Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: qbgNTWsiALDBueN/QgyWYF0uFHSuuf5xpkQmBFqMBjk=
Subject key identifier: 58:7C:62:76:07:B1:0B:B6:00:31:D4:9B:FE:EB:42:1C:E6:4F:E5:FE
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 01A0D79664C4CEF32AD8F2113F0EA2ED6EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 07C7
Signing time: Fri 25 Sep 2026 08:02:32 +0000
Manifest this update: Fri 25 Sep 2026 08:02:32 +0000
Manifest next update: Sat 26 Sep 2026 08:02:32 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: dWeCUHX3XfE/aYbwVFUrnQYuenJCCUtgn4zZGJxirRs=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:64:c4:ce:f3:2a:d8:f2:11:3f:0e:a2:ed:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Sep 25 08:02:32 2026 GMT
Not After : Sep 26 08:02:32 2026 GMT
Subject: CN=587c627607b10bb60031d49bfeeb421ce64fe5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:c5:86:a7:45:98:46:7e:67:25:f1:93:fe:
47:1d:2f:34:bc:7b:b4:2c:dc:1c:69:0a:1b:a4:fe:
d1:4d:0e:e0:19:7a:ac:5b:91:bd:22:ec:41:76:49:
60:73:d0:fc:92:e2:c8:93:02:0e:a5:37:e5:7f:7f:
20:ac:c0:f5:a7:29:70:a0:6a:89:c8:26:b6:13:cb:
64:07:cc:9e:f9:9d:6f:eb:eb:1c:44:91:f5:00:bc:
9e:7a:d0:f6:39:92:9b:7a:b6:25:fe:31:68:1b:f7:
02:79:22:9b:96:13:5f:fe:a0:b9:46:20:72:19:b1:
f5:0a:e0:0c:1d:73:03:28:a9:e8:b7:bd:78:15:f2:
29:a2:23:08:d7:cf:6d:d5:bb:88:3a:18:e8:13:c2:
00:9c:be:4f:86:cb:b9:46:55:50:e3:8a:0b:d0:a7:
7b:cc:e2:67:17:25:a4:26:bd:a3:96:e3:87:49:f6:
50:2f:b0:c7:10:f6:1f:a0:21:d2:56:01:d3:52:37:
fe:f0:b7:64:ce:ea:13:79:08:c0:06:93:f9:25:7a:
a7:3a:df:66:39:32:cf:1a:82:24:9f:a2:09:a3:d4:
85:65:0d:85:85:f6:d2:c4:90:50:42:ad:42:6b:32:
e4:1a:54:06:dd:80:ac:d9:36:96:f5:fb:76:24:fc:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:62:76:07:B1:0B:B6:00:31:D4:9B:FE:EB:42:1C:E6:4F:E5:FE
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:0a:dd:dc:22:c8:b9:58:bc:76:0a:2a:29:b0:ef:d7:8d:
d8:82:d3:ba:6c:2e:da:35:92:0b:8f:f7:d5:95:c2:e6:81:59:
43:c5:5c:82:89:9b:45:47:ae:a0:93:88:a3:d4:18:05:f6:69:
a7:31:43:c0:d5:2c:6d:26:1c:ac:3b:69:ab:08:5b:be:60:51:
36:d0:e6:0a:89:8b:9e:3a:4e:2a:0e:47:c5:be:d7:b4:49:60:
d6:a8:d8:c4:f9:44:ff:7d:d0:d5:6b:ca:ea:01:f1:b0:7f:c9:
61:9c:16:84:5c:f6:18:1d:f6:45:8f:50:39:bc:c3:ec:c8:28:
35:5a:f6:26:8f:e3:5e:4d:11:fc:2f:f8:fd:87:b6:0b:47:8a:
20:4d:11:09:dc:92:e9:b3:97:93:8f:8c:ef:4a:e3:8b:0b:c4:
cd:8d:96:a8:2c:2e:78:9e:37:c0:b9:86:db:e6:f3:a0:f8:b4:
51:30:0e:ec:08:79:3e:b9:8d:c7:98:8b:7a:fc:27:5a:aa:84:
de:e1:de:40:50:50:44:3b:3c:70:e6:26:7c:c1:5d:ff:d4:0a:
81:80:3e:81:3a:ed:2a:91:b5:ea:33:4f:e6:d9:eb:cb:55:6c:
c2:01:fb:d5:73:51:6e:50:0e:4f:bb:86:6d:43:94:1e:65:1c:
40:ae:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:46:43 2026 by rpki-client