Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: MxSsgzYnmleuhSlrktoLBnkEclW403g6Nt4dP0As6uQ=
Subject key identifier: E3:09:C6:B7:D0:49:29:F1:D3:58:BE:77:8F:48:52:54:BD:66:79:C1
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019E1BD91AD065719BC660ED63F54495BF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0FF8
Signing time: Tue 12 May 2026 11:01:13 +0000
Manifest this update: Tue 12 May 2026 11:01:13 +0000
Manifest next update: Wed 13 May 2026 11:01:13 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: e0N90sL/Q3hB6r1IpzBIS2tTiUSxpZgvWBX/MtN3d84=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:1a:d0:65:71:9b:c6:60:ed:63:f5:44:95:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: May 12 11:01:13 2026 GMT
Not After : May 13 11:01:13 2026 GMT
Subject: CN=e309c6b7d04929f1d358be778f485254bd6679c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:6f:a6:04:a9:d1:f1:de:c6:e3:6e:7a:0e:
33:08:e2:6d:f6:1f:e6:40:8f:b5:5a:db:fb:7f:2b:
fa:82:b1:51:50:a2:57:ef:5f:8c:50:4b:62:7a:c3:
66:aa:c8:b7:43:ff:5b:70:d1:24:0f:e4:e1:db:c5:
33:a3:db:35:83:79:28:5b:59:6c:fb:4a:ba:2f:62:
54:ab:72:3a:c2:6f:be:0e:87:ed:6e:01:ab:82:1b:
89:f0:f1:2b:eb:b6:bf:fe:30:29:94:1a:6d:1b:33:
4e:60:ab:2a:14:7e:dc:bc:14:20:fe:bc:11:09:a0:
b1:91:f4:28:88:c6:c5:bf:07:fd:ea:6c:d2:0d:b8:
e0:e7:f4:a2:96:05:fc:72:f9:17:ab:d1:1a:77:68:
0c:a5:48:63:6f:02:67:1a:49:ae:a8:f9:3f:1e:78:
0e:44:1d:dc:46:d7:81:98:df:1f:05:fa:78:da:a1:
be:17:10:a3:ba:dd:40:ca:b1:8e:15:0c:d0:72:d6:
b6:8e:4d:21:1c:36:23:2e:38:ad:d7:ba:0a:66:25:
bd:5a:db:22:d4:31:49:5b:95:a5:6c:db:c8:be:c3:
23:4f:85:71:4a:d5:28:70:cf:dd:24:05:28:e4:00:
19:dc:ef:42:0e:63:95:53:14:7a:83:65:0e:8c:51:
3b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:C6:B7:D0:49:29:F1:D3:58:BE:77:8F:48:52:54:BD:66:79:C1
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:ff:29:e8:9d:37:58:c3:e4:f0:85:75:80:a4:5c:13:bb:
ad:5f:9d:9f:9f:72:83:df:fc:62:1c:cf:5c:15:3f:9b:21:d5:
0e:c0:10:d8:69:e3:49:e9:df:a1:e4:dd:92:74:5f:f9:4e:23:
53:49:48:ed:28:36:90:5e:ed:c4:8f:75:ed:51:7e:2f:29:75:
ce:9c:c0:8e:7f:8c:cd:10:fa:21:34:d3:70:01:ed:25:03:e2:
d5:63:ef:fc:52:a8:7e:91:d5:7d:93:cf:6e:27:33:97:01:24:
00:2f:37:92:db:2d:d2:d4:97:84:42:17:47:60:b9:5b:6d:b9:
29:0e:0d:28:aa:98:69:f3:46:6f:bf:13:49:66:c5:d8:0d:ae:
2e:d9:51:f3:00:6a:c2:bf:d8:65:63:03:90:5a:88:44:2b:c9:
e5:76:98:1f:8f:55:c3:0d:9f:25:7b:ff:91:d2:8e:84:be:f2:
5c:ec:32:20:ad:db:4d:1a:4b:10:da:4a:e4:0f:1e:0f:c5:54:
59:6a:d7:b3:55:b0:fd:c5:6c:45:b2:73:3f:7d:cf:01:b2:16:
83:e4:2c:82:99:9b:92:b8:85:0e:bd:61:67:1b:a2:fa:57:c8:
fc:7c:d9:86:09:71:36:c2:5c:5c:32:b3:f0:bc:a4:af:59:1b:
ef:31:0e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2RrQZXGbxmDtY/VElb8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4
OTRkNWEwHhcNMjYwNTEyMTEwMTEzWhcNMjYwNTEzMTEwMTEzWjAzMTEwLwYDVQQD
EyhlMzA5YzZiN2QwNDkyOWYxZDM1OGJlNzc4ZjQ4NTI1NGJkNjY3OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NRvpgSp0fHexuNueg4zCOJt9h/m
QI+1Wtv7fyv6grFRUKJX71+MUEtiesNmqsi3Q/9bcNEkD+Th28Uzo9s1g3koW1ls
+0q6L2JUq3I6wm++DoftbgGrghuJ8PEr67a//jAplBptGzNOYKsqFH7cvBQg/rwR
CaCxkfQoiMbFvwf96mzSDbjg5/SilgX8cvkXq9Ead2gMpUhjbwJnGkmuqPk/HngO
RB3cRteBmN8fBfp42qG+FxCjut1AyrGOFQzQcta2jk0hHDYjLjit17oKZiW9Wtsi
1DFJW5WlbNvIvsMjT4VxStUocM/dJAUo5AAZ3O9CDmOVUxR6g2UOjFE7QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMJxrfQSSnx01i+d49IUlS9ZnnBMB8GA1UdIwQY
MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIr/Keid
N1jD5PCFdYCkXBO7rV+dn59yg9/8YhzPXBU/myHVDsAQ2GnjSenfoeTdknRf+U4j
U0lI7Sg2kF7txI917VF+Lyl1zpzAjn+MzRD6ITTTcAHtJQPi1WPv/FKofpHVfZPP
biczlwEkAC83ktst0tSXhEIXR2C5W225KQ4NKKqYafNGb78TSWbF2A2uLtlR8wBq
wr/YZWMDkFqIRCvJ5XaYH49Vww2fJXv/kdKOhL7yXOwyIK3bTRpLENpK5A8eD8VU
WWrXs1Ww/cVsRbJzP33PAbIWg+QsgpmbkriFDr1hZxui+lfI/HzZhglxNsJcXDKz
8Lykr1kb7zEOjA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:33 2026 by rpki-client