Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: Kn999HS5aeK9hNXIRe6Gs0bevn0vI9eMAA/6bmbY39k=
Subject key identifier: B6:6C:5A:B6:CE:DB:00:CD:3F:8E:F0:E7:C3:90:C3:9B:A5:90:E0:1A
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 01A0CB22CA68FAB41C55662D51C743DC8EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0C04
Signing time: Tue 22 Sep 2026 22:00:49 +0000
Manifest this update: Tue 22 Sep 2026 22:00:49 +0000
Manifest next update: Wed 23 Sep 2026 22:00:49 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: j24HL3CfaqDIjRqQV2QCst/RWkX4z+dh3NNjIjrrN2I=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:ca:68:fa:b4:1c:55:66:2d:51:c7:43:dc:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Sep 22 22:00:49 2026 GMT
Not After : Sep 23 22:00:49 2026 GMT
Subject: CN=b66c5ab6cedb00cd3f8ef0e7c390c39ba590e01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:d4:85:8f:ec:58:e9:de:da:68:a0:28:c6:
06:9f:bd:8e:00:4e:36:a4:59:cf:53:63:ae:d0:93:
88:0c:96:1e:18:77:b7:0d:38:05:e6:90:be:ba:ed:
fc:a7:8e:3b:ad:42:c9:ba:a1:6d:8d:64:04:58:84:
c0:d1:6d:01:f8:40:e1:27:4f:08:7b:47:16:36:ef:
26:56:22:41:d1:0b:7e:03:33:61:3c:ea:94:4d:9a:
e9:16:e9:4e:a4:43:fe:7a:b2:12:bc:c3:cd:cc:4f:
e5:57:2e:95:37:60:c1:a3:d4:2a:4f:b1:86:3c:85:
ca:b4:66:c3:8a:ca:46:c2:c9:4d:c6:44:8f:55:8e:
fb:7b:14:f7:55:f6:a7:bd:d0:2c:92:2b:22:eb:2c:
1a:28:f8:73:d1:d7:8d:95:c3:ba:d8:07:44:c1:d0:
fc:7d:71:59:6d:48:4a:bc:4a:aa:94:5e:de:57:dc:
35:f3:02:7c:80:46:e3:56:c6:cf:cd:be:2d:fe:c3:
31:01:c8:dc:93:dc:68:36:56:4e:3d:07:35:12:35:
c8:2f:a1:85:c4:0a:24:10:24:c0:83:08:ff:00:38:
3c:b9:e7:6e:ff:e4:f9:96:29:72:45:a8:bd:38:14:
d8:d5:db:20:a8:9c:da:1e:a8:cf:40:3e:ab:a3:bc:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:5A:B6:CE:DB:00:CD:3F:8E:F0:E7:C3:90:C3:9B:A5:90:E0:1A
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:67:eb:05:ea:6d:56:08:fd:41:35:68:31:7b:11:da:73:d8:
1f:a5:57:2a:7b:fb:79:df:fc:e6:e1:d7:96:24:5f:bd:8b:86:
ce:17:6c:ec:76:9d:89:b1:59:57:0f:d6:2d:7d:69:ba:f1:56:
5a:4c:e8:31:a9:04:05:a1:da:22:e3:b3:40:f3:80:ad:12:e7:
1c:2d:4b:1f:92:09:b7:ae:58:dc:e2:7a:4f:dc:f6:52:8d:95:
62:20:04:d9:58:05:df:6f:b1:7f:c2:bb:25:69:3e:50:52:d2:
1c:1c:37:0c:e8:6d:6c:e2:c8:2b:45:8d:df:56:f9:2b:06:b0:
8c:29:26:b5:02:e5:3f:2f:9d:7d:25:48:88:07:39:b7:04:bd:
e1:2f:25:28:82:1a:c0:e3:f9:fc:b9:e6:ad:0c:69:93:1e:7f:
82:36:79:b7:a5:f0:7d:a6:8d:29:14:88:16:01:a4:51:e4:11:
cd:98:ed:75:86:ee:51:1d:78:f0:a7:35:20:d7:74:56:fa:f2:
14:15:39:c5:22:5c:8d:51:89:94:c3:b5:1e:f2:f9:6f:14:3b:
d9:d3:68:40:5a:07:a4:d1:b4:24:4f:bc:e4:65:5a:32:fc:02:
af:23:bc:82:29:f9:65:33:ca:e5:e4:f9:b6:90:9b:d5:1a:ec:
27:fd:66:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:11 2026 by rpki-client