
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: l4jwnHfdUQDFw8XE5F68dPQzLAJCmBVD2xkPjr+n+P4=
Subject key identifier: 1E:B2:2C:39:10:03:52:63:97:FC:F8:DD:86:F7:1B:C9:8C:E7:46:BD
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 01A0016F6D599909EAB7FF6FCB1C7482EFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 16A0
Signing time: Fri 14 Aug 2026 18:01:14 +0000
Manifest this update: Fri 14 Aug 2026 18:01:14 +0000
Manifest next update: Sat 15 Aug 2026 18:01:14 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: VZwIn9DnZgohRn+nrccD4xRe5jIBaxZ9LZVcZyuTTaE=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:6d:59:99:09:ea:b7:ff:6f:cb:1c:74:82:ef:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Aug 14 18:01:14 2026 GMT
Not After : Aug 15 18:01:14 2026 GMT
Subject: CN=1eb22c391003526397fcf8dd86f71bc98ce746bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:fc:62:5c:e4:c1:06:ab:55:35:46:3d:6e:
82:69:e3:7c:78:5f:21:e4:0f:3a:5d:69:de:7a:b7:
56:17:4c:2d:61:85:2e:78:85:82:f1:65:d7:9b:30:
e1:c0:85:41:25:94:4a:53:bf:c6:7b:5a:df:41:64:
5f:33:fa:a8:38:87:16:a9:a2:32:58:a5:17:2f:dc:
0c:a8:34:a9:90:41:5c:b5:e9:56:8b:8b:ea:67:40:
e8:d5:48:0f:f6:f6:7c:45:7c:8e:6a:f2:68:78:66:
87:cf:6a:4a:51:b2:d5:9d:58:39:af:0a:2f:fb:30:
10:c2:a1:9f:23:c6:17:be:51:18:72:81:6b:11:d2:
39:39:34:01:e0:c7:67:c1:42:ba:cb:ac:85:fb:2e:
59:0d:e3:a8:4e:8a:04:ba:b9:93:2a:42:ab:f6:d4:
e5:f5:7a:eb:5c:26:4e:e8:ef:b3:a3:43:88:4d:f8:
7b:00:12:e2:e6:9f:24:34:9b:69:b6:4b:d2:a9:5b:
fc:5a:24:9f:d5:09:c1:50:1e:85:a2:4f:6c:87:b3:
28:1b:3e:c1:45:6a:bd:9f:c4:d6:11:c3:12:ee:92:
07:42:42:04:dd:2d:0d:4e:31:90:57:4d:6a:ff:11:
b1:40:33:4d:36:80:42:88:b7:ee:28:f0:52:b2:dc:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:2C:39:10:03:52:63:97:FC:F8:DD:86:F7:1B:C9:8C:E7:46:BD
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7f:88:7a:4d:2d:1f:24:d7:e5:81:4e:9f:ae:3e:19:21:ed:
2e:35:4b:f9:8f:44:1b:af:10:32:e5:f9:ae:99:6f:0a:bd:2b:
39:cc:f0:21:01:33:e9:e9:4d:43:98:08:d7:2f:2a:54:f7:26:
fd:0c:39:be:1b:ca:b4:d2:04:63:e0:6d:ec:c0:da:f5:b3:cb:
d4:5d:1a:fa:7c:c5:bd:ca:ae:3d:9b:dc:49:0b:9e:ae:cb:cd:
c3:6e:b3:36:5e:2a:e3:4e:fc:38:50:b0:f0:19:2b:f5:05:6f:
ec:77:5d:31:60:c6:ec:3a:8d:21:06:cf:c2:44:db:fe:8a:e4:
0c:c9:f5:0c:d7:64:be:16:33:5b:19:df:45:bd:95:35:96:e3:
14:8a:94:2d:d8:33:bc:69:71:3a:fd:45:43:b9:6c:e9:59:84:
53:9b:f9:5b:ea:cf:c8:90:a0:f1:af:15:9c:56:d4:ce:13:d4:
da:d3:32:c1:55:39:1e:2c:54:8b:c1:3b:14:eb:9e:3a:65:58:
00:66:ef:3f:27:4c:41:dc:ed:4d:db:42:59:84:e2:71:c6:b3:
5a:4b:77:60:4e:1f:45:e0:88:a2:87:9b:da:b1:0f:a6:48:5c:
e7:4a:73:98:f4:87:65:22:cc:7a:81:92:59:87:84:6b:58:be:
fe:55:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:52 2026 by rpki-client