Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: E7EmvKChOQn7GYTNi+Oyufj/lXITlik4oI8XGV81B3Q=
Subject key identifier: 65:08:2E:C8:BD:09:BD:88:D6:BF:83:31:4C:4B:4B:88:E9:CD:96:66
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019D284DB8853A7AD21F2735985ECEE1C079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0A22
Signing time: Thu 26 Mar 2026 04:01:15 +0000
Manifest this update: Thu 26 Mar 2026 04:01:15 +0000
Manifest next update: Fri 27 Mar 2026 04:01:15 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: Kbvc2mHvGJTOiUVhADPurPDIf1X4V6FcSdR1KG6zFbc=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b8:85:3a:7a:d2:1f:27:35:98:5e:ce:e1:c0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Mar 26 04:01:15 2026 GMT
Not After : Mar 27 04:01:15 2026 GMT
Subject: CN=65082ec8bd09bd88d6bf83314c4b4b88e9cd9666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:78:96:da:a0:31:61:a9:5c:45:7b:dd:30:
d8:6a:29:73:b4:94:75:2f:92:b4:60:09:65:72:81:
88:80:5b:c5:3e:b7:db:59:c1:1c:48:8a:bb:06:2a:
7e:5e:f0:75:0c:85:cb:3e:d6:65:c5:77:29:f4:27:
f4:3a:b5:19:17:e4:6a:cb:19:24:91:6c:9d:71:b3:
13:f1:ec:b0:02:35:ea:6a:8e:5e:a1:9b:f8:99:59:
76:0c:15:db:37:f7:14:d3:ea:8e:72:17:e5:4a:9a:
39:9c:cd:6f:9d:4a:7f:32:e8:05:37:c8:a7:3a:6e:
9e:dd:2f:bf:fa:22:d5:fa:80:d7:63:c0:90:d4:8e:
22:9b:2e:e8:a8:60:d4:88:1f:02:85:30:79:d8:3c:
49:39:94:5d:0f:2b:df:ba:ed:3a:57:33:10:a2:39:
d7:d4:a9:a7:31:8d:e3:16:e2:dc:c2:b3:31:ec:b2:
cd:c1:fa:35:3d:e5:a6:f5:6b:c2:cc:ac:28:0b:80:
0b:68:78:fc:4d:87:ad:bd:b9:b5:bb:ba:a4:74:e3:
5e:7f:e5:87:72:41:6a:07:71:d7:e9:f2:38:60:0b:
71:91:3d:ca:ba:3f:e9:8b:e1:a6:31:b9:c7:65:66:
0b:04:97:74:ab:4e:1f:ed:5e:99:9a:93:e6:d2:85:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:2E:C8:BD:09:BD:88:D6:BF:83:31:4C:4B:4B:88:E9:CD:96:66
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:9e:81:1e:91:d4:24:4f:98:3b:6d:3e:ed:ed:c9:cb:aa:
13:2b:e2:97:4b:fd:8d:15:8e:96:73:45:f2:81:2e:28:01:24:
c5:fe:3f:4e:57:cf:a8:1b:5c:58:29:fc:09:f3:a1:94:dd:53:
a9:2c:19:0a:b8:2e:58:ac:4f:d0:26:db:2d:dd:87:c6:4a:1f:
52:11:7c:5a:b2:37:c7:be:8c:24:28:22:d3:f0:94:87:74:54:
9b:1b:b6:cf:68:7b:5c:42:ba:08:c3:34:e8:26:8e:fe:7f:ae:
a3:1d:78:77:67:fe:23:dc:0e:c3:b9:cf:6d:94:b3:88:cf:25:
c1:e2:52:7a:18:28:91:a3:dc:4a:8c:88:41:9b:46:c4:34:ed:
66:5f:47:9f:a3:9e:f5:fc:4a:a5:b2:79:ec:46:10:26:f0:66:
53:b9:89:04:f8:19:b4:da:55:e5:bf:89:a7:d1:7f:5d:25:aa:
98:91:1f:5b:cf:14:3a:5c:41:75:3c:39:82:c5:fa:a9:95:87:
e4:c4:9e:6f:0d:0d:41:31:74:b0:14:ea:00:88:19:ca:26:64:
b7:6e:c7:6e:90:bb:9e:2b:ac:7c:a3:2d:41:e7:67:2c:6b:df:
8b:2d:04:8c:0e:c4:51:31:20:f4:bd:d6:87:aa:4a:3e:b0:c5:
bc:28:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:25 2026 by rpki-client