Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: r0j9rcHQp7vxszSq9IJ0c4BRE3VC2nSa9C1RwglFtdY=
Subject key identifier: D7:CE:8E:B4:6D:8B:AD:F5:C1:E1:15:2A:65:C8:54:70:53:5E:CA:FA
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019D27DFF4C6233AEA8488268C89B7BA5309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 107C
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: S2OEOCow974PEpK4WuwoNpOmigsI+GQmloAhRzM3mGA=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f4:c6:23:3a:ea:84:88:26:8c:89:b7:ba:53:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=d7ce8eb46d8badf5c1e1152a65c85470535ecafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:cf:6c:17:b3:ce:57:07:ae:23:a8:25:29:
c1:45:29:01:5d:84:28:21:71:7a:ef:ce:d2:d6:40:
ee:f0:30:67:1b:a2:d7:5b:c1:8e:61:37:d1:df:83:
50:4d:da:e0:3e:5d:4d:cb:40:47:b0:2a:5e:29:64:
0e:e9:6a:78:02:f3:24:86:1c:df:e0:ed:89:37:36:
9a:e3:9c:4e:18:c8:0d:4a:7f:b1:5f:89:1f:f6:53:
0e:54:9e:2f:0b:73:e0:b7:f3:c6:3c:00:cc:c5:13:
1d:d1:41:af:28:91:97:15:59:e5:67:13:28:f8:0f:
e6:b1:d4:b0:99:1c:41:c4:08:1f:f6:be:59:26:00:
b0:d9:f2:ce:9d:ee:cd:73:88:02:7c:b8:e1:d8:16:
6a:ef:56:16:17:2c:09:77:33:9a:92:df:5a:8e:0b:
f9:63:63:31:b2:da:83:a1:6a:aa:4d:6d:f2:52:7a:
c1:bb:3d:ab:fc:74:0e:77:d4:1d:50:87:2d:73:45:
a3:e5:d7:62:4a:87:bd:3f:23:73:42:26:5b:30:a0:
14:0c:7d:35:90:3b:08:56:be:9f:a1:19:c9:b1:16:
01:cb:b5:4b:08:5b:6a:a5:85:3f:35:72:4d:0d:30:
35:b8:f7:fd:20:c6:7b:92:0b:67:53:27:b0:ea:58:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:8E:B4:6D:8B:AD:F5:C1:E1:15:2A:65:C8:54:70:53:5E:CA:FA
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cc:e6:c4:c5:55:3b:d6:61:87:a2:fc:30:81:2f:20:59:6c:
5a:2a:69:2a:99:e0:14:d3:0d:9d:e4:de:b2:d7:24:bc:6e:71:
55:ee:6c:b0:e8:47:d1:8a:19:d6:b6:2c:8b:77:0c:52:b7:c7:
b0:83:bd:30:fa:0c:74:48:7c:2c:a7:24:3d:06:18:c4:0a:d3:
be:14:90:aa:d1:6d:5e:73:34:5d:04:cc:83:95:82:5e:43:cf:
d9:d1:e6:49:cd:4c:9e:af:f1:c8:3d:05:9d:53:48:f6:10:e1:
1c:82:18:f6:00:f0:01:c0:78:dc:e0:b6:b7:c2:02:48:b2:6e:
09:ab:a4:a1:1a:13:f6:b7:ef:01:b9:8e:73:7a:6d:8c:15:7f:
74:e6:bc:f6:4d:f8:3d:6b:8c:6c:ba:00:79:c1:90:9f:cc:c9:
a6:66:69:ed:ec:1d:5e:45:d4:a8:34:e3:d1:a0:70:c5:63:c9:
51:97:52:3f:f7:52:ea:b0:a1:15:bf:cf:66:ec:74:bb:db:08:
21:e2:e0:61:e0:99:d4:80:5b:f9:90:35:a5:c5:25:50:96:bf:
aa:9d:07:08:91:f7:5a:78:cb:3a:ef:82:c9:3a:8c:4c:4f:a3:
e7:7e:2a:9b:89:27:8f:91:3b:fb:2a:f3:06:5a:06:86:4a:d1:
7f:2a:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:26 2026 by rpki-client