Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: zjcvS2TXdgkJvYTVtdUhOVnvzVdZUxLzwxJNCm8bfxs=
Subject key identifier: 45:C1:1B:F9:0A:F2:87:2B:D0:FC:08:EC:E3:44:CC:4A:67:76:58:66
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019D292958BE63E37A093D2AAA6070516E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 05DF
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: fKDIXnzAt28ZWRnURzLn7t1WulrVqOKTEfRqBfOG/Io=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:58:be:63:e3:7a:09:3d:2a:aa:60:70:51:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=45c11bf90af2872bd0fc08ece344cc4a67765866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:3e:30:3e:57:be:61:bc:b4:ba:df:61:4e:
a5:6f:53:69:c9:a0:c3:b1:e5:ac:57:f3:84:da:a9:
d6:28:7b:e7:b8:b7:37:d4:a7:54:b3:8b:38:7c:fd:
9c:d1:12:1c:09:f0:90:f0:97:5c:23:ab:ac:2f:bb:
e7:97:7f:62:a7:27:30:14:c0:60:7e:1c:68:05:59:
99:f4:02:83:cf:79:f4:c4:a0:bc:3c:1c:8a:61:73:
fd:d5:08:6e:4a:81:22:57:b2:94:c7:39:5e:1a:0a:
0e:ef:6c:51:f8:34:85:9e:5b:bc:a8:55:83:d8:e9:
bd:37:64:00:6f:c2:24:04:c4:11:45:d0:5a:9c:b6:
59:80:22:c8:6f:e0:ad:93:6e:a2:a4:58:38:1d:36:
67:4c:4a:63:a2:74:a5:72:8c:92:d1:f0:5f:5c:58:
24:ce:f7:ea:d2:f6:5a:b3:9e:c0:6f:10:62:8d:dd:
e6:83:ff:5a:25:03:40:31:3c:11:d2:ee:21:80:a4:
ef:be:37:be:f4:ea:62:f8:5b:76:f9:e0:26:8c:bc:
d4:7c:51:ff:f7:9f:91:d8:4f:bf:5f:17:85:39:f5:
82:38:1e:91:4c:db:98:17:92:4d:a4:b3:13:a1:93:
dd:09:5d:16:75:22:df:54:28:4f:5b:df:6c:ee:d0:
ce:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:1B:F9:0A:F2:87:2B:D0:FC:08:EC:E3:44:CC:4A:67:76:58:66
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:49:20:7c:e5:a4:f5:9c:f6:f4:04:34:ef:a5:42:91:24:6f:
de:83:98:13:f4:71:f0:35:53:7b:c5:e1:40:be:f3:a7:94:43:
b5:04:55:5d:fb:70:6f:93:29:62:d1:97:1a:05:47:b1:4b:11:
0a:ab:1c:ea:ba:ea:fd:5d:63:27:37:11:28:92:a0:05:8d:69:
f2:73:61:d9:b2:db:c7:6b:44:04:57:02:db:ae:9f:a2:03:6d:
aa:f8:33:db:0f:f4:5e:67:c0:d5:89:26:48:e4:c2:65:53:8a:
5d:7e:59:64:9f:a3:4d:9f:a7:fc:b6:c8:18:aa:ef:6a:c3:56:
50:4c:3c:84:a9:5d:d8:7a:3b:7e:f7:f0:81:d0:d1:0f:ce:17:
21:9b:08:4c:43:22:32:4c:8a:a8:85:e9:96:2e:35:de:6f:52:
35:1d:c5:85:e0:67:32:a1:73:b3:ed:db:40:12:b9:51:93:ea:
96:00:a6:26:96:cb:3e:dc:bd:10:7e:fc:20:b2:da:47:2d:1c:
cf:3a:c6:39:55:ab:34:69:41:df:54:45:53:3d:08:cc:80:db:
31:e7:c6:6d:bd:a2:ab:5e:6c:41:d0:52:e7:0b:56:6e:32:e0:
01:09:ee:e4:e7:91:01:2c:03:2f:00:95:56:c7:f5:b3:30:d8:
b1:33:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:22 2026 by rpki-client