Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: 8sSuQp2uWfHJ/NUpo8+tAM/ct9qG2FeezDa1YdwbHIY=
Subject key identifier: 69:9D:0E:27:BA:89:77:82:04:79:82:3C:F8:0F:5D:41:AD:F3:34:90
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019D296129E122D053F5FC062419F38DDDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1527
Signing time: Thu 26 Mar 2026 09:02:06 +0000
Manifest this update: Thu 26 Mar 2026 09:02:06 +0000
Manifest next update: Fri 27 Mar 2026 09:02:06 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 8rRmC5dgv59EJpzKTBzw6PbtUrPiCLrpuFtrCt5XN/s=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:29:e1:22:d0:53:f5:fc:06:24:19:f3:8d:dd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Mar 26 09:02:06 2026 GMT
Not After : Mar 27 09:02:06 2026 GMT
Subject: CN=699d0e27ba8977820479823cf80f5d41adf33490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:35:71:1e:6f:92:9f:6c:e6:c5:68:3e:bb:
a5:42:15:65:8a:c4:a4:9c:29:a4:9b:ed:53:17:45:
a8:57:1e:43:b6:3e:6e:e7:d0:77:f2:9a:2e:5b:79:
12:a6:37:23:72:c1:20:41:10:43:e3:bc:44:83:e3:
aa:95:4c:5c:e1:03:89:d2:cb:0e:09:b0:08:1d:5d:
5d:c6:d8:62:27:e7:71:5c:5b:28:3a:86:80:ae:99:
d9:3c:77:d5:49:2d:91:3a:d0:8c:2b:f7:67:1b:a7:
d5:8a:a7:13:32:03:68:44:21:44:ec:d0:5c:05:cc:
8f:66:28:99:43:5b:7e:8c:9a:0e:94:b9:9e:4d:fc:
4c:54:17:38:a2:25:30:45:12:37:e3:30:ce:b8:99:
a3:33:7c:a5:2e:d0:52:50:89:1a:48:2f:63:f1:63:
d5:3c:c5:3f:28:57:e1:51:5a:e6:98:8e:58:ad:28:
8c:f0:8f:9f:95:94:6f:5a:e6:bf:7f:4b:c2:b9:77:
0b:4f:dd:20:b5:6c:f3:d2:f0:77:d2:cc:49:c6:98:
a0:7c:17:0b:18:ad:f5:13:e7:2a:d1:2b:c2:7d:d2:
c2:c6:5b:2e:e9:41:a2:a4:31:4a:ae:c1:28:7b:74:
94:ee:2e:d9:05:c9:24:59:09:bc:b7:34:a3:0d:bf:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:0E:27:BA:89:77:82:04:79:82:3C:F8:0F:5D:41:AD:F3:34:90
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:f2:3d:21:c2:3a:70:46:0f:45:73:50:90:20:90:16:77:
b8:90:6b:7d:aa:84:99:5b:d8:4c:e1:a0:b3:76:de:d2:5f:b3:
32:79:61:61:75:d0:3a:3d:ec:bf:0d:e6:48:93:91:26:34:e8:
d3:46:59:3e:78:a8:6e:9d:96:56:36:47:79:8c:93:ee:8c:bb:
75:82:3e:e1:7f:b8:a0:48:cb:2a:db:59:98:51:e4:45:66:ed:
db:d6:f8:a0:b8:73:b3:33:00:cc:2a:29:52:6e:70:9f:93:ed:
5a:9c:98:26:5c:a8:51:c3:50:64:0a:dc:15:12:02:da:56:a9:
ca:ca:05:bc:b3:bd:c0:40:7d:3f:ef:70:98:cf:8a:7f:d8:89:
61:ca:81:54:4a:f2:b4:65:fd:79:4c:f3:61:67:c1:c3:35:e1:
6d:4b:a1:ab:89:49:7a:93:95:10:3a:3e:80:5e:cc:bf:6e:95:
a6:25:f5:59:27:8d:a5:23:db:65:0e:a3:cd:30:fa:d3:ed:f1:
03:7a:a6:e5:85:7a:66:9b:62:f8:a2:c4:91:3d:ff:88:a2:e5:
d4:76:87:99:80:74:77:a3:3e:94:4b:ad:42:54:6d:36:3d:60:
2a:db:75:93:75:0f:b9:88:4e:a3:9b:16:ba:8a:06:da:24:32:
f2:d0:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:08 2026 by rpki-client