Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: gA2RIxsh8+xjUTY4ZjCWsUzcVhomLDSxZVH1Z3A904g=
Subject key identifier: 3C:9A:F4:A7:7D:B9:5D:FF:A9:86:80:83:BB:E7:FF:5B:53:8B:0F:2E
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 01A0D3EFD842C1460D690CBA552FF4E63B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 170D
Signing time: Thu 24 Sep 2026 15:01:46 +0000
Manifest this update: Thu 24 Sep 2026 15:01:46 +0000
Manifest next update: Fri 25 Sep 2026 15:01:46 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: Yvl55EdHF8ips1LmaZvxs8oFoWhR/xyRItj6GhiGsG8=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:d8:42:c1:46:0d:69:0c:ba:55:2f:f4:e6:3b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Sep 24 15:01:46 2026 GMT
Not After : Sep 25 15:01:46 2026 GMT
Subject: CN=3c9af4a77db95dffa9868083bbe7ff5b538b0f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:61:ba:47:92:11:27:04:89:c2:e2:d4:9c:
9d:db:e0:34:9b:ae:1a:41:2e:cf:4e:3c:51:5a:9f:
a9:a6:b2:e9:31:e2:2e:c6:19:c4:bf:8b:c1:85:d5:
06:ab:78:36:2a:5b:8b:f8:f3:fe:da:59:a6:45:71:
c8:5f:2f:c1:fb:c0:f4:07:00:50:24:6d:5b:ab:b7:
48:2c:37:54:3c:e1:ab:4a:c7:b3:62:06:2e:73:1b:
5f:ac:c2:17:2e:02:33:5a:bb:8c:fe:45:e0:33:05:
41:44:93:b5:da:c0:95:59:a9:69:a7:0e:58:29:09:
9c:01:f2:70:39:ef:df:53:fe:c3:a3:82:c9:5c:2e:
3f:89:9c:a3:15:ec:60:c3:fa:86:62:f6:ff:ef:f1:
2d:38:f3:62:77:72:59:29:21:f1:82:13:32:ae:78:
5b:f2:7d:cc:43:d9:33:dc:60:5a:c3:03:33:06:aa:
56:8a:9f:94:25:6e:f3:04:be:b6:6e:31:90:ca:dc:
2c:67:af:af:a8:b7:f1:d1:80:09:16:d1:45:8f:51:
20:1b:57:5f:2c:68:c3:8d:92:37:ae:6e:ea:b2:1d:
22:af:0c:09:48:4d:7d:30:91:62:15:7c:5b:fe:20:
4c:9a:f9:2e:d8:dc:42:b2:ff:a0:38:00:0b:57:7e:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:F4:A7:7D:B9:5D:FF:A9:86:80:83:BB:E7:FF:5B:53:8B:0F:2E
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:f0:5b:0a:da:99:f5:ab:80:3b:2c:8c:5f:be:96:0f:34:
4d:d5:17:df:a7:04:72:58:36:d6:17:cd:1d:b9:7c:24:ed:e8:
d7:68:bf:06:b6:9f:91:cf:2e:8a:d4:48:cb:80:bc:75:a8:11:
35:6a:a0:e1:a0:39:bd:2a:7e:54:39:d8:1d:7a:c2:7e:ef:6b:
23:8e:c5:9b:76:19:5c:97:d9:3a:90:55:d6:1d:25:e9:d8:6e:
4f:67:1b:c1:d9:75:71:26:ab:c7:9e:c0:8b:03:02:03:ea:2a:
43:d2:39:10:4c:31:ed:de:67:a2:af:78:1e:40:02:0a:d7:a5:
0f:3a:ce:16:0e:fb:4e:77:c1:d6:f8:67:5e:61:15:31:00:3f:
8b:a8:79:be:73:09:a6:fa:09:7e:12:44:f4:e4:38:5f:47:97:
54:3f:05:4b:85:ba:cd:f0:bd:77:1c:04:76:13:8d:21:e1:45:
87:f6:6c:99:61:c5:3e:b1:19:05:11:75:f9:2f:4d:31:59:f4:
8d:c9:23:7b:fd:0c:c7:87:2b:6d:04:0c:54:00:65:a7:b2:5c:
62:dd:77:17:77:32:9e:1c:3c:d9:92:56:a6:47:31:1f:ef:e2:
5c:7d:bf:ff:08:1a:ef:bb:20:39:eb:00:13:4d:72:f6:30:d6:
fd:f6:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:12:40 2026 by rpki-client