Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: +yj9Q4TgR6KutTzo6OEdjBVq5l+qPK9so3o6T04hIrQ=
Subject key identifier: E1:89:FC:D0:8A:FD:86:AD:6D:7B:57:7D:95:07:7A:AC:1B:80:45:39
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019D37521D38D62ED8EDE24EDB9DCB055C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 1084
Signing time: Sun 29 Mar 2026 02:00:21 +0000
Manifest this update: Sun 29 Mar 2026 02:00:21 +0000
Manifest next update: Mon 30 Mar 2026 02:00:21 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 4LRJsiKtsQ9J91iN55nfqqsYJVQgAqFy8sOOkJJCx08=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1d:38:d6:2e:d8:ed:e2:4e:db:9d:cb:05:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Mar 29 02:00:21 2026 GMT
Not After : Mar 30 02:00:21 2026 GMT
Subject: CN=e189fcd08afd86ad6d7b577d95077aac1b804539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:05:00:19:8b:65:a4:b2:16:ac:28:e0:e6:
a6:3a:e7:61:f5:a2:7c:c6:fa:4a:1b:11:4a:e3:7d:
ae:28:36:97:da:0f:bb:48:2b:c5:77:70:b8:fd:44:
a2:ad:20:a7:9e:32:29:1a:f5:23:4b:1d:91:e7:de:
39:58:42:2a:8d:bc:49:c3:ce:f4:25:d2:e6:94:92:
20:ab:78:d4:79:ce:8a:4f:36:ae:98:d2:72:07:68:
e7:2d:d5:b9:d6:8a:49:2a:ed:ef:db:66:34:12:a2:
ce:25:0f:03:ba:5b:3f:e0:a5:43:be:35:e0:50:19:
9d:a2:5b:58:20:be:fc:cc:f6:0e:c9:24:97:a3:95:
fe:3c:1d:ae:dd:d6:56:20:f6:d4:6d:16:bb:51:29:
03:13:69:ce:93:25:85:ba:6a:a6:f1:64:b4:0b:b8:
9a:0a:ff:c9:3c:9a:ad:ac:0c:f5:14:11:5c:58:31:
e2:31:4c:5d:8b:63:56:52:c8:e8:ca:5b:a4:73:5d:
d8:88:79:fd:69:b2:6a:8f:e8:56:e8:f7:33:00:e4:
1e:bd:fc:5f:eb:63:4f:9b:b4:81:be:4c:52:5b:c8:
14:08:c3:40:c0:2d:87:29:13:f6:fc:71:1b:85:ce:
1c:72:83:b0:93:71:a8:ae:67:6d:99:31:77:73:05:
0a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:FC:D0:8A:FD:86:AD:6D:7B:57:7D:95:07:7A:AC:1B:80:45:39
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2d:67:40:23:36:de:a3:96:4a:60:26:de:ed:fd:c9:58:b0:
cd:fb:14:e6:11:e1:e6:89:17:cd:25:f3:0a:89:85:72:50:f8:
84:db:da:98:4b:35:56:14:ed:be:dd:01:a3:24:a9:69:92:db:
3d:1a:c4:2f:d0:fb:59:cb:bc:99:04:12:31:6c:84:c6:bb:dd:
2a:7d:09:30:5f:f9:9e:eb:b8:8b:1d:bf:9d:d6:14:7c:fe:81:
ec:75:ff:32:65:11:3e:5b:9f:a3:18:d0:ec:aa:8a:8d:25:6b:
25:86:25:0e:e9:3d:29:8f:5c:15:8a:cb:dc:a4:e6:cf:1d:c7:
02:9a:73:b9:cf:c9:e7:f5:50:93:34:49:a5:77:d5:23:05:f9:
56:5c:7d:d3:96:ac:85:57:7a:95:8c:2f:67:a6:64:69:0e:33:
be:ed:6d:ac:a5:20:64:09:53:d7:56:ec:47:77:43:7b:64:15:
b2:c4:bb:aa:6b:e7:66:8f:4e:b0:72:d8:ff:10:d3:1f:ee:3d:
2f:6a:10:8e:8b:23:83:7c:c4:98:0f:69:84:fa:48:01:af:27:
7f:37:ba:50:10:44:03:be:64:eb:d5:5c:e1:ef:3b:f5:47:b1:
58:e9:21:e1:f5:b6:68:eb:e8:ae:c6:7d:89:e3:4c:90:67:53:
cf:a0:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:27 2026 by rpki-client