Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: I0ewMcTQq8lGm2LLxHt10S1gBp3k/o39ItuOlJ36BaE=
Subject key identifier: 85:52:B9:DB:89:32:AE:C4:2D:B8:BC:DA:EA:A5:76:BB:4C:CA:FA:BE
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019E1EA2ED2B1FC7094CF67394B100A4E5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 15A6
Signing time: Wed 13 May 2026 00:00:54 +0000
Manifest this update: Wed 13 May 2026 00:00:54 +0000
Manifest next update: Thu 14 May 2026 00:00:54 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 62Bi0AF9nutj8uZQqjsul7g5s82cKcY02pRAKrKjHj8=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ed:2b:1f:c7:09:4c:f6:73:94:b1:00:a4:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: May 13 00:00:54 2026 GMT
Not After : May 14 00:00:54 2026 GMT
Subject: CN=8552b9db8932aec42db8bcdaeaa576bb4ccafabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:d2:f8:33:f8:d2:fe:4e:25:ad:fb:f6:9c:
4b:9f:0c:e3:23:0a:40:54:3b:5a:70:a3:60:f0:3b:
73:22:d1:a7:2d:9c:00:f8:02:ec:21:18:ca:28:f6:
b2:32:f5:33:de:2a:60:9e:5d:ab:e3:3c:05:5d:db:
53:93:64:b7:82:89:a8:49:84:5b:e8:4d:81:bd:87:
99:0f:4c:6a:cb:f3:67:7b:f9:30:5c:6f:3e:be:61:
42:7f:e3:a5:37:00:e6:e6:ce:74:45:43:74:14:a3:
f8:53:c6:a5:4c:cb:78:70:ce:6a:1e:28:29:fc:38:
a9:26:3b:11:09:a8:1a:8f:62:0d:52:17:a1:17:73:
ec:00:76:33:ac:e1:41:f8:c3:e6:4b:6b:d2:ff:07:
1a:8f:cb:84:94:87:49:12:85:23:b8:da:b7:43:8d:
0d:0e:ec:2b:fe:dc:c2:9f:fb:eb:28:8c:88:66:2b:
80:7c:eb:a5:5b:08:ec:dc:81:37:6e:db:cc:86:94:
bb:95:60:cb:27:80:86:69:75:57:72:4e:52:1a:ea:
14:51:4f:38:fc:cb:a4:9e:5d:ab:04:6b:40:06:3b:
bc:7a:14:bc:cf:e3:c9:64:e6:b3:86:0f:d9:c5:58:
ea:90:c2:57:23:4f:87:1e:2b:72:06:6a:25:1d:73:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:52:B9:DB:89:32:AE:C4:2D:B8:BC:DA:EA:A5:76:BB:4C:CA:FA:BE
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bd:1b:e5:82:b9:45:a7:9c:f0:77:54:af:11:e3:f9:95:ae:
85:7a:89:52:ba:e2:32:0f:d6:58:83:a4:79:83:5f:dc:21:f5:
4c:e8:97:2c:61:f1:87:1d:fb:de:fd:83:41:0f:09:f6:54:cb:
7a:40:82:9d:31:25:d9:81:8d:72:df:e7:db:d4:0e:f9:3d:7f:
04:45:0c:b7:b1:16:d7:ff:52:f8:e4:bb:1b:da:ec:8b:e3:7d:
a4:c6:35:e7:81:b2:14:e8:6d:35:87:6b:cf:c7:aa:fe:5b:7d:
1e:9c:da:16:56:fa:73:b5:21:74:69:59:4d:1b:df:61:f4:80:
73:f2:8f:c4:cf:8f:7f:3c:a5:10:dd:d7:70:e2:15:29:c6:f9:
4f:e9:d5:7a:57:ea:8c:10:5d:a3:ca:83:c9:d5:03:01:6f:c4:
14:3d:43:b0:ef:b2:31:55:68:96:6c:19:f5:ca:94:01:4a:d4:
ac:ca:b7:93:09:cd:a1:b4:7e:aa:b0:0a:d5:8c:3d:a6:f5:d3:
db:b9:74:4c:fc:7f:f1:2b:de:c9:ef:0b:ec:e3:8d:1f:a1:00:
53:c6:91:31:68:eb:71:17:2e:5a:f8:56:b2:f9:aa:1a:33:78:
17:f5:da:d1:7a:0e:44:7f:d2:7f:21:0a:96:bb:71:69:7d:45:
0f:f2:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:03 2026 by rpki-client