
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: cNppSUMKZ/2KrE+ae+fMY/o9UEILAv0YVs9U3Ceru+k=
Subject key identifier: DB:00:C7:1D:FD:90:F1:BD:26:EE:79:FC:F2:F9:17:E1:1E:66:2E:8F
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 01A0E13D9CA8BFDEC8EEC589B53695F2CD2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 05:01:46 +0000
Manifest this update: Sun 27 Sep 2026 05:01:46 +0000
Manifest next update: Mon 28 Sep 2026 05:01:46 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: dvlpxZqhhHA6UAUEG+520enCQca3O2LMsjPGqByXpJI=)
2: 5BHIPcOQpei7HzoeMGGZJ-AmBiE.roa (hash: hPKAhLed3CRShFln0x7v1AXbQxeVgs4aDg0Eg2sUz08=)
3: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (hash: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ=)
4: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (hash: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:9c:a8:bf:de:c8:ee:c5:89:b5:36:95:f2:cd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Sep 27 05:01:46 2026 GMT
Not After : Sep 28 05:01:46 2026 GMT
Subject: CN=db00c71dfd90f1bd26ee79fcf2f917e11e662e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:9d:08:c8:bb:f0:12:dd:7c:e6:fd:b4:8c:
ae:6f:66:44:0b:a2:f0:19:8b:dc:ee:d9:a2:c3:c9:
38:e9:86:89:48:b7:66:18:6e:72:9f:4a:e0:c8:7d:
25:9d:06:f2:aa:7d:f9:12:4a:a0:3b:e6:98:a4:1b:
8e:5c:e3:39:80:3b:94:63:6b:10:45:ae:95:64:00:
1e:43:e5:95:bd:87:62:f4:f1:f0:52:ff:22:74:59:
fa:8b:81:8c:af:f6:da:d3:91:54:09:52:4b:30:37:
de:1a:9f:49:e3:9e:e5:3f:39:94:e3:1b:e3:e8:1f:
7c:c6:a7:60:6d:c2:d9:b1:25:e0:76:3f:d8:d0:81:
f2:df:dc:e9:68:95:73:91:98:7b:4a:b2:ec:60:4d:
14:47:83:bc:b6:05:3b:ea:6f:30:cb:d1:a4:52:53:
07:79:06:62:b1:fc:d9:6f:69:80:ea:6a:c8:45:66:
29:ca:db:94:97:41:7c:16:d6:50:07:84:9a:70:81:
50:da:62:bc:bb:47:1a:7b:91:6d:be:d2:8c:85:47:
89:1f:89:92:65:72:95:aa:0c:96:26:13:be:82:91:
74:f1:67:be:6a:dd:f6:0c:5d:8d:18:ba:5b:8e:7f:
1a:9a:14:52:f7:1f:a9:54:53:51:cc:e4:df:8e:59:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:C7:1D:FD:90:F1:BD:26:EE:79:FC:F2:F9:17:E1:1E:66:2E:8F
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0c:c3:d3:77:d1:e8:f4:aa:0a:51:02:61:c4:d7:5c:5f:df:
83:b4:03:e6:5c:8e:97:ed:6c:64:6f:4c:e8:bc:16:31:fc:10:
04:0a:99:55:7b:b7:5e:e0:e5:88:7e:75:e8:dd:3d:b0:23:46:
2d:46:2e:74:f4:95:21:60:a4:49:0c:74:b7:6b:e4:7f:df:18:
33:11:a6:17:61:93:5b:46:fd:19:87:25:31:18:5e:30:8a:72:
85:53:e9:8b:ca:7c:b4:22:67:99:c8:7a:5d:b0:ae:6f:12:ed:
99:66:fb:ba:5e:5f:29:20:d0:da:18:49:c8:c6:d5:10:92:31:
e0:ee:91:84:94:f9:c6:f0:c7:b6:b8:0a:4e:f6:57:d5:53:58:
5a:78:53:64:05:dc:2e:93:5c:e0:1b:e5:08:17:0d:68:7e:9d:
78:9f:c9:f3:bb:30:8f:b5:06:1a:74:55:9d:4f:f4:e4:03:5b:
c3:77:db:be:44:36:36:3e:06:c2:66:ac:4a:b9:7d:81:46:89:
d6:af:31:17:db:f4:fd:e9:56:24:3f:9f:5b:7b:a8:97:39:d1:
11:f2:e4:0a:b0:ec:87:33:41:12:33:88:d9:a5:c4:5c:cf:27:
54:3f:ce:bf:9d:20:c2:24:06:83:8d:cf:3e:b0:5f:55:a9:d6:
1a:20:1f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:55:21 2026 by rpki-client