Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: DvkbIgLfmNhc4B2Lad0QDdYK4WvZct0FVb7lO3+kIrE=
Subject key identifier: EE:04:F7:25:1E:80:FB:4A:99:43:84:27:E4:30:2A:7C:5A:DD:25:A2
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019E1D90CBA03018047F7BB3595C61923856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0AA1
Signing time: Tue 12 May 2026 19:01:28 +0000
Manifest this update: Tue 12 May 2026 19:01:28 +0000
Manifest next update: Wed 13 May 2026 19:01:28 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: ei4qqM6s8iKmEKXARNVyHxfKSEcydCZ78L+Tg8tpU8o=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:cb:a0:30:18:04:7f:7b:b3:59:5c:61:92:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: May 12 19:01:28 2026 GMT
Not After : May 13 19:01:28 2026 GMT
Subject: CN=ee04f7251e80fb4a99438427e4302a7c5add25a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:17:41:94:7b:f9:d6:e4:b4:4c:a0:ec:09:
6f:43:44:10:3d:8b:69:d0:15:0d:d6:db:9f:d9:d6:
01:40:3f:27:29:d1:2e:13:7d:77:08:38:db:c8:a0:
5b:db:9a:ea:a2:af:03:d4:36:87:9f:96:8d:f3:e2:
73:8e:b7:f2:75:ca:7a:42:55:08:8b:57:79:16:b1:
49:03:5c:33:33:d7:fc:41:f8:7c:9f:65:17:49:d7:
2f:4c:7e:45:bb:4d:cf:cb:b9:ba:10:51:00:31:aa:
51:54:0f:69:1b:9e:1f:bb:39:0d:f2:65:55:f3:e1:
76:95:bc:50:28:b8:26:2d:cd:1f:f9:4a:e9:bb:39:
83:90:5b:6f:81:d1:67:48:25:04:18:8c:37:14:2a:
b9:44:a7:fd:3e:c3:27:d7:4a:79:dc:24:56:e8:97:
f3:66:c8:5d:9c:b3:95:fc:07:d5:f5:19:25:38:d4:
c7:b1:30:b7:bf:aa:0f:50:73:c4:ba:71:7f:36:11:
67:3e:b3:a2:f4:35:34:3b:74:3b:a1:72:8d:43:63:
84:a3:02:3d:ed:e8:e8:6a:bd:71:a2:81:51:d1:81:
22:c2:1c:24:17:8c:ab:0c:8c:81:86:43:af:4c:0c:
6a:0d:35:ed:f3:e3:e8:66:57:7c:b3:47:4e:28:55:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:04:F7:25:1E:80:FB:4A:99:43:84:27:E4:30:2A:7C:5A:DD:25:A2
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1d:75:68:e0:55:72:39:95:4d:1d:39:a2:63:ac:82:2b:8c:
1b:01:8d:d3:a9:6a:34:fd:37:54:c9:fa:c6:47:09:11:d7:91:
91:25:56:82:14:4d:eb:df:c2:24:45:a6:f1:fb:f0:cf:35:16:
45:ba:9f:4b:8e:b3:5e:d0:a6:17:67:0e:06:69:07:d1:15:1d:
40:f3:eb:75:03:f6:a6:89:fd:64:8d:5c:95:ff:22:bd:c2:d1:
05:33:9b:47:81:0a:e1:ae:35:ca:7a:ad:33:04:00:34:fb:e0:
1e:53:04:f5:16:ec:40:2b:15:6b:10:64:97:8e:86:62:72:a3:
50:19:6c:24:15:3d:b6:2d:0f:70:9c:61:14:c4:a6:ed:61:56:
53:d6:78:b1:3e:00:d0:32:20:92:f4:c0:c3:39:1c:e6:0c:4e:
dd:97:88:71:2a:54:54:d2:4d:e8:aa:72:29:77:d1:59:de:a3:
f3:7c:2d:1a:47:b6:17:4e:4e:be:ec:44:00:81:21:f2:39:2f:
4a:32:79:d1:45:07:f3:61:a0:39:cb:11:19:83:8f:f1:04:da:
18:86:9c:cc:3e:50:9d:af:93:6b:a5:fb:99:32:64:5c:e2:68:
a8:ce:a0:e0:57:01:87:93:da:a6:d1:27:99:d7:52:a7:57:bf:
f6:60:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:00 2026 by rpki-client