Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: zXZo0h1xA7QOCAYgK7Bkr4kC8FhBflEn3aSuLiORM+M=
Subject key identifier: E1:5A:AD:52:74:72:80:05:B8:EA:BB:DD:3A:4F:92:44:3C:9B:3F:CD
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01A12B44BD8EFB21AE08460CE8A900A51773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 1290
Signing time: Sun 11 Oct 2026 14:01:27 +0000
Manifest this update: Sun 11 Oct 2026 14:01:27 +0000
Manifest next update: Mon 12 Oct 2026 14:01:27 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: jBXwxgmUcQNOfUHKoKACHWo7NlJLe3N3L5VaM+Onwgo=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:bd:8e:fb:21:ae:08:46:0c:e8:a9:00:a5:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Oct 11 14:01:27 2026 GMT
Not After : Oct 12 14:01:27 2026 GMT
Subject: CN=e15aad5274728005b8eabbdd3a4f92443c9b3fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:38:db:c7:36:1e:57:9d:4d:3b:d7:b0:fa:
68:29:6e:0e:11:93:54:e2:40:4f:bb:9d:eb:13:28:
7f:92:76:3c:51:cd:7a:43:03:d7:3e:a3:a9:ab:5c:
09:ad:fe:2f:be:0a:cd:c1:e2:97:ed:ac:f7:25:ea:
f6:2c:4a:e1:dd:26:54:35:f9:5a:99:3c:6b:6b:21:
25:40:47:03:17:6f:59:5b:19:86:c2:be:df:a2:55:
9a:26:fd:99:33:d4:4a:57:4e:09:ae:20:92:cf:fb:
c7:d3:b6:fb:77:23:de:d1:8a:60:46:fa:b2:17:03:
e9:43:db:ff:7e:2a:10:5a:b8:0e:c3:9c:90:4d:43:
51:95:84:b3:3c:f1:b9:09:e9:a5:3f:72:4a:30:28:
e2:39:15:49:d5:4f:65:17:28:c5:41:b6:d2:3e:1d:
16:52:70:09:d6:6f:e2:9c:06:eb:7c:30:a4:9b:8c:
ae:45:6c:08:80:f8:b7:57:0b:f3:1c:c4:f7:2f:f1:
8b:ef:f7:91:4c:6d:d0:92:7d:1b:38:92:af:3b:f7:
ac:66:5d:80:e5:66:3f:bf:66:7a:2e:2e:9c:5c:82:
ae:f8:2e:78:1b:90:a8:db:18:3b:f1:2a:64:ab:e3:
ab:9f:6d:5b:9e:5a:24:e6:eb:56:09:c3:99:20:7f:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:AD:52:74:72:80:05:B8:EA:BB:DD:3A:4F:92:44:3C:9B:3F:CD
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ea:d6:b6:c7:a5:4a:71:c6:2b:8e:c3:62:9d:cf:1b:ea:fb:
ed:09:3d:12:9b:12:57:a2:f3:60:b1:fe:11:5a:9f:c7:97:55:
1e:e7:76:07:94:51:25:78:41:9b:c9:a3:be:ee:f5:2f:a9:a4:
ba:57:f3:51:1b:1d:2d:48:a5:68:d4:c0:f0:84:e5:55:ea:8e:
ee:21:42:3b:e1:32:95:a1:5f:92:16:c4:5c:20:dd:42:33:26:
c1:33:70:0c:8d:45:84:6e:d4:63:31:19:74:71:d4:dd:bd:bb:
b4:a8:37:53:dd:5c:30:e3:20:f4:df:af:51:2d:e3:f7:e6:e8:
f9:a3:95:04:05:1c:3b:63:06:d9:68:69:19:3e:17:1b:4b:4b:
05:21:99:99:2c:11:e1:a1:07:93:0f:66:71:6b:5d:e1:20:b7:
ce:4b:16:96:70:33:c7:0f:9d:ef:5d:aa:36:f5:df:3f:d5:1f:
2f:74:18:34:f5:f7:2c:2c:5e:4f:17:28:34:46:d4:c4:9e:3d:
63:d5:e2:73:06:5a:f0:91:dc:17:ba:af:81:a5:4f:4b:5c:01:
bb:fb:78:54:5d:8d:39:89:80:26:44:3a:b3:83:00:d2:75:e8:
40:b2:04:78:6e:22:86:d2:09:93:58:2b:85:1f:28:c1:55:e9:
9d:d1:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:21:34 2026 by rpki-client