Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
File: C8GL1hWeK7Ynx1zW76Ue657koRw.mft (raw, json)
Hash identifier: 9RswbBBcKJu0Tz7745WRY4RHZjjMdP7hDDt9+KPnzLk=
Subject key identifier: 20:B1:01:23:4D:A8:D9:A3:1D:61:30:8D:4C:1E:6D:79:BD:BE:C7:45
Authority key identifier: 0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
Certificate issuer: /CN=0bc18bd6159e2bb627c75cd6efa51eeb9ee4a11c
Certificate serial: 019E1C46BD8DB27B068894A11821870C9B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
Manifest number: 3C
Signing time: Tue 12 May 2026 13:00:58 +0000
Manifest this update: Tue 12 May 2026 13:00:58 +0000
Manifest next update: Wed 13 May 2026 13:00:58 +0000
Files and hashes: 1: C8GL1hWeK7Ynx1zW76Ue657koRw.crl (hash: khKUIRvCiGOc61kfAtN6+SResPyjqKvESq963gMQJ2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:bd:8d:b2:7b:06:88:94:a1:18:21:87:0c:9b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc18bd6159e2bb627c75cd6efa51eeb9ee4a11c
Validity
Not Before: May 12 13:00:58 2026 GMT
Not After : May 13 13:00:58 2026 GMT
Subject: CN=20b101234da8d9a31d61308d4c1e6d79bdbec745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:6e:3e:f4:0f:b6:28:9d:b4:75:ea:7f:4a:
13:8e:c4:ae:be:44:dc:a9:36:a3:7f:70:70:15:6f:
a7:c2:91:fe:9e:e7:03:d4:0e:1c:5d:2a:93:8a:56:
17:78:a0:70:37:4b:81:ec:5b:bf:db:11:4b:f2:de:
45:e7:0a:b5:be:dc:0b:e6:11:c0:cf:3e:87:cb:5c:
c2:a6:f5:7d:10:4e:2a:45:06:44:d6:d0:8f:9c:58:
1e:e0:d1:e4:56:2c:46:15:f7:bd:31:ec:8d:1c:4f:
d2:98:33:92:5e:f3:53:18:b1:d2:b9:75:8a:6e:44:
ed:96:1b:b7:c6:3d:df:d4:2b:41:c4:b6:d8:a8:a2:
49:8a:00:13:0c:06:fd:ee:c7:c9:6f:0f:f4:fa:9b:
11:14:76:f2:9d:79:72:cd:a4:6c:8c:5f:7a:4b:eb:
9a:4a:cc:9b:5f:b0:38:93:db:fe:1b:66:1d:92:b1:
27:c3:e4:13:b7:d4:4a:68:cd:0f:3e:0e:e3:17:34:
ed:26:83:b6:c7:e0:c5:48:2b:79:c8:a3:98:88:c2:
a2:e5:df:66:53:2c:c3:87:dd:74:fc:b7:3b:61:4f:
05:c1:0f:12:75:a5:30:a3:7f:57:3c:df:fa:97:44:
33:bb:26:7a:63:4a:9d:d5:f2:38:b0:90:67:46:e5:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:01:23:4D:A8:D9:A3:1D:61:30:8D:4C:1E:6D:79:BD:BE:C7:45
X509v3 Authority Key Identifier:
keyid:0B:C1:8B:D6:15:9E:2B:B6:27:C7:5C:D6:EF:A5:1E:EB:9E:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8GL1hWeK7Ynx1zW76Ue657koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da4faf-f04d-478c-b73e-844e4e68a274/1/C8GL1hWeK7Ynx1zW76Ue657koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fe:1a:5d:20:cf:3a:91:85:a2:2b:67:16:bf:32:fd:ce:13:
