
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: EACY/d0FkXvlSZ/sDRDWyvEaiFuEARaDtxrmo0QzqlM=
Subject key identifier: C8:DC:E3:40:F9:CA:03:A0:53:73:CD:69:2F:63:16:77:E1:F3:16:05
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A0E098F4A33C07A8511B09501A3220786B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 059F
Signing time: Sun 27 Sep 2026 02:01:55 +0000
Manifest this update: Sun 27 Sep 2026 02:01:55 +0000
Manifest next update: Mon 28 Sep 2026 02:01:55 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: lxTJHLUWLw7ujs7IbrJ24luAH0BSHtXgamE4wAN/MOQ=)
2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
3: 8eSRY56ivoj5PMJbAEpCd7XTFLw.roa (hash: Y+Fe7VR6p71IHtGPJcZTT8CUnj4YW5cc/AzcKvuJhU8=)
4: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
5: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
6: i-745CKdfOf19Ku-0_PU7SvfTGk.roa (hash: D1Fm1QRFQnSjdn54Koa0eHcBcqABAYqTNgDSl0KH0Po=)
7: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
8: pKmHj_UwSowJL7JtZ3ZsbqaOaAw.roa (hash: sJJU0c0HzgrlO4mmoDliyfZm6hgydL4GUuwlpgThsI4=)
9: yAVYxJFH5V5eInedSvCrsQJDCdM.roa (hash: JLkjfyoNHYnLxSb+aahMC+v2H24Mr3DdjFtD7SH3WJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:f4:a3:3c:07:a8:51:1b:09:50:1a:32:20:78:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 27 02:01:55 2026 GMT
Not After : Sep 28 02:01:55 2026 GMT
Subject: CN=c8dce340f9ca03a05373cd692f631677e1f31605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:0a:81:19:63:c1:e7:99:16:4d:66:86:bb:
b5:1d:21:a7:8d:59:be:a1:f9:48:1b:48:1f:ba:54:
d1:ef:08:c1:69:9e:6b:40:72:e8:42:72:df:c3:6a:
bb:d2:80:6c:71:7d:a0:a0:cd:0d:59:17:14:5a:b7:
51:92:53:ad:5a:1b:74:78:2e:3b:91:58:8f:4a:8f:
a2:4a:30:08:cd:f8:fb:2d:a5:6f:b7:ec:d5:81:db:
99:34:c7:76:c9:5e:a5:dc:b9:4a:ea:eb:5b:4e:f4:
96:c4:b7:61:ed:8e:eb:0c:72:ea:f1:a3:88:a1:9f:
43:3c:3d:9e:2b:df:42:80:bb:53:85:3d:69:eb:05:
e8:a0:57:0a:6a:97:c9:17:27:a3:31:f1:40:e0:7c:
d9:71:8c:fa:34:79:d3:1c:97:8d:80:93:29:9a:04:
9d:6b:67:ea:79:a1:2c:9a:da:3d:04:21:29:ec:37:
04:0b:8f:ab:54:6c:ca:57:a7:68:fe:28:c5:ab:67:
1c:ce:3a:20:d6:f2:22:6a:dd:01:59:07:10:76:d2:
94:5f:0b:52:b7:e3:0b:09:a2:e1:a8:4a:5b:6b:22:
27:3e:6d:b0:39:c1:0a:57:30:b4:36:56:ef:75:bb:
69:16:b9:65:19:c6:9c:41:75:f8:a6:52:f6:b0:f9:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:E3:40:F9:CA:03:A0:53:73:CD:69:2F:63:16:77:E1:F3:16:05
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:57:fa:03:53:df:13:b7:69:71:fa:01:6e:f6:fa:a2:24:1c:
b6:9c:c9:02:bb:55:b7:09:a0:09:6b:d0:a4:7f:50:44:ba:b8:
e6:42:46:88:41:e0:00:f9:f0:39:76:4c:25:59:09:2d:88:fb:
5d:ce:af:99:fc:a7:99:33:75:07:15:d1:fb:64:80:0a:d7:37:
73:a5:c9:b9:3c:28:f1:d2:88:40:d8:25:86:34:57:64:ff:27:
60:80:07:73:2b:3d:98:3c:17:f7:be:4a:9d:ce:7f:b3:ca:aa:
8c:1e:db:f8:db:fb:1d:c9:75:b8:af:3f:a8:a5:1e:50:c9:7a:
f0:37:de:33:be:90:03:54:fe:fb:37:a4:d2:00:a5:ac:04:e0:
48:8c:f2:3f:77:91:7f:12:5b:16:b9:99:f9:8a:30:5e:14:bc:
aa:48:56:86:5e:cf:c3:49:10:10:ea:23:ed:e4:8c:22:91:13:
32:fe:2c:59:49:dd:bc:42:38:fd:1f:ff:cc:bf:b7:a7:ea:0e:
30:7a:c9:07:b4:11:1e:c8:a1:af:dd:20:a9:78:ed:84:2a:1b:
16:c9:43:5e:2f:de:8c:9b:7e:85:ee:1a:4b:2d:53:9d:95:ce:
29:bb:1f:a0:2b:8b:16:b8:96:94:52:8d:ac:8c:ea:50:4a:69:
6c:33:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:49:54 2026 by rpki-client