Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: Dy8EKYz4t7iHkiEa5dul9bpAKBP01wyjx+83q67DFm4=
Subject key identifier: 4A:37:15:88:03:BA:1F:A0:E3:B9:B7:17:E1:3C:4A:07:2D:49:4B:30
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 01A0D796C18E978F4E8235E6A0796616AC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 08:02:56 +0000
Manifest this update: Fri 25 Sep 2026 08:02:56 +0000
Manifest next update: Sat 26 Sep 2026 08:02:56 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: VF+nKAXU4jmtCTN+bhCBPOkrGF4aw3X/3TMRxcC9EYQ=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:c1:8e:97:8f:4e:82:35:e6:a0:79:66:16:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Sep 25 08:02:56 2026 GMT
Not After : Sep 26 08:02:56 2026 GMT
Subject: CN=4a37158803ba1fa0e3b9b717e13c4a072d494b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:ff:9a:c8:d9:57:5e:55:4d:d7:fa:8c:07:
2d:f7:a7:37:b6:07:41:19:c6:15:ce:d4:4e:36:29:
ac:46:ca:60:40:70:e7:e0:bf:a5:b2:98:e1:bb:06:
31:1f:45:77:89:c1:17:7d:15:52:c6:1f:3c:d0:22:
df:2e:32:96:55:dd:83:c1:40:db:99:e0:b8:23:d0:
ff:01:25:7a:01:e6:6e:cd:b6:bb:fd:d5:9f:87:c9:
78:ba:63:b6:40:aa:fd:1a:c1:90:55:ae:0a:81:02:
ee:4e:80:c1:52:84:c1:1a:b4:41:5b:47:51:25:39:
f1:ce:3c:f5:bb:f2:ef:a0:3b:ac:0a:1f:66:fe:6b:
7e:f1:86:ed:20:ef:3d:e8:82:a0:e6:fe:42:5c:da:
33:5c:fe:f0:54:4e:19:54:a3:6a:86:95:27:c5:1a:
86:7f:8c:e2:80:3a:95:97:ba:62:d1:6d:f7:f4:74:
83:5d:db:45:c3:a1:4f:55:18:53:2e:e9:3f:de:fe:
b6:64:3c:f4:8d:97:03:86:b9:d7:2f:37:63:3c:f7:
64:b8:73:a5:0c:a8:59:1f:ca:a3:a5:42:fd:8e:34:
5a:3a:18:40:49:af:20:ab:af:05:05:25:f4:69:d4:
b0:b3:0d:83:a5:e5:c2:b5:7a:ab:b5:4b:9b:ad:20:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:15:88:03:BA:1F:A0:E3:B9:B7:17:E1:3C:4A:07:2D:49:4B:30
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:97:b6:20:af:48:4d:b0:f6:48:75:93:ba:d6:9f:b1:bf:
a6:01:b7:e7:ab:bf:c1:0a:b5:ac:a2:ad:4d:da:01:59:ed:d4:
28:7f:f6:2a:af:44:cb:1b:da:3a:14:a1:ba:92:25:4a:5f:e4:
cc:0d:1e:ab:7f:21:b9:85:f2:f9:9b:74:e8:61:8c:ea:2b:60:
e1:20:64:d9:ab:0e:28:9d:0d:09:c7:a0:6a:f1:37:a0:34:81:
15:a3:b6:aa:8e:83:4f:29:f9:09:64:79:8c:4f:3b:00:be:f7:
bf:2c:c1:99:52:d7:a6:aa:9e:c9:6a:7e:d5:f7:cd:bc:7e:51:
6e:87:a3:26:7a:ab:8d:c7:1c:d3:33:1e:ec:4a:d5:6f:9f:c5:
6b:f5:87:ec:2f:3d:1c:cc:be:44:7d:38:a1:1c:59:a2:b1:52:
76:ec:5e:06:89:b8:e4:fc:bd:21:41:fe:31:17:ff:6b:63:6b:
aa:53:2b:a5:94:16:fe:de:30:65:32:10:33:42:64:53:b8:bc:
99:4a:13:75:a5:8b:17:70:c8:f8:ee:c1:f7:3e:6b:c6:ef:fa:
6b:8b:93:1c:3f:5b:98:26:31:3b:30:c8:0d:c4:1a:1f:a9:5c:
e6:60:e5:d7:22:5c:88:b0:f6:70:b0:a0:0d:0d:c1:80:91:23:
3d:95:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:03:19 2026 by rpki-client