Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: K96iSA/EulzzFL/yFaSLI7yAkXEc79R8El9mLN8K66g=
Subject key identifier: C1:9D:2A:D4:36:8C:EE:DC:F7:23:CE:C5:1C:88:EC:C0:D6:6D:E2:3E
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019F17C2E3F23B03C17A8DB4AD3FF231BA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1627
Signing time: Tue 30 Jun 2026 09:01:15 +0000
Manifest this update: Tue 30 Jun 2026 09:01:15 +0000
Manifest next update: Wed 01 Jul 2026 09:01:15 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: /okKZ0sGKEFp6Dde2LghacPG6HQfTWwVvabtDcs7Fsk=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:e3:f2:3b:03:c1:7a:8d:b4:ad:3f:f2:31:ba:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jun 30 09:01:15 2026 GMT
Not After : Jul 1 09:01:15 2026 GMT
Subject: CN=c19d2ad4368ceedcf723cec51c88ecc0d66de23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:08:8b:a2:ac:c2:fa:3b:0f:15:c8:92:33:
8c:a2:14:9a:95:2d:46:b7:7e:d3:8f:1a:c6:92:bb:
38:e4:3f:1b:2f:a7:81:de:62:81:c0:f9:e1:d2:b6:
c6:1b:70:96:5b:49:44:f3:6b:14:1d:ba:0b:e4:59:
40:94:85:3c:68:e8:b6:11:36:60:98:75:79:79:cf:
be:7b:4b:4a:19:d6:18:93:7e:54:ca:a6:c8:9c:85:
01:46:7f:00:c8:fc:3c:cc:3e:32:3d:fb:e6:61:cc:
62:dc:99:b0:c6:e8:30:c1:cd:35:46:73:14:10:0f:
76:33:11:e7:e4:d2:00:a7:22:9f:d1:c9:4d:10:aa:
87:01:97:0d:8b:9b:97:2d:fb:dd:54:65:d3:55:66:
5c:14:ae:c7:99:5c:75:a1:fe:f2:b7:06:b9:0d:3f:
79:28:46:4c:ea:49:70:6a:7c:f2:30:35:f5:17:67:
3f:9b:b9:30:18:e2:8d:f8:08:f5:35:f7:74:6e:3b:
54:9b:6b:90:11:33:76:e5:f0:ca:35:1c:d7:99:a3:
6b:7d:29:e4:13:fa:47:7d:b7:a1:26:9a:93:eb:46:
cd:ec:e5:08:b7:19:48:08:bf:12:e5:dc:5c:3a:d7:
82:a0:40:e2:62:83:92:1f:9e:34:39:d1:cc:32:31:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:2A:D4:36:8C:EE:DC:F7:23:CE:C5:1C:88:EC:C0:D6:6D:E2:3E
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:65:3b:2a:31:50:87:9b:cd:80:08:6b:6e:fb:d9:96:8f:5f:
24:0f:7d:16:39:f2:5d:ab:14:6d:51:eb:b7:41:dc:75:12:28:
a3:53:5f:6e:0d:2d:3a:b0:25:57:f3:40:8a:1c:bc:e1:6b:f2:
5a:2c:7d:0a:3f:d2:61:a2:29:3f:3f:39:18:8c:46:d6:c6:2c:
29:9e:cd:c1:da:8f:f3:f2:71:1c:4a:85:7d:ae:2b:23:11:c9:
79:e1:05:26:98:fe:f9:51:73:7d:f5:56:b3:ee:c8:3f:03:11:
32:07:96:9f:5c:90:8a:fe:73:8a:c5:f7:7a:f0:15:37:40:49:
cb:cb:8b:3a:5e:18:3b:2d:97:56:1f:3f:ee:60:06:0f:bc:ec:
0b:a5:89:9e:c9:b8:ef:35:87:d6:53:44:5d:c6:93:4c:03:b5:
18:19:cb:23:c6:71:03:ca:9d:fe:6d:2b:83:ab:b8:49:2b:d3:
66:11:1e:97:6e:0a:1a:88:59:db:ef:df:9c:40:49:97:4d:aa:
5c:98:2b:0e:47:8e:95:65:66:74:e2:44:ee:54:a5:09:0e:32:
38:41:99:f1:5f:f9:a7:23:91:ee:c6:8f:2a:1a:54:9d:40:38:
8b:b6:87:85:5a:be:03:45:0b:f0:c5:64:bc:ac:d6:fc:ca:31:
58:15:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:54 2026 by rpki-client