Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: GkwPakqecyeJzzSo2UPUOWd5SDWWyDS5jxXtm7wwkgw=
Subject key identifier: DD:81:02:FF:63:93:7C:2C:88:CE:E1:CE:E3:B9:F2:94:84:C9:8F:3D
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019D2A04F6AEDA11088CE295A59BE7BF512F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 1040
Signing time: Thu 26 Mar 2026 12:01:01 +0000
Manifest this update: Thu 26 Mar 2026 12:01:01 +0000
Manifest next update: Fri 27 Mar 2026 12:01:01 +0000
Files and hashes: 1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: 1XhauWIJINNzGeTCe8TPCVnY1jObXSSc4FP1T1oPig4=)
2: AMh4k1oWD7PnlfMavG7L6jv07hw.roa (hash: +g6V9pdeR+6pG0sd9oadIWK01wzE9uV3/4JWPD1+Ejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:f6:ae:da:11:08:8c:e2:95:a5:9b:e7:bf:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Mar 26 12:01:01 2026 GMT
Not After : Mar 27 12:01:01 2026 GMT
Subject: CN=dd8102ff63937c2c88cee1cee3b9f29484c98f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:da:5b:91:4a:f8:f3:3a:c9:8a:cb:dd:ba:
b4:61:e4:1f:6b:ca:36:4a:7c:91:15:65:a4:84:f1:
72:f0:e5:ed:2a:24:ed:1c:15:36:7f:42:ab:59:e7:
5d:91:de:f1:8a:82:e6:9c:24:bd:f9:cd:87:31:e7:
a1:22:f9:06:38:65:ab:ff:aa:3f:9a:65:2e:88:8d:
0f:55:5e:25:aa:1d:a5:8f:1d:81:89:31:e7:4c:82:
30:37:ef:ad:42:c5:54:b8:00:b6:0f:46:f7:a2:73:
13:e8:88:f8:70:db:5a:c2:42:8d:70:36:0f:ad:fc:
16:f1:31:17:f4:c0:9f:4d:87:bd:14:a0:2e:7e:68:
60:c9:5e:57:4d:42:8f:de:b6:16:ca:a5:ee:7f:ec:
ce:09:bc:a6:0c:7d:ca:1e:a8:56:dd:27:95:6a:25:
4d:75:71:19:56:51:36:05:84:84:f3:25:23:e6:a2:
c4:f2:10:4c:39:db:d7:60:f9:e9:f3:0d:b9:ac:9a:
65:f0:f9:d9:0e:48:3d:d1:85:13:23:92:37:7d:b3:
61:9d:26:b7:79:b6:1a:f4:37:d6:21:07:f3:e4:23:
9a:bd:b1:ff:91:96:c0:6a:e9:5a:a9:bc:67:72:54:
e7:b8:66:af:7a:0b:79:f3:a5:bc:2a:58:48:da:01:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:02:FF:63:93:7C:2C:88:CE:E1:CE:E3:B9:F2:94:84:C9:8F:3D
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:62:1f:86:b3:58:2b:f2:81:88:99:64:16:87:54:cf:0a:
25:3e:e6:05:54:a1:60:98:72:d7:9a:7c:ed:40:65:b7:5b:f5:
8d:fd:ac:77:e3:54:ec:e8:e5:5f:9e:28:61:1f:4d:dc:8c:2a:
d8:7b:ca:e8:1f:03:2d:4b:13:b9:f1:38:78:c1:df:c4:2e:5b:
23:5f:5f:4f:1e:dc:f7:6b:80:d5:49:35:50:01:87:d0:47:e6:
14:0f:88:62:08:41:0c:19:85:fd:16:83:52:bc:a5:ea:38:d4:
60:0d:af:c8:08:ac:0d:00:8e:8b:dc:d7:59:cc:43:88:21:75:
4a:4e:87:9a:bc:8b:df:09:e3:63:06:e7:ec:ca:66:b9:7a:3b:
a9:bf:28:48:dc:a0:e5:34:e5:d7:1b:41:23:4c:a7:a6:3f:11:
d5:23:a1:0b:72:73:5a:f5:32:52:3b:2a:e3:a3:93:5e:30:5e:
82:46:d2:ec:ba:ba:f4:12:10:39:27:bf:3b:6b:6f:35:8f:e9:
4b:4a:61:68:f1:76:1f:79:05:2b:0c:3c:9c:fc:d7:f1:84:49:
4e:e7:d4:73:85:c1:bc:de:a9:d0:63:74:d5:e8:7a:fd:5e:75:
55:05:be:ab:ea:26:50:31:05:7a:26:89:98:aa:4d:9b:c0:79:
7d:90:5f:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qBPau2hEIjOKVpZvnv1EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz
MDdkMTgwHhcNMjYwMzI2MTIwMTAxWhcNMjYwMzI3MTIwMTAxWjAzMTEwLwYDVQQD
EyhkZDgxMDJmZjYzOTM3YzJjODhjZWUxY2VlM2I5ZjI5NDg0Yzk4ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvjaW5FK+PM6yYrL3bq0YeQfa8o2
SnyRFWWkhPFy8OXtKiTtHBU2f0KrWeddkd7xioLmnCS9+c2HMeehIvkGOGWr/6o/
mmUuiI0PVV4lqh2ljx2BiTHnTIIwN++tQsVUuAC2D0b3onMT6Ij4cNtawkKNcDYP
rfwW8TEX9MCfTYe9FKAufmhgyV5XTUKP3rYWyqXuf+zOCbymDH3KHqhW3SeVaiVN
dXEZVlE2BYSE8yUj5qLE8hBMOdvXYPnp8w25rJpl8PnZDkg90YUTI5I3fbNhnSa3
ebYa9DfWIQfz5COavbH/kZbAaulaqbxnclTnuGavegt586W8KlhI2gETfwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN2BAv9jk3wsiM7hzuO58pSEyY89MB8GA1UdIwQY
MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0
LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx
M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxJi
H4azWCvygYiZZBaHVM8KJT7mBVShYJhy15p87UBlt1v1jf2sd+NU7OjlX54oYR9N
3Iwq2HvK6B8DLUsTufE4eMHfxC5bI19fTx7c92uA1Uk1UAGH0EfmFA+IYghBDBmF
/RaDUryl6jjUYA2vyAisDQCOi9zXWcxDiCF1Sk6HmryL3wnjYwbn7MpmuXo7qb8o
SNyg5TTl1xtBI0ynpj8R1SOhC3JzWvUyUjsq46OTXjBegkbS7Lq69BIQOSe/O2tv
NY/pS0phaPF2H3kFKww8nPzX8YRJTufUc4XBvN6p0GN01eh6/V51VQW+q+omUDEF
eiaJmKpNm8B5fZBflQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:21 2026 by rpki-client