Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: /pxCoWxFcti/eTixcen5aj7bJNXaRNXzeRAHmR2tYdI=
Subject key identifier: 11:94:00:FE:DB:18:46:A9:D7:DA:A0:52:10:FE:84:21:07:BC:CA:98
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019D2816EACBFB0934BFDAC39C76F139F524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0985
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: AhvTGxYOL1X/bUT2EAC6h4EbdLU5DNv3IDGajcXsyyU=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ea:cb:fb:09:34:bf:da:c3:9c:76:f1:39:f5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=119400fedb1846a9d7daa05210fe842107bcca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:2b:e7:17:3c:41:50:31:2d:5e:b8:4a:56:
32:4f:12:41:10:6f:09:eb:9a:30:27:78:78:c9:8c:
d2:b9:5e:f5:cf:5b:b8:11:ba:5c:e2:92:80:06:41:
4b:82:a4:64:82:da:c4:ac:9d:d9:3e:0d:96:ac:b1:
2e:35:02:c9:02:1a:40:0a:52:ba:54:75:76:72:90:
f1:2a:f8:66:b1:2a:36:77:b7:25:41:bd:5c:9a:7d:
3e:b0:ab:d0:1a:13:7e:30:91:1f:60:2b:c0:93:40:
c6:35:76:1f:a4:11:9b:79:69:67:8d:3f:28:9a:11:
37:a2:00:31:c6:d6:9b:fb:58:67:17:49:ab:d6:54:
d5:c6:cb:73:1d:d3:25:da:c5:be:29:c3:4a:08:aa:
5b:47:6c:14:eb:b3:cb:0a:1e:be:11:cd:80:6c:2f:
92:d6:fb:4b:a7:51:31:23:b0:09:61:1b:89:05:ba:
11:4a:aa:6f:53:5d:8a:71:14:39:58:cd:a0:74:bc:
70:af:27:24:59:d3:12:35:0d:99:92:62:15:3d:c1:
e4:b0:dd:f6:af:60:3a:87:a5:5d:82:ad:d6:fa:f1:
86:7a:75:58:9e:ad:11:0f:e9:e9:c4:d5:4c:04:93:
52:ec:20:3d:87:28:19:4a:48:3b:e4:c7:4c:78:7c:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:94:00:FE:DB:18:46:A9:D7:DA:A0:52:10:FE:84:21:07:BC:CA:98
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:80:dd:fb:85:cf:b8:74:bd:41:cc:f5:64:06:c3:b1:23:
96:df:06:7e:22:c2:c8:30:93:2f:7d:90:cf:e8:09:c6:15:68:
34:7f:5f:20:f3:78:9d:fd:3d:7d:59:9f:59:ed:b8:5e:27:12:
ac:e6:48:51:2b:d7:99:dd:36:4f:25:9f:42:37:f2:53:67:c0:
db:ed:89:a0:79:b7:b3:d8:05:3b:06:84:24:22:1a:08:16:f1:
f5:a8:a0:89:5e:93:01:e6:7b:80:56:0d:84:e9:a0:05:bd:c7:
4e:6b:a9:da:14:57:67:47:88:c6:ea:6e:a1:6f:ce:d7:60:16:
27:a2:59:6d:eb:cc:b4:0d:50:f7:63:35:ae:89:b3:55:c4:80:
ac:10:81:76:93:1b:26:f0:e2:51:4c:ec:65:17:9e:28:91:bb:
70:da:31:40:cb:92:ec:bb:4e:de:86:33:29:56:56:55:29:2f:
75:da:30:fd:2e:34:0b:19:a1:d9:ab:57:14:4a:23:53:36:8a:
ac:1d:fa:d4:c9:42:1a:98:76:69:48:b2:a0:1f:23:2b:be:32:
62:14:08:e7:c4:ac:08:f0:c1:e4:0a:40:dc:40:bf:9c:9b:08:
58:98:51:dc:81:45:09:08:22:f9:38:b8:79:f3:0c:fe:5b:a4:
12:ae:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:59:45 2026 by rpki-client