
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: pP9S0rkNoFt8oFlIsLKOWX+D4GxfTxoigh6r57rMgIE=
Subject key identifier: C4:CF:23:C4:13:A8:09:B4:95:B3:BE:A7:53:39:59:E0:7D:68:35:83
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01A001DD7CA1975876B8E8CCF29D6D1E1DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 11F6
Signing time: Fri 14 Aug 2026 20:01:27 +0000
Manifest this update: Fri 14 Aug 2026 20:01:27 +0000
Manifest next update: Sat 15 Aug 2026 20:01:27 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: pGq7kXFTAi4xNfCp29D1bvn9FuX5y/ujoNjHqsz+vSk=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:7c:a1:97:58:76:b8:e8:cc:f2:9d:6d:1e:1d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Aug 14 20:01:27 2026 GMT
Not After : Aug 15 20:01:27 2026 GMT
Subject: CN=c4cf23c413a809b495b3bea7533959e07d683583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:d6:5f:e9:28:d3:a2:ac:52:43:b5:fe:ad:
03:35:88:c1:be:f8:71:41:fd:99:bd:73:53:01:53:
e4:18:b4:5f:10:cb:83:56:23:18:26:6d:40:8c:2b:
f1:f6:da:46:d1:be:30:ce:e0:5f:4c:93:4a:a2:32:
16:bb:d1:89:41:29:d4:85:a7:3c:82:eb:38:3c:9b:
55:e8:92:b1:c9:0f:ae:9b:8c:98:52:f5:ce:ff:f2:
1e:35:36:94:90:57:e9:ca:85:4e:ca:5b:5f:13:92:
db:f9:f1:2f:6e:9f:8d:1b:2c:13:87:3c:65:90:40:
3c:05:09:ab:de:a6:bb:23:2d:da:3c:d2:ea:12:09:
0a:23:1b:e5:a6:68:b4:e9:c5:e9:2b:a0:91:f3:7d:
1e:7a:95:b6:06:ab:dc:40:0b:48:65:bd:24:36:ab:
81:c6:e4:18:a5:a3:41:5d:33:8d:ad:b1:75:3d:c6:
8d:c1:69:28:a2:df:14:06:63:ba:9f:53:63:08:53:
88:14:f8:c8:79:e7:3e:e7:5c:5d:1d:2f:0a:21:96:
3d:56:df:83:e6:f5:43:83:fa:9f:10:9d:c3:bb:47:
3f:18:70:57:94:5e:c8:30:f8:2e:6b:c9:4b:a0:2b:
6a:ea:61:86:75:88:8d:74:ec:84:8e:fd:3a:7e:2e:
68:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:23:C4:13:A8:09:B4:95:B3:BE:A7:53:39:59:E0:7D:68:35:83
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:6c:db:61:74:f2:95:05:7d:5e:11:2c:8f:6c:59:ff:de:
d2:25:fe:35:44:fd:b2:2f:a0:ce:5a:38:13:4f:93:7a:cf:97:
80:5f:dc:94:21:2a:3f:b5:b2:4a:3f:73:7c:4a:17:67:9d:3c:
e5:75:2e:fb:a2:7d:43:e0:bb:81:c8:9f:21:5d:18:ad:9b:72:
85:e5:25:e8:cd:e9:de:98:f7:41:60:de:b5:72:c8:34:5b:34:
20:50:67:9d:95:d8:ec:c2:d3:e0:13:a4:d2:c1:4f:08:80:9f:
15:32:fd:49:c2:e6:9e:8a:a8:df:f6:15:31:e4:02:86:45:ad:
78:fb:44:3f:0e:4d:54:da:3a:7d:2c:ba:d6:47:96:33:ed:ca:
1a:e1:c3:05:ea:13:76:34:8a:0a:48:00:a7:d0:fa:38:e8:ed:
63:f6:a8:5b:1e:81:58:11:52:bd:85:67:4c:a2:ff:7d:04:46:
93:23:7d:75:11:7f:77:fe:3f:e3:f5:14:5a:eb:d7:cc:8a:ba:
33:85:4a:a1:d7:cb:7e:d0:b4:91:64:ae:aa:b4:2e:e3:3b:9c:
3d:53:8b:44:8f:83:e6:55:10:d0:a7:1e:f8:f1:55:55:3f:76:
d2:e6:f3:c6:e8:2c:9a:7a:c4:ac:ad:d0:31:be:2d:21:bd:17:
95:12:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:52 2026 by rpki-client