Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: 9ZMZspK6SO28q0Eut4iAilpqUS9651AzfZVISETulcU=
Subject key identifier: DB:0B:53:52:BB:2A:CC:7F:F7:C5:6F:2B:93:83:A8:8D:55:D5:90:A6
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 01A0DC4DB226763B1C71FC6FDBD990D066B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0B70
Signing time: Sat 26 Sep 2026 06:01:14 +0000
Manifest this update: Sat 26 Sep 2026 06:01:14 +0000
Manifest next update: Sun 27 Sep 2026 06:01:14 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: m2gR5m+hUlK2aUVypI7euOq6TI+qDr61iC9+PrhATkI=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:b2:26:76:3b:1c:71:fc:6f:db:d9:90:d0:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Sep 26 06:01:14 2026 GMT
Not After : Sep 27 06:01:14 2026 GMT
Subject: CN=db0b5352bb2acc7ff7c56f2b9383a88d55d590a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:bb:4c:38:ea:a3:0e:6d:db:79:bc:4c:83:
17:5c:af:9e:0e:ea:48:7c:27:8e:30:11:de:cb:2f:
0e:f2:b4:af:28:b4:64:12:c3:d7:51:91:f6:fd:4e:
d6:e6:87:1f:33:c4:8d:cc:30:1d:e7:b9:a6:5b:03:
77:1f:7d:8a:56:91:d0:5f:9f:a0:54:ba:59:c4:6b:
d3:23:6d:fa:27:09:0e:42:e2:8c:24:04:12:00:3d:
2c:0f:ad:a3:5d:6c:94:c6:9f:46:97:e5:d2:2c:16:
6b:55:35:46:0a:3e:a3:52:5f:e3:35:aa:f3:49:dd:
39:05:f3:c4:03:f2:42:b0:e2:f2:57:00:56:df:1c:
5e:2a:6a:43:cf:e5:ac:9c:f4:af:6f:00:16:af:f2:
1e:77:3a:54:81:4f:3e:98:8d:ca:24:d1:57:92:9a:
84:7a:8d:11:10:07:02:ca:55:e1:03:aa:3b:ea:8b:
56:39:ef:ec:6f:d8:ca:6e:d8:93:0d:95:cd:73:4b:
9a:b8:43:4b:36:50:c5:2c:ff:a1:a4:3d:2c:60:11:
96:07:95:35:d9:be:03:13:f7:0a:0f:80:73:19:92:
10:cf:37:c7:11:55:1f:0f:a4:06:b5:93:17:07:48:
5d:b2:c7:b9:13:83:fb:2f:c5:84:b5:44:bd:ef:bd:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:53:52:BB:2A:CC:7F:F7:C5:6F:2B:93:83:A8:8D:55:D5:90:A6
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:11:91:d1:98:4b:06:e7:d6:48:df:e3:ea:1f:3e:df:46:67:
f6:89:56:59:ab:35:57:30:0e:a7:66:c7:e9:23:21:82:74:fa:
39:7e:66:70:70:84:2e:a8:85:f2:2e:7f:5b:12:69:3c:c4:5d:
0e:da:28:de:8f:c7:bb:1d:c0:c6:e1:e8:64:e8:df:3f:82:44:
d6:e8:95:19:2c:0f:0a:b1:b2:cc:53:1e:79:ac:6c:e3:22:c3:
d3:a3:1b:2b:b7:48:01:d7:7b:18:d3:23:9a:f4:ce:c5:bd:c2:
de:b2:67:3c:11:5f:e0:fc:dd:43:50:74:21:4e:8e:06:d5:f4:
8a:8b:5c:b2:14:29:3e:fe:4e:61:5a:92:6b:bc:80:df:82:82:
83:9b:84:cd:d8:e9:8b:5e:2d:0e:84:94:df:96:51:fc:09:d8:
4f:a3:19:c7:d3:2c:6b:5a:fa:a4:97:53:88:de:c7:78:a7:f8:
6a:55:fa:7c:f7:6f:5c:01:d4:73:e6:ec:d3:54:d0:7c:14:d8:
63:02:42:ae:20:d4:9b:2d:aa:fd:29:6f:32:ee:d5:10:bb:d8:
01:12:55:89:47:7a:4d:a6:4b:2d:75:46:14:d9:ee:1e:43:db:
5b:e8:d5:ec:e4:5b:c4:21:11:ea:04:78:fa:d5:23:be:07:57:
12:c9:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:16:29 2026 by rpki-client