Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: sAAKUBZKiecMa/Uu3VfMiiw/lKGpVpLHyu/h2Sfv+Zw=
Subject key identifier: 1D:43:00:04:08:FB:AB:4F:87:7F:03:03:F3:F2:9B:2C:7E:4F:A7:3F
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019F9022D5F7886D35061EB87B9D894E8B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0AC4
Signing time: Thu 23 Jul 2026 18:00:29 +0000
Manifest this update: Thu 23 Jul 2026 18:00:29 +0000
Manifest next update: Fri 24 Jul 2026 18:00:29 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: 4WN541a6Xiwq16FAejxAYhOhu3Q7Bu7fLGHBgAGMaCo=)
2: Avk57mm87GqNbPdcL2nyb6gEN5g.roa (hash: egwNzFpWwwhBkaTCld6VT7LDccEkUzZxN7q55tye/20=)
3: v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (hash: cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:d5:f7:88:6d:35:06:1e:b8:7b:9d:89:4e:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jul 23 18:00:29 2026 GMT
Not After : Jul 24 18:00:29 2026 GMT
Subject: CN=1d43000408fbab4f877f0303f3f29b2c7e4fa73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:17:f6:9e:a1:d6:86:7a:a8:0a:c2:0a:d0:
44:ea:52:ca:4b:9f:c5:01:40:53:62:38:12:00:78:
b9:49:c5:06:98:7d:cd:71:8a:8f:60:66:6d:6f:b2:
70:f9:a7:c4:0a:97:b4:c8:db:26:0b:45:07:cb:1f:
f9:9f:90:7f:bc:85:19:10:b9:90:27:38:c5:b4:68:
bd:79:dd:f0:91:04:b9:03:a4:f5:09:7a:2e:8f:40:
be:44:61:9d:64:82:16:c6:53:d4:78:8a:2d:4d:97:
c3:b9:85:00:63:be:da:30:33:21:31:b9:fa:db:93:
1c:ef:aa:89:33:a7:1b:1b:2c:d3:ec:78:de:3f:6c:
c3:eb:dd:38:d2:52:ad:49:0f:c9:ef:db:39:bb:19:
62:60:6a:3f:cb:af:21:06:1e:1a:95:ad:eb:de:5c:
08:dd:d2:e3:a2:ea:ab:0e:66:f4:95:f8:41:98:a9:
38:0e:2e:72:6b:48:2c:b7:bc:a0:ef:07:b6:17:5e:
86:9a:a2:02:7e:cd:fc:e1:c4:71:e1:32:94:a7:f1:
b2:8c:e3:84:40:67:87:65:90:18:f1:e9:c3:e1:85:
da:4c:38:6b:9d:38:65:15:79:5b:33:71:39:15:74:
b7:d6:50:32:c3:85:68:57:43:da:87:df:9d:4d:16:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:00:04:08:FB:AB:4F:87:7F:03:03:F3:F2:9B:2C:7E:4F:A7:3F
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:23:c6:0c:9c:07:26:a2:33:e7:07:39:fe:0c:64:9e:b2:
5a:f7:1b:1f:15:61:eb:f6:7e:3d:0c:a0:bc:7c:7a:f3:66:b0:
4c:6b:72:93:07:99:59:d3:a9:40:75:92:b9:dd:5e:d5:d6:c9:
c7:94:24:d5:e1:cb:8b:88:0d:e6:f3:30:09:50:e0:3f:04:76:
2d:19:01:32:7e:71:24:7a:a5:73:91:61:51:85:ab:02:4c:0f:
b3:a5:e0:11:79:ef:96:b3:e2:0a:11:d1:97:17:40:ea:38:98:
ba:c8:25:de:97:a1:f3:86:33:53:c0:20:f6:e9:7d:85:ab:dd:
15:b1:dd:65:72:f2:83:7c:ac:8a:49:c3:22:1c:16:da:f4:06:
8d:41:45:68:6a:18:f3:3d:23:b8:fb:82:47:ee:a4:03:52:e4:
be:17:82:de:8d:6f:f2:e0:9c:df:6c:87:4e:90:bb:de:b7:ce:
2e:33:bc:40:b5:8d:2f:fc:c1:56:c6:01:11:41:32:93:70:4a:
83:a9:2b:a2:e8:f9:8f:08:d2:f7:af:05:ee:49:cb:b0:b5:1b:
08:95:49:9f:84:b9:a1:7d:e8:de:39:e6:07:3d:ff:f9:89:ce:
0e:12:10:42:54:53:86:bf:77:7a:a9:dd:6a:51:50:36:7c:70:
02:a4:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:05 2026 by rpki-client