Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: 3tSEIFMAX/mB75Q6qiLxQfwR+001XGQlAzq0bu1Ak7Q=
Subject key identifier: 15:A0:9D:4D:B0:B2:35:FB:F2:3C:7C:A3:3F:E1:A7:24:62:59:AB:32
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 019E1EA34472DCE7125F19D65F8136BBED71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 08E7
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 45+ib2qt8SRe5sCTMlkVAr89i6JwkHIqQqSXR9rV9Ms=)
2: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (hash: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk=)
3: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (hash: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:44:72:dc:e7:12:5f:19:d6:5f:81:36:bb:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=15a09d4db0b235fbf23c7ca33fe1a7246259ab32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:f6:1f:1f:86:65:eb:2a:18:71:67:cf:c9:
cf:e1:5d:c3:96:fc:b5:63:f9:92:90:ae:ed:94:74:
a0:a4:9a:fd:1c:08:07:93:0a:fc:e4:bd:16:6e:67:
fa:c0:fe:49:2f:b2:54:90:0a:2d:c6:90:82:c9:38:
8d:5e:4a:dc:17:f6:a5:22:52:41:0d:91:39:81:aa:
28:b8:8a:4f:fa:3d:9b:30:9d:22:b2:a8:94:cb:82:
42:20:aa:e8:3c:f7:a9:8d:ed:05:bc:36:89:d6:d4:
b4:47:54:0d:15:d0:f2:21:d9:e5:46:27:e0:62:fc:
17:81:de:75:54:ed:41:6e:13:2f:7c:4d:81:42:fd:
f5:05:61:8d:dc:6e:c8:95:6f:fe:46:82:19:63:37:
67:c7:32:13:f3:3a:36:cf:c7:3b:dc:cb:2e:74:04:
04:ff:ec:4e:f0:55:a0:0a:0b:9c:75:a3:54:49:1d:
56:d9:b2:ce:82:cc:e0:7a:c2:76:43:4d:3c:7e:b6:
da:5e:98:c7:65:1c:5d:04:53:94:81:a5:e6:75:de:
86:8e:3d:14:99:61:f6:88:4a:fd:dc:4c:6c:23:ab:
44:08:6e:dd:13:00:72:f1:0d:70:bc:34:2e:af:0e:
b6:72:4d:25:9b:e9:68:fa:70:ce:c3:f9:88:9b:0c:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:9D:4D:B0:B2:35:FB:F2:3C:7C:A3:3F:E1:A7:24:62:59:AB:32
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:24:95:51:2b:ec:2b:4b:db:9f:da:a1:23:8c:89:d5:f5:
e7:47:74:48:9c:25:48:0a:d6:1a:e4:44:95:bd:61:ea:cf:c2:
ba:49:4a:12:e6:00:ea:84:fe:72:aa:8d:23:b0:44:2c:e0:14:
93:49:ca:cd:5c:d0:45:8b:e6:8f:e1:a1:da:a9:75:ea:c8:6b:
c8:0e:a1:1c:bf:65:71:01:f5:4f:41:d5:39:87:b3:46:aa:72:
92:db:70:4b:6b:40:31:7f:c2:d3:d4:0c:7a:85:e4:4c:21:78:
62:1c:2f:d4:c8:e5:e5:b4:a0:44:ea:13:44:66:ac:83:43:97:
c2:76:20:1e:48:61:af:70:34:e6:fb:1c:b2:51:c4:37:c4:77:
d0:59:a5:24:86:0a:74:80:07:62:62:0e:69:3d:f8:47:6e:dc:
0e:3f:7e:40:d5:9b:7c:57:01:5d:3e:8c:69:f4:a0:e1:41:ed:
c9:7a:35:7a:1b:d5:f5:54:cf:e6:a4:21:ee:5e:fd:e0:0a:30:
15:87:50:51:97:a9:d5:c3:f6:53:3c:59:2a:65:b1:a8:1e:a5:
e1:b6:03:c1:11:3c:7d:0a:5b:02:09:1b:6b:18:46:3d:01:1d:
ff:e4:4a:4d:31:fd:ce:1f:3a:91:c6:7c:82:00:06:47:d3:39:
b5:5d:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:24 2026 by rpki-client