Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: BV129lBT9MC9PPavdmAEXncSkGcbauiT5di4s5Q2jks=
Subject key identifier: B8:9C:C9:53:68:F8:4B:C3:59:96:41:36:39:12:50:03:1E:46:B4:96
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 019D288479F4D6BF0194DA14B2A4F5385CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 09BE
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: EPk8mN+bM2YIrFIKf9QYa1qf56Khi1ttw7NVKLDvnqs=)
2: GYutIkRnUUe6rU3f0KqhJg3i2C8.roa (hash: T8JwYcJCmU9VHg+cmAioCuzk66qEr5evLlhmPjOOj8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:79:f4:d6:bf:01:94:da:14:b2:a4:f5:38:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=b89cc95368f84bc359964136391250031e46b496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:81:db:e3:5f:a4:cc:ed:a7:2f:a2:04:7e:
b7:f6:e4:d7:d7:55:0c:99:64:18:49:10:27:88:92:
8f:53:9b:39:c0:ee:ef:55:36:78:a0:d8:29:39:95:
2a:e9:22:7a:a9:39:89:d1:03:20:df:6d:17:81:d0:
b2:91:02:31:7c:e9:9a:76:3e:b2:54:8a:58:9a:c6:
d1:47:ba:e2:c1:16:45:f9:96:35:b5:f8:6f:2b:01:
34:b8:3d:27:27:6a:2a:c4:69:2f:2d:9b:31:aa:ec:
04:63:1e:cc:3d:75:13:fa:58:aa:06:26:b4:02:e9:
62:04:dc:03:af:64:90:3e:7e:5a:cd:b4:b6:6a:e1:
bf:02:c2:be:94:5e:cd:fc:ca:fc:11:2d:df:39:06:
e6:15:0d:fc:91:bd:31:6a:24:18:d8:d9:14:b3:c2:
e4:5b:92:f8:33:b8:61:cb:80:ba:aa:13:d6:5e:33:
74:5c:1a:f5:7b:ab:74:75:dd:ee:3e:c0:8e:58:28:
c2:21:8d:45:c9:83:2c:fe:de:2f:74:d9:eb:26:0f:
6c:b8:12:c0:da:ff:30:22:73:d0:c8:f0:e2:98:73:
0f:0c:61:66:f4:61:f5:8c:de:ae:ea:9e:5d:cc:10:
55:36:91:83:c5:28:6c:4f:0c:74:ef:7b:d6:60:49:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:C9:53:68:F8:4B:C3:59:96:41:36:39:12:50:03:1E:46:B4:96
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:91:24:91:8e:d9:3d:2b:fe:05:38:b6:3b:c7:89:d5:65:
6a:2b:cf:f6:d8:02:10:22:05:cd:c3:44:18:ef:48:00:d5:01:
13:1a:11:18:5f:09:0d:cf:3e:56:58:72:f7:3d:c4:20:47:81:
f4:c4:be:ae:d7:c4:d2:9f:81:b4:03:59:01:00:aa:66:3e:bd:
ff:27:81:ed:99:b8:df:0f:27:b5:ed:f4:79:8b:25:61:54:66:
dc:cf:de:34:ef:8e:a5:3b:61:1d:28:df:78:99:b2:43:a5:e2:
52:e0:91:98:86:11:5f:f0:b6:78:04:0b:a0:eb:f4:49:ac:6a:
65:d7:0a:50:71:98:89:61:56:72:79:2e:a8:7b:12:36:e5:9f:
2c:59:6c:18:4f:34:04:bb:ce:e6:47:62:da:32:4d:bf:b5:a2:
68:ff:56:91:6d:36:ef:fa:48:44:3f:0e:a1:c5:d7:bd:1d:14:
82:6b:45:0f:a5:04:f5:c2:de:38:b5:ca:8c:72:8c:8b:d9:67:
ac:b8:96:13:41:97:49:94:24:af:a7:ee:12:03:55:fa:bd:42:
19:10:d9:7b:de:c8:d3:ba:7c:6a:36:1a:68:0a:21:3a:e4:d9:
83:fc:5f:1a:da:fd:02:29:ac:6d:ea:02:01:6d:b9:f1:ed:13:
06:08:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:27 2026 by rpki-client