Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: TVfVVPnUbixFbOJqe6R9wjYJzQH0al0T+KI1dXgrj1U=
Subject key identifier: 01:03:B2:F9:54:57:61:70:37:4F:6E:E5:5B:F1:96:57:F1:21:16:58
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01A0DE05D3D62A0014E6F7F9CE4AF803CC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 1268
Signing time: Sat 26 Sep 2026 14:01:58 +0000
Manifest this update: Sat 26 Sep 2026 14:01:58 +0000
Manifest next update: Sun 27 Sep 2026 14:01:58 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 6uDM2RXdb/BI5Qor92+lozT9N73QDC8GQx5Lz+kHSg4=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:d3:d6:2a:00:14:e6:f7:f9:ce:4a:f8:03:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Sep 26 14:01:58 2026 GMT
Not After : Sep 27 14:01:58 2026 GMT
Subject: CN=0103b2f954576170374f6ee55bf19657f1211658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:1a:f5:69:02:3b:88:07:f7:0a:81:81:4c:
77:47:a5:4f:cc:15:d1:f9:6c:f0:b2:50:76:a0:a8:
c6:0f:66:f2:d3:37:a3:f0:e3:c8:5c:13:a0:39:1e:
0b:9a:38:c6:56:dd:8c:24:8f:a3:73:dc:f7:86:93:
f9:54:07:b7:a2:86:2a:eb:25:db:33:54:43:96:e6:
44:81:29:0e:3c:5d:7d:4f:3d:8e:b2:f3:17:10:9b:
c4:bb:55:ce:91:76:5c:24:b6:22:83:0c:5b:99:84:
a5:72:ff:fc:af:2d:58:6c:47:b0:39:d4:0c:1d:0b:
89:b5:d1:f9:63:48:b6:ed:43:f8:99:82:f1:b3:fd:
23:bb:43:76:02:f9:9a:84:49:23:bc:6b:48:48:14:
4c:93:eb:2a:85:d7:b4:94:f7:a0:72:5a:90:8f:86:
72:c2:99:f9:87:e1:bd:40:6e:c8:b5:43:92:e0:3f:
b0:8c:b8:6f:c1:19:15:4b:ef:1f:55:77:c2:89:73:
b0:4b:85:22:24:66:66:85:f9:b0:ef:9a:b4:bc:f7:
6d:30:74:5d:ef:62:d5:36:5a:72:1f:f6:ed:d0:c2:
e4:51:83:b2:4d:18:1a:02:37:8a:aa:e4:e1:07:35:
08:2e:d4:23:91:d7:c6:c8:d4:59:51:0e:95:02:85:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:03:B2:F9:54:57:61:70:37:4F:6E:E5:5B:F1:96:57:F1:21:16:58
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:e1:fa:50:0b:e1:e7:e8:ed:c4:d6:a8:7f:89:89:e9:9d:
53:7b:f2:d7:b0:8b:b8:33:a7:6a:e3:62:0b:25:6f:02:45:47:
c7:06:fd:63:89:ef:69:40:c5:3c:ad:5c:e7:6b:ad:e0:53:7f:
b1:c6:62:e7:9d:00:7b:7a:c5:ec:ae:a9:ae:1b:d4:35:2a:06:
81:69:9e:16:fc:5f:1d:10:df:c0:69:3b:d0:6d:ce:51:da:6e:
91:53:9a:d2:47:2f:d3:ae:3e:37:0b:d5:2d:70:a4:e8:29:c0:
c6:0c:42:e2:2e:18:92:40:ec:05:6a:55:5c:03:c7:19:01:30:
b0:d1:d8:47:58:11:12:ec:65:67:c3:b3:6c:c6:c0:54:4a:f0:
19:3a:e0:fa:d8:4f:c4:a6:6a:3b:ba:66:45:cd:c5:40:d6:fb:
40:78:62:7c:dc:96:c6:b3:75:22:59:2d:e9:95:92:d3:6e:e5:
f7:f0:3a:0b:90:32:53:c0:73:48:9c:f0:d8:22:d3:8f:91:d7:
1b:07:e1:bf:ae:84:b1:7a:88:73:d3:e9:ee:9b:3e:ac:06:bd:
ff:9f:92:e4:93:f7:98:eb:d7:ca:a0:14:48:80:07:c4:5e:c5:
47:24:95:6b:b4:ca:86:86:a4:47:21:66:3d:2c:a4:6c:4f:e1:
3e:9e:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:22:59 2026 by rpki-client