Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: tGJeku3u3LekBFGTKaMaPlBzMzkMPDJFt7LdWbDoEbg=
Subject key identifier: 02:2A:3F:F8:FB:A3:86:1A:21:4D:CD:41:55:7A:75:F3:AF:72:64:36
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01A0D3F07247C47781C5E7219EEFF9D86455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 15:02:25 +0000
Manifest this update: Thu 24 Sep 2026 15:02:25 +0000
Manifest next update: Fri 25 Sep 2026 15:02:25 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: gMfTOxLIlOZdbzvPWmLvIMbMDZwhlQjM+vDvMdmSBVU=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:72:47:c4:77:81:c5:e7:21:9e:ef:f9:d8:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Sep 24 15:02:25 2026 GMT
Not After : Sep 25 15:02:25 2026 GMT
Subject: CN=022a3ff8fba3861a214dcd41557a75f3af726436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:c0:70:1d:79:a4:4f:cc:f3:54:ff:f4:2d:
e4:39:fa:e6:0d:91:e6:b4:69:f9:0d:69:db:8b:69:
5f:85:37:f4:9d:04:5b:fc:e0:89:3e:fc:ab:72:f9:
1c:8a:7d:19:0b:0e:88:7d:24:7f:cc:59:87:61:ee:
63:20:2f:f7:b0:f4:2d:27:a1:66:7d:cc:87:95:4d:
bc:0f:c1:6a:2f:77:56:00:c5:a6:d7:91:8d:63:89:
3f:15:bf:f2:fa:1a:12:83:62:6b:fe:dd:85:28:f2:
13:ca:5c:8e:fb:60:7a:11:00:02:7c:c7:90:c4:bd:
ca:b3:f7:29:e0:a7:5a:82:a8:79:77:9e:98:7c:fc:
a3:ec:a6:60:27:f9:02:94:3a:b1:18:32:61:4e:80:
6a:79:5f:6c:c3:98:e9:6b:10:cd:c5:91:5b:bd:e1:
37:9d:76:ba:12:ad:e7:e0:93:e0:9a:f5:0f:1f:c2:
d4:6c:52:c8:1b:6f:cd:de:fb:bd:c5:ea:61:c9:e6:
3d:69:de:96:5c:97:59:25:b4:74:59:04:23:cb:43:
10:4a:63:00:ca:52:de:cd:b8:b7:60:e7:f7:72:94:
35:91:5f:61:f9:3a:f8:42:08:80:27:25:3f:61:36:
58:81:63:8e:40:2d:44:c5:90:a5:f2:07:39:7e:45:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2A:3F:F8:FB:A3:86:1A:21:4D:CD:41:55:7A:75:F3:AF:72:64:36
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a4:b4:1d:36:65:13:64:6d:4f:e2:49:4c:9e:86:39:0c:6b:
7e:fb:78:67:8e:b9:6a:31:34:e5:44:35:98:54:a3:01:cb:d6:
96:4c:a2:45:48:89:73:af:fc:cd:06:7b:c0:8c:1a:6d:32:b9:
c1:ea:f5:6d:f5:69:62:26:9b:61:08:ce:3e:c7:f2:a5:3d:63:
66:de:6a:9b:94:1e:6f:05:7c:91:93:4e:94:fe:12:f0:95:b6:
14:d2:da:3a:7c:af:0b:94:cd:09:fc:3d:31:52:43:ae:3e:87:
28:49:41:c3:7d:65:54:e0:bd:b4:44:10:3d:29:8d:b1:df:3c:
16:98:9d:bf:cf:f1:ae:bf:40:44:a9:92:2f:33:aa:79:a0:e8:
0b:8c:78:18:f4:4f:c9:05:4f:33:14:f7:09:74:40:0a:ee:1e:
9c:ec:e5:e7:e1:cf:93:ce:0e:67:c7:95:0c:b6:19:35:9d:e1:
1d:d5:7a:c4:b7:e6:a2:4b:a5:48:95:6a:53:97:70:35:ae:14:
a9:96:e5:0f:e7:37:aa:64:f0:d6:14:9f:b5:a2:f0:42:5c:a6:
af:73:6d:32:0a:dd:44:38:91:2c:e5:e5:12:ee:c7:ed:d1:de:
af:a6:ca:92:7a:c0:9a:78:b5:06:83:3f:a2:6f:93:3b:4b:55:
6b:8c:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:57:37 2026 by rpki-client