Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: ZrsZW2pJhpc8LFjSmuPDE4m9zQGG3Fp4WX7aMR+D3Ro=
Subject key identifier: 5B:D9:68:57:C1:2E:50:FB:85:C6:7D:36:24:AE:2C:9B:AD:AD:79:76
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019D38D381FAB892AE7E204A5AC4E490FDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 152F
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: TokfLh2Gch9lIEiq+YmA4f4xWhMJAhxmv1C6+nULbH0=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:fa:b8:92:ae:7e:20:4a:5a:c4:e4:90:fd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=5bd96857c12e50fb85c67d3624ae2c9badad7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:1a:07:15:3d:ce:b3:30:7f:a7:f3:c9:79:
38:70:72:38:c1:26:9d:55:f2:a3:14:a3:b4:5d:42:
a8:d9:4e:3f:25:bd:49:3a:b3:d7:0f:46:7b:78:c0:
a4:2d:a2:30:93:a5:5b:b2:aa:20:b3:23:b1:81:cc:
b5:d1:20:c6:ac:81:76:d0:22:e8:f5:68:e5:92:f5:
97:b4:ff:7f:9d:5c:1e:45:a6:f6:7c:34:9f:e2:7d:
6d:55:7c:a2:a0:06:dd:b3:7e:1f:fc:8c:ca:91:2d:
4e:94:a8:bf:c6:5d:2b:cd:e6:fc:9d:b7:f6:ff:d7:
56:81:27:aa:70:3a:24:3b:23:16:1b:dc:83:04:41:
b2:0c:51:51:ac:05:a8:32:f2:5e:d2:4f:0b:02:5f:
09:63:ea:28:95:47:54:f3:ba:4b:3b:6c:fb:22:54:
5e:e8:ba:76:ee:65:90:2a:bb:e6:22:d3:19:20:d8:
bf:60:63:4a:28:41:f0:7c:8d:08:a2:be:ec:d5:38:
05:4c:21:5f:f3:3f:19:70:d4:01:b7:55:31:e6:0e:
65:b2:49:36:c5:6a:bf:3b:04:6d:b4:99:60:58:28:
2d:f9:34:1a:97:36:bc:31:d0:62:25:e0:9f:a7:14:
63:05:6c:30:fa:e4:f8:53:6f:ae:9f:0a:e0:fb:9f:
74:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:68:57:C1:2E:50:FB:85:C6:7D:36:24:AE:2C:9B:AD:AD:79:76
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c6:f8:5e:2d:f3:ff:06:78:cd:6d:03:68:4c:30:4c:69:f0:
ff:70:d1:1d:76:ed:23:95:e5:17:d1:4e:44:22:a0:23:b1:57:
8b:83:10:1a:1a:34:67:fc:55:f6:a6:17:14:6e:39:8d:d9:65:
d5:9c:8d:8e:a2:11:42:41:bf:96:65:46:59:46:60:a2:f0:05:
a6:ee:38:b4:7a:cb:e0:b9:ee:cd:e6:7d:95:91:67:d9:23:89:
6b:bc:72:62:f5:56:8c:95:7b:62:6f:66:dd:5e:87:7a:b3:2b:
21:42:3a:9d:59:11:59:dc:99:c5:db:23:48:3b:e6:6e:af:0c:
f2:f3:a0:f7:a4:da:23:49:e7:5b:eb:8f:c7:a7:e6:b6:8f:3a:
76:a8:bf:7a:ca:44:13:c4:45:68:1f:08:f5:1d:61:d7:c2:55:
0d:1e:47:3b:ad:87:4e:32:5f:2a:cc:bf:54:3e:9c:8f:7e:9e:
f9:ed:5c:72:d8:93:b4:41:e2:cf:7f:56:82:a7:ab:8b:61:9a:
62:ec:da:44:f1:7d:ea:b5:d7:44:72:72:8f:88:03:d4:28:30:
c9:e1:b3:1d:0d:b4:0d:15:b1:e4:07:86:eb:cd:9d:1b:c8:74:
8b:8b:d0:89:40:26:74:58:3a:2e:39:8e:d2:d4:0b:a7:08:4a:
cd:c6:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:14 2026 by rpki-client