Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: PinRFk11O6ALtR9gKM7tHCseOIDuJluMBLrSQWKfK1Y=
Subject key identifier: 39:A5:10:29:3C:BD:FB:C0:01:ED:6E:55:61:72:98:2A:15:6A:97:1A
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01A0CCD9A721DB78280CB4DDDB36FEC86A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0475
Signing time: Wed 23 Sep 2026 06:00:11 +0000
Manifest this update: Wed 23 Sep 2026 06:00:11 +0000
Manifest next update: Thu 24 Sep 2026 06:00:11 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: N8iDYuKBz6OmixazoxrNshZtQ+Sla6RuroPeeTdbb7k=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:a7:21:db:78:28:0c:b4:dd:db:36:fe:c8:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Sep 23 06:00:11 2026 GMT
Not After : Sep 24 06:00:11 2026 GMT
Subject: CN=39a510293cbdfbc001ed6e556172982a156a971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:c5:ac:d3:67:9b:18:93:66:b3:dd:a5:12:
af:19:e0:e4:df:ec:7e:28:fb:77:01:33:36:33:82:
5f:ba:68:ca:8f:68:05:92:a1:86:38:f8:aa:62:1f:
8e:49:a3:3f:11:5d:61:a3:ac:35:cc:48:36:e8:b1:
c1:da:66:5f:84:89:f6:68:1f:1e:2f:14:0c:e5:0c:
27:71:9b:a6:69:8c:21:a5:48:85:4b:70:4e:24:74:
82:4c:c1:66:44:f2:01:13:0f:b7:79:b0:b1:f2:58:
15:83:65:1e:a1:ab:a0:52:3b:ee:91:7d:e0:2c:95:
67:6a:97:22:78:74:5d:01:14:18:0d:8c:ec:18:be:
d8:10:18:1e:6f:91:2b:0f:6f:fa:aa:a8:7e:9e:ab:
74:8d:1b:18:80:85:0b:e9:8e:8c:23:e7:2a:95:a4:
d5:bc:13:88:80:7e:9e:66:32:00:c6:e6:9e:af:1d:
71:1a:2d:2f:b2:7b:72:09:76:89:ab:db:08:b4:9d:
0d:93:16:da:36:9a:f3:09:03:b6:86:0a:55:d1:44:
48:58:64:d6:b1:0f:0b:ed:14:59:d5:b7:f5:2b:74:
aa:75:78:d8:99:cf:c1:d5:c2:85:bc:2d:13:9f:a5:
2a:7d:d6:54:6a:f7:48:22:a3:d1:a4:b4:7f:72:e0:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:10:29:3C:BD:FB:C0:01:ED:6E:55:61:72:98:2A:15:6A:97:1A
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:28:f8:36:a7:2e:06:52:66:5b:d8:0d:2d:a7:3f:ec:dc:50:
a3:c7:1c:21:4b:d2:ee:fd:c6:7c:60:f6:46:8d:42:cf:26:ff:
4e:7c:d8:d8:7b:6b:e7:a3:57:64:2b:47:6b:bf:e4:4a:03:cd:
61:ed:4e:13:cf:a9:a1:fe:ac:3e:47:c9:b6:90:d3:54:10:a5:
c3:11:d9:27:88:2d:53:53:f2:bd:f9:27:a5:50:87:ea:01:3d:
e8:87:82:57:d5:b2:e8:ec:0b:14:93:30:7f:21:5c:3d:75:8e:
2b:a3:0a:4e:79:91:70:74:f1:35:53:2a:e8:4d:99:29:50:58:
b7:6f:ce:09:91:14:37:4a:0c:4a:ed:7f:2b:92:b5:f4:ba:e2:
7b:e8:da:93:f2:a0:d3:24:28:0d:da:c2:b7:df:48:36:ac:ce:
fd:9b:4b:d3:4a:30:42:d2:54:e6:d7:7c:ec:a1:d4:d6:cd:a7:
aa:af:49:bf:80:76:dc:37:c3:60:95:74:82:aa:8d:d2:f6:93:
5f:18:d6:20:68:49:62:9c:46:8f:b3:e8:78:9c:e8:17:3e:72:
b0:92:b6:db:e8:a4:72:c0:d3:48:77:e2:7f:73:3a:d9:ca:4f:
7f:51:44:7f:32:7d:25:89:98:4f:58:8e:00:fb:a2:6d:99:13:
2a:f5:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:34 2026 by rpki-client