Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: zyQzDMjcT5FP/sZIzJsc9cnsCT8Z0O5S2pvtr+BqxvA=
Subject key identifier: 56:C0:13:7E:9E:6E:BC:FA:4A:8C:6A:17:A6:A7:D3:FF:7A:68:1A:76
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019E1F47882A8F8E89FE92A99FA35F16870B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0A05
Signing time: Wed 13 May 2026 03:00:41 +0000
Manifest this update: Wed 13 May 2026 03:00:41 +0000
Manifest next update: Thu 14 May 2026 03:00:41 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: MkH+uFxw2YfTvmXtZQrD3wOwjK9haZXdMn85J3afJ/I=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:88:2a:8f:8e:89:fe:92:a9:9f:a3:5f:16:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: May 13 03:00:41 2026 GMT
Not After : May 14 03:00:41 2026 GMT
Subject: CN=56c0137e9e6ebcfa4a8c6a17a6a7d3ff7a681a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:a7:16:38:eb:8d:31:70:73:b9:81:01:37:
3c:c8:4b:69:27:f7:60:9c:4e:1b:bb:24:74:0b:e7:
da:00:9f:e3:b1:13:f7:0c:f6:85:a2:36:38:5f:f0:
ea:b5:d2:5d:1d:2e:b7:c6:fe:cb:6f:72:1d:49:6b:
32:75:ed:0b:1c:69:d1:fc:a1:da:8a:dd:dd:c4:c5:
fd:9d:5c:42:ec:78:ac:76:d9:c9:fa:0b:7d:77:f4:
4e:48:35:8d:9c:39:11:9a:37:72:13:e9:0f:03:80:
0a:ef:c9:b7:0b:52:5f:56:a4:fe:14:d0:2a:97:ed:
3f:5e:57:0a:de:68:b3:0f:aa:1e:8a:13:e7:48:d0:
2f:e4:19:4c:be:df:d1:8a:ad:3f:e0:db:22:57:3f:
04:8e:21:00:08:12:21:de:88:c4:be:c6:1f:26:9b:
1a:46:6e:8e:23:e2:91:45:68:4d:0c:bf:1c:cb:a9:
f9:73:1c:bb:50:6c:22:ee:e0:38:fa:20:36:1a:10:
4f:66:26:7a:4f:74:8f:94:0a:f4:76:58:71:5d:f0:
92:11:01:1c:fa:1b:0d:5d:55:fd:5b:39:33:22:36:
9a:cf:85:1b:f0:eb:a3:6c:e7:1e:26:87:95:c0:2b:
fb:22:aa:94:8f:b3:c9:65:f5:5c:6e:a9:3f:cb:6e:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:13:7E:9E:6E:BC:FA:4A:8C:6A:17:A6:A7:D3:FF:7A:68:1A:76
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:bd:b8:85:1f:81:7c:26:21:1b:cf:91:44:f0:1a:5c:0b:
45:b4:dc:61:2f:30:5e:92:a0:41:19:b2:5f:bd:ad:28:c7:2c:
0b:cf:26:6f:6b:ea:11:3f:8a:60:a5:77:11:2f:7f:7c:0d:af:
69:8c:ed:24:59:40:d0:a9:f2:dd:fe:11:d8:cc:7b:64:cf:b0:
36:9f:9f:8b:8f:07:03:b4:02:6f:eb:c3:93:25:79:39:57:b8:
91:51:a2:50:3b:d6:98:04:17:71:e0:f8:a7:d0:d9:65:95:07:
44:a3:d4:80:7f:a8:60:44:4f:a1:f6:38:ef:ad:f3:5c:67:a1:
24:a5:e8:a7:aa:e5:ca:ae:e7:28:ff:e3:de:3d:ff:96:98:20:
6f:6b:46:55:74:e1:e2:e1:c8:d2:9b:09:ef:8a:70:97:da:22:
df:62:81:6f:08:c6:15:a1:7b:5b:54:44:83:8e:82:e6:4c:9a:
b8:2c:c7:9b:ef:09:29:c1:19:48:50:9a:d7:fe:52:99:99:9b:
d4:71:8f:22:98:aa:31:dd:20:7d:99:f4:ed:55:5b:66:43:2a:
69:da:e8:90:76:26:e7:25:15:f9:70:18:50:6c:b9:32:fb:28:
1d:01:2c:41:f4:42:04:69:3a:7e:70:6c:d3:90:b3:38:0d:cc:
1c:5d:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:24:28 2026 by rpki-client