Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: R66puJXVH4LoH1pgNAcINv2NU7dV0YIO8lqjibOQ9uA=
Subject key identifier: 06:7A:E9:71:9C:7A:F1:5A:BA:55:A4:A5:AB:61:9F:C5:06:02:61:89
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019D273ACA461BCE3075B77205DEA59602EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 05DE
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: 6PuyJsocZJK2q7XCTEZXACw1rvQHe0+JRgaYIz2yzAM=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ca:46:1b:ce:30:75:b7:72:05:de:a5:96:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=067ae9719c7af15aba55a4a5ab619fc506026189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:c8:f6:fa:ec:ae:3d:68:60:01:3e:9b:22:
1b:28:fb:6e:59:aa:70:c4:65:8c:76:e1:25:f8:90:
46:8e:a2:74:20:72:5d:6f:69:2f:6b:ed:ea:38:03:
18:68:e1:81:09:89:38:25:d1:96:e0:2a:94:16:63:
00:ab:b7:f4:e9:6b:bd:d4:fb:0a:8f:12:70:12:06:
ac:1a:bc:bd:a6:ce:1c:16:af:a4:41:f8:e3:65:76:
fc:fd:19:46:66:54:82:a0:bb:a4:e2:3b:4e:38:dd:
33:4a:8a:f8:33:f8:4e:ff:83:a0:96:b3:3f:02:cf:
26:9a:82:17:e6:66:cd:67:97:4e:26:ea:ae:ac:45:
21:ec:71:eb:97:dc:f2:c8:a4:ae:fa:13:ef:ed:5a:
21:7b:1a:6c:b1:45:78:98:ef:9c:af:4f:1c:e1:ee:
7b:cc:20:8a:5b:e4:1d:0a:90:e8:23:56:60:18:dd:
b4:e1:6d:d1:d3:f0:66:40:c5:10:70:80:b1:04:a5:
0f:55:94:01:ee:48:c7:26:61:16:da:8d:41:08:99:
a5:1c:81:08:1a:bd:e5:e1:0d:84:3a:13:6c:44:da:
13:c5:32:f4:05:85:d1:23:cc:3f:bd:a0:a7:2d:d3:
47:10:93:31:1a:4d:9d:85:b4:da:78:aa:95:9b:9b:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:E9:71:9C:7A:F1:5A:BA:55:A4:A5:AB:61:9F:C5:06:02:61:89
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6a:25:98:e4:4e:68:d7:98:2f:07:5a:96:df:a2:43:a9:db:
0c:e2:a8:09:9f:81:9f:4a:a6:d9:32:f9:b8:84:42:98:fe:95:
e8:4b:26:b0:f8:22:5c:34:23:07:74:15:1f:ff:c6:fa:a5:f5:
5b:9a:5b:29:41:df:97:66:7e:e3:ab:b4:9d:dd:f7:df:55:8c:
97:70:af:8f:f8:92:cd:81:20:b6:4c:17:b3:f9:c9:84:e4:ca:
5a:ae:ca:88:80:97:9a:ac:99:b6:d3:56:f7:67:ee:69:49:21:
c7:c1:62:a3:b1:a1:72:3b:c6:9c:13:e8:b4:e5:e8:79:bf:95:
fa:6e:b6:b3:09:8f:d8:68:f4:cb:65:5e:23:75:8e:6f:fe:08:
65:0b:13:73:50:b2:2f:bf:21:80:fb:8e:e8:ce:01:27:11:30:
54:8e:e9:b0:a3:01:74:46:7e:e3:fd:2a:47:be:b2:16:25:77:
df:0b:ed:ce:21:da:67:72:61:64:c8:d9:9a:cd:a8:7d:0f:d1:
38:44:b0:34:d2:f4:35:f3:be:35:3c:3c:13:07:36:5e:95:a8:
ba:04:f4:fc:e2:81:f8:31:51:36:9f:c5:5a:5f:e2:5c:31:13:
a9:15:94:47:da:e4:46:d1:9b:7d:c0:cd:8b:9e:85:34:32:42:
ff:75:c7:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nOspGG84wdbdyBd6llgLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjYwMzI1MjMwMDU3WhcNMjYwMzI2MjMwMDU3WjAzMTEwLwYDVQQD
EygwNjdhZTk3MTljN2FmMTVhYmE1NWE0YTVhYjYxOWZjNTA2MDI2MTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFbI9vrsrj1oYAE+myIbKPtuWapw
xGWMduEl+JBGjqJ0IHJdb2kva+3qOAMYaOGBCYk4JdGW4CqUFmMAq7f06Wu91PsK
jxJwEgasGry9ps4cFq+kQfjjZXb8/RlGZlSCoLuk4jtOON0zSor4M/hO/4OglrM/
As8mmoIX5mbNZ5dOJuqurEUh7HHrl9zyyKSu+hPv7VohexpssUV4mO+cr08c4e57
zCCKW+QdCpDoI1ZgGN204W3R0/BmQMUQcICxBKUPVZQB7kjHJmEW2o1BCJmlHIEI
Gr3l4Q2EOhNsRNoTxTL0BYXRI8w/vaCnLdNHEJMxGk2dhbTaeKqVm5ueoQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAZ66XGcevFaulWkpathn8UGAmGJMB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk
MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomol
mOROaNeYLwdalt+iQ6nbDOKoCZ+Bn0qm2TL5uIRCmP6V6EsmsPgiXDQjB3QVH//G
+qX1W5pbKUHfl2Z+46u0nd3331WMl3Cvj/iSzYEgtkwXs/nJhOTKWq7KiICXmqyZ
ttNW92fuaUkhx8Fio7GhcjvGnBPotOXoeb+V+m62swmP2Gj0y2VeI3WOb/4IZQsT
c1CyL78hgPuO6M4BJxEwVI7psKMBdEZ+4/0qR76yFiV33wvtziHaZ3JhZMjZms2o
fQ/ROESwNNL0NfO+NTw8Ewc2XpWougT0/OKB+DFRNp/FWl/iXDETqRWUR9rkRtGb
fcDNi56FNDJC/3XHOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:07 2026 by rpki-client