Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: ssdBdYrHNzh9jRZof/HxaLF2F8TS1OpqSkh1Qze1zUg=
Subject key identifier: FA:11:B1:BD:B3:5D:BF:85:23:CF:2A:5A:99:AA:06:D0:BE:D7:C4:89
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019CAC7DD09491D09B267DC26D5C440043BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0945
Signing time: Mon 02 Mar 2026 03:00:52 +0000
Manifest this update: Mon 02 Mar 2026 03:00:52 +0000
Manifest next update: Tue 03 Mar 2026 03:00:52 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: CQHCE6RzCYjvnnMz7LbCzenjCjHWMrVjvwJIfJChpCs=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d0:94:91:d0:9b:26:7d:c2:6d:5c:44:00:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Mar 2 03:00:52 2026 GMT
Not After : Mar 3 03:00:52 2026 GMT
Subject: CN=fa11b1bdb35dbf8523cf2a5a99aa06d0bed7c489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:c5:34:4a:51:da:c9:7f:88:66:b2:1e:a6:
28:97:72:ff:ff:54:2c:d8:ed:d8:c1:56:88:11:e0:
48:aa:ef:0d:40:c7:43:6b:8b:ab:85:99:8b:51:a6:
f2:7d:d6:86:ce:20:28:73:e7:f7:48:5f:ce:2c:19:
a9:f3:f8:e0:86:0b:cb:f0:98:06:01:f6:20:93:1a:
b1:7a:99:a6:07:63:5b:0a:72:d9:c3:f1:7d:8d:63:
7a:e8:b9:8e:6c:e5:3e:60:94:75:e1:ec:94:3e:f6:
45:e4:69:08:ec:a2:b4:5b:2b:cf:02:a3:3c:0f:b2:
9c:f6:5c:d1:cc:51:b8:4e:96:57:68:74:e3:93:f0:
f7:5a:55:68:06:4e:3b:a7:db:b0:16:7c:3e:3b:a4:
9e:50:77:cd:bc:ed:87:f2:2b:f4:d2:38:70:b4:ad:
a3:3f:b4:71:02:be:71:0e:b0:0c:03:84:ff:08:51:
ee:a6:87:4e:45:f9:a5:98:4f:11:0a:21:c5:f7:cc:
68:7a:43:3f:43:54:45:20:42:a8:85:81:84:62:74:
89:90:ed:28:58:b2:28:36:dd:99:d2:93:9f:c6:39:
1e:c7:57:e3:ef:e4:15:d6:61:20:d1:78:7d:4b:f4:
25:19:d0:24:48:85:07:25:b4:89:5c:bd:7c:f1:33:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:B1:BD:B3:5D:BF:85:23:CF:2A:5A:99:AA:06:D0:BE:D7:C4:89
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:94:79:ca:4f:a7:ba:ee:99:f8:b7:7f:40:0e:87:78:22:24:
c9:44:7d:c7:df:41:f0:4e:2e:ca:07:ac:aa:55:d1:81:6f:c5:
0a:ac:ae:23:6f:6e:22:96:20:26:6f:69:5d:67:c3:3b:55:ed:
ef:0e:45:a4:44:ab:ab:76:6c:dc:ae:83:54:e6:7e:75:ea:fe:
c7:9a:b1:73:0a:30:31:4b:a5:0e:c8:7e:8f:90:05:ef:21:ef:
c3:18:1f:37:e2:cf:a1:8b:23:f2:9b:a9:61:f1:93:cd:77:6e:
2d:8d:5b:9e:8d:8f:b8:64:09:ec:d7:a0:57:2f:5b:53:de:ca:
b1:86:4b:09:09:bd:97:1e:b6:04:97:09:58:31:9d:53:b1:bb:
c4:00:16:78:d4:e8:0f:39:11:1c:cb:c9:7d:2a:86:5d:b1:8a:
d8:5e:70:1e:c6:db:85:31:7e:ef:8c:e3:d6:47:63:25:44:c2:
ce:56:20:47:d1:26:19:86:74:c7:28:c6:16:aa:68:b1:a9:64:
0f:35:14:10:bc:8d:a1:6f:70:c2:e0:5c:0e:be:09:df:8a:c1:
56:92:be:d3:a2:5b:f2:0b:ca:8c:8d:cf:3c:32:ea:74:07:21:
23:fb:c1:b4:5c:3f:d7:a3:82:28:3f:96:8a:d5:e7:6a:b0:e1:
bd:eb:2c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfdCUkdCbJn3CbVxEAEO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjYwMzAyMDMwMDUyWhcNMjYwMzAzMDMwMDUyWjAzMTEwLwYDVQQD
EyhmYTExYjFiZGIzNWRiZjg1MjNjZjJhNWE5OWFhMDZkMGJlZDdjNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U/FNEpR2sl/iGayHqYol3L//1Qs
2O3YwVaIEeBIqu8NQMdDa4urhZmLUabyfdaGziAoc+f3SF/OLBmp8/jghgvL8JgG
AfYgkxqxepmmB2NbCnLZw/F9jWN66LmObOU+YJR14eyUPvZF5GkI7KK0WyvPAqM8
D7Kc9lzRzFG4TpZXaHTjk/D3WlVoBk47p9uwFnw+O6SeUHfNvO2H8iv00jhwtK2j
P7RxAr5xDrAMA4T/CFHupodORfmlmE8RCiHF98xoekM/Q1RFIEKohYGEYnSJkO0o
WLIoNt2Z0pOfxjkex1fj7+QV1mEg0Xh9S/QlGdAkSIUHJbSJXL188TOvwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoRsb2zXb+FI88qWpmqBtC+18SJMB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpR5yk+n
uu6Z+Ld/QA6HeCIkyUR9x99B8E4uygesqlXRgW/FCqyuI29uIpYgJm9pXWfDO1Xt
7w5FpESrq3Zs3K6DVOZ+der+x5qxcwowMUulDsh+j5AF7yHvwxgfN+LPoYsj8pup
YfGTzXduLY1bno2PuGQJ7NegVy9bU97KsYZLCQm9lx62BJcJWDGdU7G7xAAWeNTo
DzkRHMvJfSqGXbGK2F5wHsbbhTF+74zj1kdjJUTCzlYgR9EmGYZ0xyjGFqposalk
DzUUELyNoW9wwuBcDr4J34rBVpK+06Jb8gvKjI3PPDLqdAchI/vBtFw/16OCKD+W
itXnarDhvessUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:34 2026 by rpki-client