Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: LOFIL9waZ37Y1NEy0CQ0PrJSlkq8l6enGbNmF7WvEMQ=
Subject key identifier: 1D:48:74:27:D6:07:6C:51:4B:CD:41:F5:16:9B:1A:8B:4A:46:5F:EC
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 01A1DA5C766027AADB7357DC6F9E493E08B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 084D
Signing time: Sat 14 Nov 2026 14:00:55 +0000
Manifest this update: Sat 14 Nov 2026 14:00:55 +0000
Manifest next update: Sun 15 Nov 2026 14:00:55 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: rC8fUw+3cIKoXcLMfRvZN1UmWUQNOZLcLPwyEJSkdls=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:76:60:27:aa:db:73:57:dc:6f:9e:49:3e:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Nov 14 14:00:55 2026 GMT
Not After : Nov 15 14:00:55 2026 GMT
Subject: CN=1d487427d6076c514bcd41f5169b1a8b4a465fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:ba:04:d3:5b:3a:13:7a:28:c5:ff:39:bb:
fe:1f:af:9c:f5:90:43:db:dc:a8:f5:c2:bf:47:db:
8f:cf:23:39:0a:58:58:c2:5a:9b:28:c1:24:3a:32:
71:85:41:c9:d7:21:72:55:56:0a:1f:19:b6:b4:21:
bf:6e:06:ce:e1:e8:a6:bb:d7:6e:ce:ea:1f:6a:c8:
9f:34:6d:09:cb:93:61:3a:7e:65:97:7e:bd:4f:3f:
14:63:30:e8:fc:dc:5b:92:7c:bf:cd:cc:22:1e:b5:
38:bc:72:43:a6:45:24:aa:57:36:30:f9:59:bc:b4:
f9:60:ce:05:81:82:20:e9:37:0c:86:cb:49:af:30:
72:d8:10:cd:38:7b:5a:cd:dd:71:c2:70:bf:33:e7:
c6:16:3f:33:53:9a:e1:00:1d:1d:83:5d:7d:ce:e6:
79:0a:c4:88:e3:1a:0f:b1:f2:72:d3:0e:a8:92:ef:
c5:99:91:ea:6d:c2:32:36:aa:3f:89:d9:0a:c4:6e:
e6:5c:9b:76:b8:0d:94:ee:a4:d4:7f:cc:95:f0:f3:
dc:6b:9e:de:37:02:bd:4f:bc:e0:ef:81:19:07:ee:
0e:89:24:1b:e8:4d:db:70:5b:58:eb:9e:48:4e:27:
c8:e0:19:c8:6c:6d:dc:f1:e9:31:0e:69:52:24:3a:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:74:27:D6:07:6C:51:4B:CD:41:F5:16:9B:1A:8B:4A:46:5F:EC
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:63:f3:bb:44:6d:0c:a5:7b:8d:0b:f5:3f:af:33:9f:15:1a:
20:21:20:6f:f2:22:18:eb:2c:a0:13:50:da:1f:0c:b7:86:20:
9e:68:d2:9d:15:ae:f6:da:6d:49:cf:e0:8a:78:59:06:8b:d3:
52:74:a6:98:b1:ca:c9:87:c3:c1:15:76:0d:6c:52:2d:f1:0e:
e3:05:51:51:03:76:92:0e:90:fa:e8:ca:dd:5a:13:b8:11:2b:
8d:76:34:44:85:87:2f:14:19:00:69:43:74:d5:b9:95:3b:41:
34:99:fc:62:9d:b7:69:32:54:14:22:bf:19:9d:2d:28:27:53:
19:77:d1:a8:13:95:70:ff:84:bb:dc:1e:f4:9a:ea:a4:f9:44:
da:52:8a:51:91:a2:85:a7:e3:2f:17:ee:78:b9:83:62:32:da:
c2:c5:3e:da:b1:6d:5e:7a:fe:96:39:fc:cb:2e:c6:24:4a:ee:
9c:54:0f:61:ec:c8:e6:ff:e7:63:90:23:0d:b1:b6:a7:31:48:
5c:4a:a5:80:76:31:be:13:b3:69:c0:95:5c:a5:4b:78:73:ae:
02:47:3f:3a:f8:b3:b1:c6:13:25:75:c4:50:51:cd:6e:61:c5:
b2:a9:9c:d5:ff:d8:4a:d0:34:fd:3b:c1:e9:e6:cb:1c:9b:80:
e8:f7:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:51 2026 by rpki-client