Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: IGIliKT+TKVLaxwTl4r7OQz9fFt45sAEnF7OzEv/OYk=
Subject key identifier: 89:08:35:CF:90:30:08:FC:1F:E9:0B:30:88:32:AC:A5:3B:97:A4:9C
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019D27E09005F389608500C814F848754D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0CC6
Signing time: Thu 26 Mar 2026 02:02:01 +0000
Manifest this update: Thu 26 Mar 2026 02:02:01 +0000
Manifest next update: Fri 27 Mar 2026 02:02:01 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 9WZEMeVrNcH5tT+LpmJaCTk+b5EgYAfYUTt/P0IxSeI=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:90:05:f3:89:60:85:00:c8:14:f8:48:75:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Mar 26 02:02:01 2026 GMT
Not After : Mar 27 02:02:01 2026 GMT
Subject: CN=890835cf903008fc1fe90b308832aca53b97a49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:4f:48:8c:da:f3:f7:ce:d5:eb:3c:cd:9a:
5c:53:a4:0f:12:49:21:dc:c3:7c:ed:35:8f:3d:77:
29:46:86:3d:36:c7:28:3d:87:ca:6d:d9:e3:04:dc:
ec:0a:25:96:3c:85:5b:91:9a:87:20:11:3e:b9:17:
ee:4f:ae:c0:6b:00:0e:65:fd:76:6d:4e:bf:11:da:
48:d0:42:f9:57:69:1c:3d:29:65:f2:4f:67:34:c9:
64:b9:55:2d:0d:07:47:91:86:4f:58:db:1e:8e:fe:
f3:65:36:1d:ff:18:f4:2a:d3:e2:13:24:22:ed:d8:
c0:45:b0:b3:99:b2:96:3d:be:8a:4e:75:92:46:9d:
73:f4:79:b6:24:14:31:21:28:de:9a:b5:e5:9e:ae:
60:90:34:37:44:84:cf:24:f1:2a:ed:82:f2:78:59:
a2:02:e9:26:37:9c:ca:bf:62:ff:f7:94:69:26:f1:
ed:ad:51:f4:4b:72:bf:2d:b9:4c:36:e1:00:13:bf:
52:06:bb:40:16:46:8d:0e:e5:80:84:1a:45:34:6d:
12:7d:a4:ba:b3:5b:8d:23:fa:13:63:a5:d4:99:ef:
f0:e5:cc:62:21:19:0e:d8:50:4c:4b:e7:67:88:b7:
eb:7e:da:63:c2:a3:a9:2e:05:4a:6f:83:29:f2:9e:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:08:35:CF:90:30:08:FC:1F:E9:0B:30:88:32:AC:A5:3B:97:A4:9C
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:72:51:86:b2:33:e5:c5:39:c7:07:a9:03:8a:6a:e6:13:6e:
64:0a:35:ec:2c:05:7d:83:2c:8d:6a:73:96:77:42:28:ec:59:
9f:90:bc:f0:9c:3b:09:2e:30:0d:45:10:23:d3:12:34:bf:bd:
08:24:7c:9d:d4:f7:9f:1d:67:16:e1:81:d3:24:0b:a1:54:0e:
1a:6c:11:0b:16:4b:87:cc:c5:bc:6c:2c:b8:8b:b3:80:ba:1c:
9c:c0:a5:b0:b0:76:8d:15:b0:96:1c:5f:30:32:19:a0:7e:03:
d2:a2:74:86:f5:c7:0c:2c:6d:38:43:7f:b5:fe:40:c0:d0:b4:
ff:c4:b9:4e:ca:e4:02:93:c2:50:ab:d2:ee:b8:0b:b8:0f:3f:
c2:68:f6:43:ee:f7:62:02:c1:f1:b8:33:1d:1e:04:85:21:fc:
e8:f9:e8:a0:9d:08:a5:4b:34:f3:9f:fc:e4:19:2b:52:cd:1b:
40:15:30:a8:8b:f8:03:96:7a:cc:fe:61:cb:f8:c0:52:85:56:
f9:b4:55:38:04:57:5a:aa:3c:52:79:2b:bb:6a:3d:22:b2:08:
6b:92:29:dc:e9:d5:b5:20:14:09:03:e8:fa:2e:fe:2a:6d:86:
e7:e0:50:24:56:c2:6f:eb:f2:5c:6f:d3:eb:5e:66:7b:03:d0:
82:8d:52:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4JAF84lghQDIFPhIdU0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YWYyMGMwMjZkZTEwNGQ5NmYxN2FjYmFmNGU3ODdlZjlk
MzAyMDYwHhcNMjYwMzI2MDIwMjAxWhcNMjYwMzI3MDIwMjAxWjAzMTEwLwYDVQQD
Eyg4OTA4MzVjZjkwMzAwOGZjMWZlOTBiMzA4ODMyYWNhNTNiOTdhNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDhPSIza8/fO1es8zZpcU6QPEkkh
3MN87TWPPXcpRoY9NscoPYfKbdnjBNzsCiWWPIVbkZqHIBE+uRfuT67AawAOZf12
bU6/EdpI0EL5V2kcPSll8k9nNMlkuVUtDQdHkYZPWNsejv7zZTYd/xj0KtPiEyQi
7djARbCzmbKWPb6KTnWSRp1z9Hm2JBQxISjemrXlnq5gkDQ3RITPJPEq7YLyeFmi
AukmN5zKv2L/95RpJvHtrVH0S3K/LblMNuEAE79SBrtAFkaNDuWAhBpFNG0SfaS6
s1uNI/oTY6XUme/w5cxiIRkO2FBMS+dniLfrftpjwqOpLgVKb4Mp8p6MhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkINc+QMAj8H+kLMIgyrKU7l6ScMB8GA1UdIwQY
MBaAFNWvIMAm3hBNlvF6y69OeH750wIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMt
ODlmMTgxNWQ0YzE5LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wOWQ3MmUtODI2Ny00MzkzLTgzNjMtODlmMTgxNWQ0YzE5
LzEvMWE4Z3dDYmVFRTJXOFhyTHIwNTRmdm5UQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3JRhrIz
5cU5xwepA4pq5hNuZAo17CwFfYMsjWpzlndCKOxZn5C88Jw7CS4wDUUQI9MSNL+9
CCR8ndT3nx1nFuGB0yQLoVQOGmwRCxZLh8zFvGwsuIuzgLocnMClsLB2jRWwlhxf
MDIZoH4D0qJ0hvXHDCxtOEN/tf5AwNC0/8S5TsrkApPCUKvS7rgLuA8/wmj2Q+73
YgLB8bgzHR4EhSH86PnooJ0IpUs085/85BkrUs0bQBUwqIv4A5Z6zP5hy/jAUoVW
+bRVOARXWqo8Unkru2o9IrIIa5Ip3OnVtSAUCQPo+i7+Km2G5+BQJFbCb+vyXG/T
615mewPQgo1SXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:52:32 2026 by rpki-client