Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: 3JGsm3+9KSAEwMaY3QemEp1Z7tmY5dk3fgMbz/9wpME=
Subject key identifier: 95:63:BA:11:66:F5:41:B8:1A:2D:11:43:E7:E6:7E:6C:0A:5F:86:7C
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 019F8F7E324268EBD6D26984D126364861AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 09A6
Signing time: Thu 23 Jul 2026 15:00:39 +0000
Manifest this update: Thu 23 Jul 2026 15:00:39 +0000
Manifest next update: Fri 24 Jul 2026 15:00:39 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: VpjshbMWwH2cERJOEJBbXURdhwc4XdBGNB6ulzjmY/E=)
2: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (hash: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk=)
3: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (hash: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:32:42:68:eb:d6:d2:69:84:d1:26:36:48:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Jul 23 15:00:39 2026 GMT
Not After : Jul 24 15:00:39 2026 GMT
Subject: CN=9563ba1166f541b81a2d1143e7e67e6c0a5f867c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:1f:cc:93:4d:ae:a8:83:1d:65:ac:81:53:
2c:4e:24:4f:34:65:0d:4a:4f:00:ca:9f:36:f1:15:
5a:77:11:4d:b6:5b:e7:30:d0:49:36:42:f0:1f:f4:
e3:e4:66:0f:a8:82:03:11:21:ea:4b:83:33:a7:6c:
a2:6f:e0:34:34:d1:d1:04:5a:94:84:56:47:25:24:
c2:a8:d3:e4:14:10:07:76:08:8b:5d:42:22:a0:55:
fa:6a:29:15:58:29:7c:5d:2a:58:0a:5c:8b:d7:dc:
9c:be:64:f7:a7:e3:1a:26:89:60:95:70:04:1d:7d:
6b:ae:e3:b7:bb:76:dd:0e:24:f5:d5:a8:e9:54:f1:
06:ca:15:7a:2d:3f:51:28:ee:d8:32:81:2b:5a:dc:
7c:c4:0f:79:86:eb:b4:a6:85:73:7d:c7:a1:10:e3:
9b:80:9b:e4:6f:2a:54:e0:86:23:2f:01:e3:7c:7c:
d8:b7:5f:70:ca:2e:0d:ec:4a:7b:2e:9a:a1:1a:2c:
0d:2c:58:8f:44:50:b4:96:cb:d6:c9:36:71:77:64:
0e:02:46:99:da:5e:00:49:e7:a2:b7:0f:9f:df:02:
db:5c:72:7a:f2:3c:b3:60:34:e4:5a:f2:8d:87:12:
c6:10:e8:b7:79:87:f9:59:1d:b2:e7:8f:5d:08:f9:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:63:BA:11:66:F5:41:B8:1A:2D:11:43:E7:E6:7E:6C:0A:5F:86:7C
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f6:d5:4b:93:29:ea:7d:3e:ec:f8:f2:a2:df:d0:f4:c4:78:
92:81:f8:90:cf:8d:70:22:7f:c6:a3:be:33:7a:3c:ea:55:68:
93:d9:26:4a:a2:39:b0:9c:12:5b:e7:73:b2:6f:89:72:a3:4d:
8a:ba:3b:11:d0:b5:fb:70:3e:e7:4c:eb:ea:c3:2e:11:35:22:
fd:b0:27:5a:dd:37:4a:43:ed:59:4b:de:49:68:61:e7:14:e8:
ad:e0:33:fe:9a:16:18:9b:7b:11:93:7c:28:5b:f0:d0:bd:f7:
3a:b4:ef:15:53:32:28:f0:8c:dd:41:3d:8e:7c:0f:16:8e:b5:
fc:61:c3:da:da:9f:c2:f3:a0:e3:d6:19:83:f9:a2:10:7a:7b:
a3:7e:b5:0e:14:2a:42:c8:c8:4b:03:2f:8d:00:b5:04:dc:0f:
ee:2e:25:c8:9c:d7:56:e6:0d:8d:5a:3d:35:a4:ad:6c:96:03:
72:25:63:d3:6c:14:9d:09:05:ff:bb:52:ed:76:99:79:fd:4b:
3c:b0:9c:d6:0c:a5:04:72:6f:0a:5b:e2:bc:98:ad:4e:f0:39:
b4:8b:25:16:60:26:7e:f0:fd:5b:d1:e4:48:84:fa:54:ee:a4:
9e:5c:39:fe:7f:dd:70:c2:56:aa:00:66:42:5a:7a:d1:02:d0:
d3:42:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:27 2026 by rpki-client