Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: rK6IzEJWQSX1oi5GUu1aqpsUFzBpRkmj56fGatoKmKQ=
Subject key identifier: 83:DB:DD:8B:F2:3A:58:32:F7:10:D0:1D:9E:59:D4:86:90:B0:95:06
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019E2AA7387D389FD8C5DB23A0E4E5FFEB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 1102
Signing time: Fri 15 May 2026 08:01:02 +0000
Manifest this update: Fri 15 May 2026 08:01:02 +0000
Manifest next update: Sat 16 May 2026 08:01:02 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: WX75vkv4VOcwqrGxxuM1DIG/3O7/De1RdB9T3/PWNj4=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:38:7d:38:9f:d8:c5:db:23:a0:e4:e5:ff:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: May 15 08:01:02 2026 GMT
Not After : May 16 08:01:02 2026 GMT
Subject: CN=83dbdd8bf23a5832f710d01d9e59d48690b09506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:a1:1e:a4:93:bd:5b:ad:27:f6:2c:f0:2d:
81:60:c1:e9:ae:ad:83:1d:b7:c9:dc:bb:0d:78:51:
1a:8f:d1:5d:3b:ac:a3:77:30:78:ee:a7:ab:c5:2f:
6c:b9:f8:17:b4:60:89:a9:c1:46:c9:91:13:0d:3c:
f9:bf:70:09:02:25:d1:d1:48:4e:1e:8d:13:37:bd:
61:12:67:4f:ce:52:1a:cf:a9:51:ad:37:63:e3:a9:
60:6b:1c:6b:bc:7c:09:61:47:74:cc:19:e6:1a:48:
64:d0:05:dc:43:89:ac:5e:11:ed:8d:ae:0e:04:de:
31:cd:10:9f:09:f5:58:cf:e2:96:9f:ee:4c:0d:89:
a9:bb:9c:d8:5a:ca:96:95:81:96:7a:a9:1b:7e:ce:
ef:cf:48:97:33:c2:2a:6f:33:34:38:fe:35:07:c3:
94:62:8c:c5:05:92:2e:02:0c:77:64:70:d6:3d:03:
00:2f:83:54:c7:28:ad:72:25:a9:d5:4a:5c:03:41:
24:1a:2c:77:b9:c4:d3:88:58:62:50:e1:96:39:92:
44:68:6b:be:a7:f8:d4:dc:a9:fc:d4:ae:c6:e3:5d:
50:4a:95:c1:43:32:ba:e8:e8:e2:be:1a:fc:ab:6e:
7d:43:78:87:78:6d:39:e7:76:0d:67:00:50:84:ed:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:DD:8B:F2:3A:58:32:F7:10:D0:1D:9E:59:D4:86:90:B0:95:06
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:f7:68:53:53:e0:18:79:51:0d:e8:88:ba:36:81:7f:b9:
f5:c9:99:c1:91:51:5b:0a:9f:16:ff:4c:34:c9:db:b5:d2:d0:
f8:f6:a3:1f:08:b7:2b:a4:88:79:ff:4e:54:2b:d3:8d:5e:21:
3e:ee:19:39:c8:4a:26:77:67:6e:a7:70:fc:c3:8c:d1:fa:86:
46:b9:f1:f8:d5:b7:e1:2e:20:54:81:d2:ab:e7:aa:ad:74:d9:
9b:17:91:4a:58:d4:91:6f:2b:d9:9c:49:10:dc:4a:30:38:07:
75:e4:35:a3:01:00:2a:85:2d:26:aa:e1:7e:b4:34:0d:ec:95:
48:04:75:9c:55:ac:0f:9f:a2:8a:b4:01:6c:77:7e:7b:65:e3:
28:da:80:bc:b9:c1:2e:f8:8a:0d:80:34:7e:02:14:59:ee:c4:
72:78:0a:c7:b3:4e:eb:44:bf:f4:aa:1c:f6:0d:07:39:2f:70:
15:88:10:ed:e2:11:aa:53:12:b7:42:88:62:bf:47:5a:d1:04:
f1:ba:55:33:86:b7:31:9f:33:1d:b4:d8:c6:3d:73:b9:44:e2:
cd:58:e5:f0:4d:bf:4b:cf:6f:77:a5:d5:91:56:7e:5e:6b:b6:
9a:81:f4:8e:44:15:1b:71:82:08:04:4b:c4:80:05:1f:b4:62:
90:3f:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:06:17 2026 by rpki-client