26:39:dd:28:7c:ee:20:
af:24:d5:72:0d:b2:4b:c3:4c:ce:ae:2d:25:db:1c:
63:df:c2:77:0b:81:ee:d3:02:ff:2e:2c:54:3b:f5:
39:53:61:97:27:f9:e8:9b:f8:3f:93:a7:15:95:da:
57:f1:be:65:d7:fa:00:cc:70:07:bd:87:7b:e1:75:
d6:d4:5c:62:22:25:31:9b:a4:b1:7b:53:d8:ea:39:
b3:c3:3e:b8:5d:6f:4e:65:10:4e:65:52:d9:87:fe:
e8:c2:51:9f:7d:3b:0d:84:c1:2e:1b:53:99:a6:2d:
63:3b:4b:ab:02:f3:38:b4:56:17:b2:ae:42:98:e7:
c1:a6:d1:ba:0e:d6:a9:ae:63:6c:ba:69:8c:78:02:
7b:51:fd:fe:54:22:0a:1a:ff:32:cb:c9:e2:01:d3:
4a:b7:6a:78:0d:6e:5b:8e:38:ba:df:f6:1d:40:ec:
23:fa:4d:89:66:36:30:3c:a5:ee:53:5a:9a:b9:7b:
5f:96:28:80:ff:b8:75:01:63:1d:f1:5b:4b:5e:30:
9f:dc:c2:b8:d0:c6:ca:5b:a2:5a:ef:6e:68:55:2b:
3a:1f:61:e4:86:50:03:2d:a6:f2:40:b6:84:64:70:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:12:64:13:C8:5E:C7:D8:B4:E4:1E:08:0C:2D:4E:5E:57:C2:13
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:03:4e:91:ee:0d:4a:c9:4f:40:f5:46:7a:04:6f:03:07:
79:06:8a:4a:b5:1a:76:03:c6:9b:8f:69:be:67:93:8e:22:2c:
ce:4e:8a:0b:b0:15:2d:aa:f8:8e:52:08:13:13:18:b0:1f:b3:
36:93:b5:0b:37:d2:b4:05:57:aa:9c:eb:17:8c:61:01:ad:f8:
19:3d:a0:d6:6a:28:ec:f1:08:f8:7d:51:6c:66:0e:d5:db:7f:
51:04:ef:e9:1f:1f:44:33:ec:83:1d:96:d8:82:99:02:c9:4e:
8d:91:b8:26:21:d6:f0:49:55:c9:ba:68:cb:c2:a3:1b:d7:93:
2f:94:45:b7:ce:29:00:0a:c7:94:09:27:08:c8:cc:ce:6d:0e:
49:87:e3:32:f6:37:1f:3b:6e:e3:ab:ed:f4:52:9a:96:14:dd:
50:76:d3:b6:52:35:7c:da:aa:f9:13:b2:d3:fe:fb:fb:69:f3:
9f:c3:01:3d:0a:f8:0f:0d:54:c2:1a:03:da:34:0b:d0:02:a7:
c5:ed:f0:fe:a4:8b:f0:8f:38:a9:c0:7c:65:aa:b4:90:4b:81:
df:0d:24:d9:6a:3f:72:30:7a:17:9e:3a:bc:c4:52:00:7e:d6:
dc:49:b7:42:dd:aa:30:aa:09:02:70:5b:15:6d:0c:7c:77:fa:
1d:9c:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:41:22 2026 by rpki-client