Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: X6MXJKcU2jX0AjUAaQNZ7kHdCtXVbJCHqKjMmTVBn7I=
Subject key identifier: 8E:88:83:DC:F5:D4:1A:97:84:71:18:F0:CF:DD:D5:D7:19:AD:C0:7F
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 01A1DE70EA2C9732A185E83CFA990308D7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 0AD8
Signing time: Sun 15 Nov 2026 09:01:44 +0000
Manifest this update: Sun 15 Nov 2026 09:01:44 +0000
Manifest next update: Mon 16 Nov 2026 09:01:44 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: Pj/IFC22Xb2WSW/3AbNsosRZKR4Oyi3oGgZSP6CN0nA=)
2: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (hash: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk=)
3: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (hash: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ea:2c:97:32:a1:85:e8:3c:fa:99:03:08:d7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Nov 15 09:01:44 2026 GMT
Not After : Nov 16 09:01:44 2026 GMT
Subject: CN=8e8883dcf5d41a97847118f0cfddd5d719adc07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:21:5b:96:e8:3b:93:f4:5a:4d:fd:ca:79:
a6:29:22:01:2e:e9:82:14:a0:b1:70:4c:e3:d2:c8:
8a:bd:37:8f:4b:98:3e:eb:89:2c:c4:d7:92:99:49:
60:72:83:5d:ad:39:07:75:28:2b:17:d9:25:02:f1:
d5:8c:4f:7f:8f:c1:c1:1d:29:6f:22:b9:1f:d2:4b:
af:df:59:69:5e:95:b5:c7:f4:1b:be:b3:f2:f5:77:
25:74:66:3c:8e:27:56:ea:93:db:8b:e7:39:db:5f:
05:b6:f1:e1:f5:15:6f:29:f8:71:9a:fc:4a:bb:38:
a0:48:a9:35:f4:67:55:b3:26:01:68:aa:c3:34:73:
95:b6:f7:a7:a0:4d:d6:77:bb:e5:36:c4:11:1d:5b:
fa:2d:f7:a0:e7:2f:cc:6c:b1:7e:e0:df:9d:ae:f8:
59:6e:e5:79:cd:71:71:b4:ce:31:dc:35:5e:47:5a:
19:65:d1:58:90:4b:9d:fb:01:6c:9a:89:eb:8b:c2:
bc:8d:7f:d5:c0:c7:66:b3:d3:7c:c3:0d:7d:85:f0:
ca:c0:fd:d2:3d:6f:c4:3f:b9:a3:0c:25:ce:b4:ba:
4c:68:71:07:0d:b4:3a:44:8e:f5:f8:67:6e:c5:ca:
37:19:7c:09:e4:3d:44:a9:3c:06:9d:54:64:f6:a6:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:83:DC:F5:D4:1A:97:84:71:18:F0:CF:DD:D5:D7:19:AD:C0:7F
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:92:9b:c6:4d:1b:e5:b4:f7:95:f2:6c:29:49:f1:0f:02:
b6:cb:45:67:0f:d8:b9:37:41:33:c8:7b:bd:43:5c:b3:28:02:
88:45:1d:d7:cc:06:e2:cb:06:1d:f6:a5:d8:57:71:f9:5b:f9:
36:5a:5d:6c:59:88:4e:7b:fc:14:12:9d:02:b3:10:cc:81:d1:
ed:b7:2e:e8:77:c6:48:56:6e:82:b5:56:2f:2e:5a:c9:95:8e:
6e:96:b0:7c:cd:ef:12:08:d6:d5:13:1c:8a:b8:15:38:2c:3d:
cc:bd:98:35:4a:b8:9d:46:06:41:40:b9:a8:72:2e:dd:79:1c:
2b:7a:5f:8f:4f:29:85:41:74:9f:42:a0:69:f6:e6:f5:47:d0:
86:d5:09:69:15:db:b5:6a:73:7a:1e:9e:83:79:a6:c2:6f:f4:
5b:eb:9a:67:33:82:ae:84:59:6e:dc:63:28:53:a2:3e:63:5e:
7e:bd:96:02:ce:5d:5f:2e:ff:2e:4c:69:dc:27:41:25:a9:3a:
69:d2:31:f8:e0:24:c0:73:b4:ce:6f:26:66:6d:fc:24:56:b1:
94:66:0c:91:34:ad:e9:b4:2e:66:ab:bd:58:b1:ac:12:c1:5f:
3d:18:10:7b:50:52:75:f0:5d:d8:01:2d:80:d2:ff:fa:9f:b6:
0b:58:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:55 2026 by rpki-client