Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: nEi9j/ljjgE0VT1H0wCYNQwmUoVzB44DGY0hhS/hUUs=
Subject key identifier: 8D:0D:B1:61:E1:1E:7D:44:3A:9B:D4:F1:03:2A:6A:01:DC:6A:F0:12
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019D262893E7B870FCF1F61A8077BFE1ABA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 013C
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: skOgiDxSlKnIjbhTAkRWttmiDjMA15SAegkqlF/KTH0=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:93:e7:b8:70:fc:f1:f6:1a:80:77:bf:e1:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=8d0db161e11e7d443a9bd4f1032a6a01dc6af012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:a7:11:25:84:65:b8:11:ed:01:9b:52:16:
ec:3b:ab:25:9e:13:c5:33:90:b7:0f:69:35:c8:9f:
09:8c:42:9b:0a:a6:82:7a:60:54:ba:0c:26:11:95:
71:0d:ac:71:cf:21:81:f7:a3:e2:0d:3f:5c:58:63:
52:99:29:db:b9:81:0d:32:3f:ba:1e:2b:85:3e:b3:
9b:be:ab:da:97:5d:f0:52:74:8b:d4:f4:7d:2d:05:
f9:b1:bd:06:0b:d6:67:91:ca:d5:13:0a:c1:71:3e:
b8:4d:cf:e1:6d:a7:9b:67:7f:5d:bc:3e:f1:08:4d:
1a:af:7b:72:be:a2:32:c2:a5:a8:df:c8:29:b0:90:
e7:12:b2:0e:76:14:cb:79:b1:17:d6:9b:35:47:55:
fe:93:df:de:65:d4:56:46:25:ca:1f:67:72:72:ae:
d0:ff:83:1e:98:c5:a9:c2:8e:6b:9b:be:76:8c:43:
02:9b:16:69:27:25:13:cd:ba:4c:43:fe:79:3d:5d:
0c:81:d6:36:39:31:ab:f0:07:02:f6:75:07:d3:a7:
c2:e8:a0:c5:fb:8e:5c:72:21:9f:73:8e:7e:79:18:
96:48:05:07:24:25:9a:b6:c5:01:15:73:3b:a2:92:
d7:5f:8c:79:7c:d1:a4:7d:eb:1f:57:3d:a7:b2:94:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:B1:61:E1:1E:7D:44:3A:9B:D4:F1:03:2A:6A:01:DC:6A:F0:12
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:e3:95:54:08:3f:e6:d9:a5:d0:62:4a:2f:8b:00:b0:df:
d2:d7:e6:3e:44:24:c0:1c:d9:0a:fb:d9:2e:b1:6f:1a:c8:bf:
a8:41:f5:c0:d1:2d:a7:63:e0:71:34:46:8f:b9:ef:0d:f7:5f:
55:04:c4:76:0d:59:b8:36:28:5c:47:a2:b1:e0:78:8f:d6:92:
b4:2e:96:e4:18:10:03:bd:81:63:bd:4f:07:73:d3:f0:a4:11:
93:13:74:34:53:ae:03:32:4f:99:c4:03:14:16:43:c8:f7:52:
ab:4f:d9:85:ee:a5:bd:c5:ab:47:7c:84:15:32:83:55:7f:61:
f4:c5:21:ab:f8:60:f4:a6:7e:fe:16:8f:04:1e:b4:90:6d:82:
04:8e:15:04:2e:78:63:80:b8:84:00:ab:f5:3a:69:db:d4:d6:
71:2d:74:12:65:f4:4a:a1:f9:e0:f9:b4:c7:41:49:66:22:87:
fd:09:65:02:73:8b:6b:b0:a4:32:19:e8:62:f1:a8:89:06:53:
47:4e:64:c1:6e:1f:2d:ee:40:e1:63:90:cf:dc:e4:fe:64:0e:
cf:ff:53:85:32:ee:48:fc:9a:e6:b6:16:57:1a:66:e0:70:8c:
af:36:ce:ee:15:05:50:0b:b9:4f:40:3a:59:9a:d4:d6:1f:5e:
25:17:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:16 2026 by rpki-client