Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json)
Hash identifier: yghMW9LN9YejG/BXY7347e/lv5NgP5lrZbZ33h6lzgY=
Subject key identifier: 9E:5C:C9:50:91:E6:2D:8A:95:25:FB:27:86:46:81:81:6D:75:F2:93
Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Certificate serial: 01A0CEFFC061D7B7D81D51320CFD35D3B064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
Manifest number: 035D
Signing time: Wed 23 Sep 2026 16:01:02 +0000
Manifest this update: Wed 23 Sep 2026 16:01:02 +0000
Manifest next update: Thu 24 Sep 2026 16:01:02 +0000
Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: ZY+5GEJjPsHnq9IopYsGDr2cLpx+2wCFrtDkNMzCLek=)
2: 118-0Se03Hd6WkrM5OjppqFR1S0.roa (hash: iigPQAfXfwcfzslQVLCKiVJRI0tND4zuk1TNSyWLZe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:c0:61:d7:b7:d8:1d:51:32:0c:fd:35:d3:b0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5
Validity
Not Before: Sep 23 16:01:02 2026 GMT
Not After : Sep 24 16:01:02 2026 GMT
Subject: CN=9e5cc95091e62d8a9525fb27864681816d75f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:32:71:5e:f2:9d:a1:3b:2e:25:c3:58:13:
45:27:8a:a2:e2:1d:a1:c4:f3:37:ee:76:14:9b:a5:
1d:ca:a3:42:83:91:e7:32:31:3c:eb:84:55:52:52:
00:5c:17:a2:c0:aa:3b:ac:6a:2a:71:39:bd:09:89:
75:f5:1d:fd:3c:e9:26:15:3d:90:e8:f5:51:c7:71:
57:a7:b1:bb:8a:6c:14:8a:ab:39:56:f5:32:eb:d2:
e5:e1:2c:55:48:32:e7:53:80:5d:d5:17:88:84:31:
ce:19:37:8c:70:f5:bb:45:cf:4d:49:f1:b2:ca:43:
e1:06:8f:fc:d9:08:66:ff:ee:54:a9:64:4a:f3:ad:
49:28:84:b5:7c:67:a1:ab:ab:3a:9f:02:0e:b1:1f:
63:68:f2:04:0d:a4:8c:8b:d7:54:bc:d4:d9:f5:09:
b6:09:f2:3c:d7:d8:2e:5d:a2:c8:92:bd:b2:d2:74:
50:df:48:49:b3:c8:66:95:64:2e:3e:24:78:5c:55:
26:87:af:69:53:b1:e0:18:12:3f:6b:55:a4:b3:a2:
5d:08:80:75:e1:d8:ef:e9:f9:d5:54:87:d8:24:c0:
0d:23:0d:e3:18:a0:b6:ff:b9:2b:d4:59:f3:f9:c8:
da:9c:6d:1d:c0:3d:9d:bc:b4:2c:3b:18:7e:b3:f6:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:C9:50:91:E6:2D:8A:95:25:FB:27:86:46:81:81:6D:75:F2:93
X509v3 Authority Key Identifier:
keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:7b:fc:aa:e8:d3:61:e9:2c:4e:29:ee:57:af:c8:05:29:
8e:d7:db:92:32:56:5b:e1:42:80:25:f5:b9:04:1e:59:5c:8d:
f5:70:00:0b:a9:03:8a:13:d2:9e:33:6e:fd:20:d7:71:86:b1:
0c:a8:3c:b4:7b:b0:42:af:00:5a:da:63:14:c2:17:2e:5c:79:
51:72:94:a5:7f:11:88:8a:f7:7e:44:71:70:22:ec:bb:56:e5:
8b:01:db:0e:1f:ea:bc:b4:ae:8d:81:5e:0d:49:10:47:a4:db:
01:96:89:70:c0:f4:c5:8c:9c:96:3d:91:c2:f9:b4:f2:ce:e2:
c6:72:eb:a0:13:9b:04:7c:68:7c:bc:3a:26:06:24:38:e6:84:
89:e7:90:40:cd:8f:7c:26:13:e9:67:96:0b:c7:54:90:82:63:
b2:cd:28:53:5c:37:02:7e:b5:21:40:ba:24:e4:b3:11:dd:63:
1b:7c:c1:b6:f8:23:74:45:11:d7:ad:03:8d:93:29:9d:5b:84:
36:2c:74:f5:9c:7c:66:3a:b6:f1:a1:46:4c:1a:b1:12:2b:e5:
e9:08:0b:9a:bc:66:47:b6:50:cf:89:ed:3b:d1:f0:d6:1a:84:
95:42:22:6f:fc:cc:a6:f8:e5:af:d7:2c:1a:84:68:36:65:b6:
b5:88:e1:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDO/8Bh17fYHVEyDP0107BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDM0YjMyYjlmYmUzZGU5NWJjNzcxZDZkMmIzYzc5YWEw
MTRiZjUwHhcNMjYwOTIzMTYwMTAyWhcNMjYwOTI0MTYwMTAyWjAzMTEwLwYDVQQD
Eyg5ZTVjYzk1MDkxZTYyZDhhOTUyNWZiMjc4NjQ2ODE4MTZkNzVmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGoycV7ynaE7LiXDWBNFJ4qi4h2h
xPM37nYUm6UdyqNCg5HnMjE864RVUlIAXBeiwKo7rGoqcTm9CYl19R39POkmFT2Q
6PVRx3FXp7G7imwUiqs5VvUy69Ll4SxVSDLnU4Bd1ReIhDHOGTeMcPW7Rc9NSfGy
ykPhBo/82Qhm/+5UqWRK861JKIS1fGehq6s6nwIOsR9jaPIEDaSMi9dUvNTZ9Qm2
CfI819guXaLIkr2y0nRQ30hJs8hmlWQuPiR4XFUmh69pU7HgGBI/a1Wks6JdCIB1
4djv6fnVVIfYJMANIw3jGKC2/7kr1Fnz+cjanG0dwD2dvLQsOxh+s/ZqCwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ5cyVCR5i2KlSX7J4ZGgYFtdfKTMB8GA1UdIwQY
MBaAFPtDSzK5++Pelbx3HW0rPHmqAUv1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wTkxNcm43NDk2VnZIY2RiU3M4ZWFvQlNfVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjkwOThiLWYwZjItNGIxMC1iMmUy
LTFmYjNkNTU0ZmVkNS8xLzEtME5MTXJuNzQ5NlZ2SGNkYlNzOGVhb0JTX1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3LzI5MDk4Yi1mMGYyLTRiMTAtYjJlMi0xZmIzZDU1NGZl
ZDUvMS8xLTBOTE1ybjc0OTZWdkhjZGJTczhlYW9CU19VLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCV7
/Kro02HpLE4p7levyAUpjtfbkjJWW+FCgCX1uQQeWVyN9XAAC6kDihPSnjNu/SDX
cYaxDKg8tHuwQq8AWtpjFMIXLlx5UXKUpX8RiIr3fkRxcCLsu1bliwHbDh/qvLSu
jYFeDUkQR6TbAZaJcMD0xYyclj2Rwvm08s7ixnLroBObBHxofLw6JgYkOOaEieeQ
QM2PfCYT6WeWC8dUkIJjss0oU1w3An61IUC6JOSzEd1jG3zBtvgjdEUR160DjZMp
nVuENix09Zx8Zjq28aFGTBqxEivl6QgLmrxmR7ZQz4ntO9Hw1hqElUIib/zMpvjl
r9csGoRoNmW2tYjhzg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:34:59 2026 by rpki-client