Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: hkJqJ7g8p3jyNIKDA5nmH6Pz/g8yCPVhiyZCquVpVdw=
Subject key identifier: B0:7A:B4:0E:5D:80:DB:31:C8:75:3E:BB:E6:22:0A:7E:14:8E:0E:D2
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 01A1DE393ADD5ECA7EC0E31F61F6A95D9493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 08:00:54 +0000
Manifest this update: Sun 15 Nov 2026 08:00:54 +0000
Manifest next update: Mon 16 Nov 2026 08:00:54 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: P78R9JJnkMRZahkcUt9dGo/PK1CjuYVzTBY3GMKKDQ8=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:3a:dd:5e:ca:7e:c0:e3:1f:61:f6:a9:5d:94:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Nov 15 08:00:54 2026 GMT
Not After : Nov 16 08:00:54 2026 GMT
Subject: CN=b07ab40e5d80db31c8753ebbe6220a7e148e0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:6e:3b:30:2b:32:26:52:bd:77:73:20:e0:
34:fe:5d:ca:b3:4c:67:5d:25:34:2a:25:08:e4:72:
1e:44:4e:19:b5:fa:f2:0f:14:6c:b5:b5:43:03:42:
dd:bd:51:97:68:86:db:8a:b1:4f:83:63:07:fe:d9:
f8:1f:a8:89:68:b9:12:b2:a2:65:7c:00:e8:35:07:
62:74:c8:bd:65:10:65:b5:dc:31:56:1d:51:29:d7:
35:08:d2:48:0e:39:50:9f:23:d6:f8:c6:ce:70:c9:
5e:ca:e5:71:79:db:03:29:c1:18:41:c0:5e:98:8a:
75:69:3b:4e:b0:f3:6d:fe:35:f9:9e:fd:ae:8c:65:
e5:6c:9d:26:9c:e6:58:bd:18:8c:e5:2e:0d:14:83:
bf:7a:ae:9e:4c:b7:6f:5a:20:24:52:c6:9a:a8:98:
dd:3f:07:21:48:8c:a7:bc:2e:28:ee:69:ef:55:5f:
94:b5:59:43:1b:79:e9:21:38:f8:46:4f:85:b1:e7:
25:20:dc:0a:1d:dd:59:cd:5b:ba:b9:f0:15:2f:bc:
66:ce:ec:90:7a:9c:49:0a:7e:0e:df:25:8a:e5:4e:
f7:ff:fb:44:d4:0a:7f:b2:5a:ff:77:48:04:0c:6d:
60:a8:d9:3a:44:26:d7:60:ba:53:02:18:ac:cb:51:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:B4:0E:5D:80:DB:31:C8:75:3E:BB:E6:22:0A:7E:14:8E:0E:D2
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4c:17:81:90:f9:25:04:b9:33:56:ee:3e:7b:81:9f:77:cb:
54:91:eb:01:d9:c8:fa:b8:df:74:d9:ae:27:2f:73:f8:c3:2c:
2e:87:fd:af:35:4d:2c:aa:f2:cb:4b:0c:0c:e8:7c:6f:70:e1:
1f:f3:c4:55:e4:0a:b4:dd:65:25:f5:18:f5:7c:87:3f:2a:a4:
b6:2e:14:b8:69:61:96:9d:7c:43:1d:41:cc:c2:c9:9c:88:61:
04:3b:c4:b6:1d:1d:1d:03:ae:1a:01:cc:00:10:55:f3:76:8a:
76:89:99:1b:93:25:5d:ac:29:93:b5:be:08:19:11:3e:53:c9:
67:d6:6f:79:15:f8:cd:55:d1:ca:5c:4c:a5:2b:76:b9:ea:b8:
c1:6d:81:35:98:3b:bc:71:47:bd:bd:e0:00:a1:1d:db:7b:7e:
31:9c:5a:90:bc:28:bd:ec:c4:1b:40:fb:15:1f:c3:08:6f:86:
2e:2f:44:90:09:41:2a:4f:f3:1f:19:8b:80:5e:2e:12:9d:e0:
c0:08:3a:6b:61:70:5e:6f:72:18:6a:df:fe:54:c0:a1:58:b5:
41:18:d1:54:17:76:47:0d:68:9a:15:44:8d:a6:27:5e:bc:1b:
aa:ac:4f:07:a9:b4:37:4d:e4:c9:2e:63:c2:2b:87:d0:45:dc:
b0:a0:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:11:54 2026 by rpki-client