Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: Z7Zagz3I3TsbLU0+Ty7scMQkcezZUcO3TfMvap61atc=
Subject key identifier: E0:11:59:81:DB:43:1A:3D:2E:4F:E8:C4:75:86:75:8B:AF:5A:D5:6E
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019D288467326050479E00BFF11DE7ED4358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0F7A
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 0NlC9QVvIZ+XTzlt2zm6XMb4a9QQyXn1rE6/DKjEXl0=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:67:32:60:50:47:9e:00:bf:f1:1d:e7:ed:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=e0115981db431a3d2e4fe8c47586758baf5ad56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:08:2e:34:3c:fc:e5:60:16:6c:5c:29:88:
df:13:f9:ea:0b:c6:80:5b:14:ee:cc:be:0a:ee:89:
56:1b:49:1b:0c:8a:97:04:af:ef:19:0e:a6:5f:a8:
e3:2e:b0:1e:9a:fd:6c:80:42:51:48:ff:a6:63:4a:
04:ca:77:22:eb:34:03:50:06:f9:84:09:b7:b3:0d:
9b:6a:a0:9f:7e:f4:d6:fb:8b:15:ad:6c:95:e5:5b:
fc:c9:01:32:75:ce:db:c3:ad:b8:57:fd:02:f6:87:
5d:f4:24:9d:76:05:72:c5:1c:f6:8f:32:58:6f:66:
39:73:5e:04:22:53:e0:47:d3:b7:83:b8:ab:d1:ff:
f9:73:60:99:10:15:02:30:e2:3f:94:d1:5d:97:82:
7b:c1:57:78:af:4a:43:a1:48:f0:3f:f7:64:93:5c:
3d:1d:78:e1:1a:cc:84:29:28:75:5f:90:1f:41:1b:
be:a2:b1:35:36:f4:82:1f:2b:c4:c7:d5:58:ff:02:
07:79:18:58:a2:67:18:f0:5b:11:e3:aa:4c:6b:cb:
ec:2e:d9:3c:3d:06:62:fd:ef:1c:4d:78:37:4f:fe:
c0:b3:a8:aa:21:3d:1d:c1:0d:8e:36:27:0f:16:c4:
cc:12:c6:53:1e:35:6e:c9:39:15:9b:ee:ab:df:13:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:11:59:81:DB:43:1A:3D:2E:4F:E8:C4:75:86:75:8B:AF:5A:D5:6E
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:33:ea:47:d1:59:93:cd:45:3d:83:86:5c:3f:63:9f:8d:15:
84:ac:98:92:7c:33:3b:37:22:ab:94:bc:c6:39:d0:d3:4e:0d:
71:fc:d0:6e:1e:58:c8:c7:44:d2:e6:18:d3:18:b3:82:c3:de:
45:07:f5:16:22:48:9f:29:8c:37:a7:5b:f4:b3:1f:38:b5:9a:
00:4a:cc:de:61:d9:ee:a1:28:fc:9c:49:7c:b9:85:84:cb:1b:
21:a6:ce:70:92:0d:58:88:06:f4:95:2e:d6:2d:be:a3:38:e4:
70:2e:84:12:56:a2:a1:90:68:79:7e:a3:86:c0:74:c9:db:71:
59:a0:af:35:69:ed:a0:94:a0:69:3f:7f:55:d7:e8:e0:62:62:
6d:82:33:9a:61:ad:07:f3:b8:97:49:42:9d:8b:04:fe:a8:11:
95:c4:dc:1b:b0:87:12:b0:7e:e1:7d:89:6f:2f:d4:48:2f:93:
46:c8:84:29:47:da:aa:a0:05:72:e2:de:92:f1:41:9f:fb:02:
a2:67:3a:f3:9b:6d:86:f5:03:14:1a:ac:8c:5e:4d:fe:7a:a7:
ba:e7:61:8b:b8:02:86:fb:62:62:b8:85:52:29:ae:9a:2e:0c:
c5:29:7e:75:1a:1f:82:60:cd:38:6b:03:db:13:4b:cc:4e:c9:
a7:20:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:08 2026 by rpki-client