Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: l84G8hQO+0yHaleooWlPNnLVXS6y0oTNz2qwrHBiejw=
Subject key identifier: 67:4E:E5:C0:C5:30:67:F7:87:31:84:C0:04:9C:0B:1F:EA:93:0E:B7
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 01A104DBA41B22FA1F6029C6DA1889AB67BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 123F
Signing time: Sun 04 Oct 2026 03:01:05 +0000
Manifest this update: Sun 04 Oct 2026 03:01:05 +0000
Manifest next update: Mon 05 Oct 2026 03:01:05 +0000
Files and hashes: 1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: 2y589FSBYUDsfypBNgpnD6+04lKqG6k1Ost6tHd9sSQ=)
2: AMh4k1oWD7PnlfMavG7L6jv07hw.roa (hash: +g6V9pdeR+6pG0sd9oadIWK01wzE9uV3/4JWPD1+Ejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:a4:1b:22:fa:1f:60:29:c6:da:18:89:ab:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Oct 4 03:01:05 2026 GMT
Not After : Oct 5 03:01:05 2026 GMT
Subject: CN=674ee5c0c53067f7873184c0049c0b1fea930eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:76:52:d9:df:c6:39:62:41:05:cc:73:80:
4d:d6:bb:7e:8e:ef:a6:33:2f:88:27:f1:87:33:dc:
de:08:7e:e8:d0:a0:64:ff:7f:f4:ae:b7:a9:26:b8:
38:31:02:fc:6d:34:f6:6b:cd:3d:8a:fd:d3:87:9b:
6d:2b:ab:9f:ea:f1:85:f7:cf:d0:0b:16:06:3e:4a:
67:36:da:6b:4b:0f:17:95:fd:d7:36:c2:28:a0:0e:
c5:22:43:ae:7a:6a:6e:15:b8:8a:ee:86:cc:6a:b3:
71:e2:91:c3:84:79:d7:13:75:82:b9:16:c7:f0:bf:
1f:0d:90:c4:91:97:94:40:f9:be:3a:bd:66:a9:73:
14:6a:53:11:4e:81:b0:3d:75:aa:8c:62:8e:57:08:
6b:f4:fd:17:61:b6:cd:ea:ac:67:6b:b1:2b:89:0a:
76:7e:c5:56:58:e1:86:92:af:5a:f9:00:41:22:0c:
f6:13:5d:03:01:83:e9:3c:e8:f3:12:41:24:93:54:
a1:4b:5b:3b:dd:a9:d6:8b:ba:42:b0:a1:32:86:d9:
ce:64:08:2a:f3:4b:3f:00:41:7a:bd:bb:4a:e0:eb:
c6:d2:16:bb:fe:ee:18:27:54:b5:0b:95:18:84:6e:
d8:f6:0e:bc:32:9c:1b:67:62:d6:89:c7:1b:1b:8d:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4E:E5:C0:C5:30:67:F7:87:31:84:C0:04:9C:0B:1F:EA:93:0E:B7
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:c3:f8:33:75:3a:5e:9b:d0:1d:79:dc:17:04:56:d3:4e:
77:71:c5:b3:e3:56:39:61:49:7b:9a:ed:37:6a:90:bf:62:0b:
8a:32:2f:64:4e:eb:5e:b0:98:c6:07:77:95:c5:42:52:d7:35:
8f:c9:70:df:7e:02:47:a1:1b:cc:8f:8c:c9:00:54:97:d2:c1:
51:79:a7:b8:48:e4:7f:fc:b2:68:c4:02:d6:f9:07:de:70:88:
98:8a:55:0a:46:a3:6d:4b:7e:ec:d9:ab:05:74:4f:8e:6e:87:
4c:82:c9:c4:47:56:e9:67:5a:72:c8:66:63:61:b5:97:e8:7d:
77:6f:f7:73:ba:11:f7:ae:24:f1:d2:b6:2e:f3:92:9d:e1:89:
ec:c0:6d:1f:68:1a:52:35:c2:63:6e:4e:e6:b8:45:03:e1:c7:
0e:48:04:fc:b1:35:0f:7f:75:cd:7a:a2:82:8b:44:5c:9e:02:
f8:11:f7:b3:f9:3c:c1:e2:dc:11:7c:87:ad:0f:fa:03:e9:95:
25:de:be:24:bd:be:84:b2:17:da:6b:cc:bd:dd:8c:e4:5d:e7:
7c:bf:ce:78:69:16:0a:4d:74:5e:fe:96:ee:0e:61:b5:cd:08:
ae:1f:2c:09:92:82:9c:9a:af:eb:cc:9c:44:9c:96:10:67:8a:
ac:6c:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:13:42 2026 by rpki-client