38:d7:ad:a1:08:56:70:20:21:b7:27:14:8c:29:ff:5c:29:dc:
93:0e:60:9b:3f:9d:e9:91:b9:ed:57:61:5c:20:c9:46:3f:3f:
77:70:30:14:07:3e:2b:4c:06:28:36:e3:2e:59:c2:31:af:27:
db:eb:17:d6:9e:5c:58:9b:62:a1:e7:fc:b7:3e:67:da:ef:ef:
f3:ce:70:c2:74:f1:44:44:e1:bd:cc:71:e5:33:60:83:7f:3c:
36:db:06:d0:fe:c0:de:7c:1f:5b:de:00:8a:82:ba:2c:6a:9e:
d0:e5:8d:af:dc:b3:f5:ed:f2:36:d8:9a:6e:a6:16:3e:9d:ba:
e6:e7:5b:c0:c9:89:8f:e3:8f:da:07:c3:c9:82:a1:b9:99:9e:
03:03:42:8d:98:f9:75:37:43:9d:3a:28:c4:29:94:4e:67:b4:
23:98:5d:a8:98:56:fa:a3:0c:d7:04:f9:a6:94:f8:f2:2d:d4:
44:a0:98:26:6b:8f:09:16:17:36:d5:72:16:66:cb:8f:ae:9e:
fe:7d:73:26:b2:05:7f:07:f1:48:0d:c8:a2:b0:61:fb:7e:c3:
9f:dc:cc:d3:54:b5:16:a2:91:c6:07:0c:ac:83:5d:db:a3:32:
df:15:e7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRr2NsnsGiJShGCGHDJuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzE4YmQ2MTU5ZTJiYjYyN2M3NWNkNmVmYTUxZWViOWVl
NGExMWMwHhcNMjYwNTEyMTMwMDU4WhcNMjYwNTEzMTMwMDU4WjAzMTEwLwYDVQQD
EygyMGIxMDEyMzRkYThkOWEzMWQ2MTMwOGQ0YzFlNmQ3OWJkYmVjNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVFuPvQPtiidtHXqf0oTjsSuvkTc
qTajf3BwFW+nwpH+nucD1A4cXSqTilYXeKBwN0uB7Fu/2xFL8t5F5wq1vtwL5hHA
zz6Hy1zCpvV9EE4qRQZE1tCPnFge4NHkVixGFfe9MeyNHE/SmDOSXvNTGLHSuXWK
bkTtlhu3xj3f1CtBxLbYqKJJigATDAb97sfJbw/0+psRFHbynXlyzaRsjF96S+ua
SsybX7A4k9v+G2YdkrEnw+QTt9RKaM0PPg7jFzTtJoO2x+DFSCt5yKOYiMKi5d9m
UyzDh910/Lc7YU8FwQ8SdaUwo39XPN/6l0QzuyZ6Y0qd1fI4sJBnRuU57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCxASNNqNmjHWEwjUwebXm9vsdFMB8GA1UdIwQY
MBaAFAvBi9YVniu2J8dc1u+lHuue5KEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhHTDFoV2VLN1lueDF6Vzc2VWU2NTdrb1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTRmYWYtZjA0ZC00NzhjLWI3M2Ut
ODQ0ZTRlNjhhMjc0LzEvQzhHTDFoV2VLN1lueDF6Vzc2VWU2NTdrb1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYTRmYWYtZjA0ZC00NzhjLWI3M2UtODQ0ZTRlNjhhMjc0
LzEvQzhHTDFoV2VLN1lueDF6Vzc2VWU2NTdrb1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof4aXSDP
OpGFoitnFr8y/c4TONetoQhWcCAhtycUjCn/XCnckw5gmz+d6ZG57VdhXCDJRj8/
d3AwFAc+K0wGKDbjLlnCMa8n2+sX1p5cWJtioef8tz5n2u/v885wwnTxREThvcxx
5TNgg388NtsG0P7A3nwfW94AioK6LGqe0OWNr9yz9e3yNtiabqYWPp265udbwMmJ
j+OP2gfDyYKhuZmeAwNCjZj5dTdDnTooxCmUTme0I5hdqJhW+qMM1wT5ppT48i3U
RKCYJmuPCRYXNtVyFmbLj66e/n1zJrIFfwfxSA3IorBh+37Dn9zM01S1FqKRxgcM
rINd26My3xXn8w==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:13 2026 by rpki-client