Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: AtohRTK3NiOxNRDN2+mKmx+okMW7E4ocY7+MOsuqX7Q=
Subject key identifier: 04:A7:75:F6:E5:48:90:0B:EA:A9:A6:95:64:B3:31:74:8C:01:81:66
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01A13E26939920E97F584729EC8F533A6265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:01:17 +0000
Manifest this update: Thu 15 Oct 2026 06:01:17 +0000
Manifest next update: Fri 16 Oct 2026 06:01:17 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: IEBeTTGtpVZ5wVCC+SuySbnk0jQ0lTRWuiW33J/tRfE=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:93:99:20:e9:7f:58:47:29:ec:8f:53:3a:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Oct 15 06:01:17 2026 GMT
Not After : Oct 16 06:01:17 2026 GMT
Subject: CN=04a775f6e548900beaa9a69564b331748c018166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:ca:4c:9b:d5:cd:a9:ac:37:7a:e9:c2:41:
eb:da:c6:4e:74:fc:87:21:15:a6:fe:ec:c3:01:df:
1b:69:cd:76:d3:ad:8c:c5:b8:a3:c6:ff:00:60:16:
eb:29:50:24:1f:a5:d6:6e:ce:f0:15:f6:06:02:a3:
b7:5c:b6:cb:74:c0:47:c4:dc:0c:67:8f:0f:af:17:
69:48:12:5c:2c:6c:45:30:a9:8e:4d:0b:ea:05:bf:
9c:17:85:70:dc:4e:3c:25:a3:9a:d2:98:2f:5e:47:
48:c3:ed:d8:57:c8:a4:86:0a:44:ff:d5:95:d0:a1:
bf:b3:03:34:c2:02:d7:87:c8:56:e7:f4:a5:98:e6:
82:2f:b0:e0:ff:d1:93:0e:c0:43:32:f7:65:fb:19:
9a:6b:6e:a2:2f:43:a7:c0:e1:e6:f5:a0:d7:af:e2:
88:af:3b:d0:ae:c0:96:62:8f:2f:e2:ad:8c:81:45:
dc:dc:aa:db:47:0b:b4:86:33:60:05:96:2b:86:7c:
ca:7e:30:37:8c:e9:cc:52:82:07:15:b4:48:36:8c:
ce:b9:b7:10:ef:74:6c:ee:1b:33:2f:0e:63:03:b2:
ec:c2:4f:b5:aa:d7:b7:98:80:b8:c3:3c:a7:2f:2d:
15:95:ae:62:8f:32:dc:97:a7:62:e7:43:04:d4:e9:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:75:F6:E5:48:90:0B:EA:A9:A6:95:64:B3:31:74:8C:01:81:66
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:76:11:44:72:9c:2a:ef:13:f4:d0:5e:cd:48:6a:22:cb:
a9:b3:67:c0:a5:e1:56:7c:20:dd:66:42:f4:28:e8:3d:2c:af:
f0:dd:63:98:ee:23:dc:cb:b7:78:63:fc:4d:0c:f9:d1:5d:ed:
ab:5a:80:c4:48:e9:fd:37:99:5d:8d:c5:7d:30:04:28:94:24:
57:93:65:09:09:6a:d0:fe:e7:bb:0e:6e:d1:6e:d8:03:1b:89:
5f:c4:1d:ce:46:a5:c4:b2:3f:ca:06:98:0f:89:12:df:fb:7e:
d0:58:c6:1a:ca:0f:08:a5:fe:84:a8:70:b8:0d:0a:bd:5f:a5:
45:0f:8a:e0:99:39:ae:a9:d8:f1:7e:b6:28:bf:8b:7f:f5:74:
5d:18:6b:ba:d1:02:e9:65:e9:d3:dd:76:c9:4d:9a:ae:3f:80:
4e:38:32:02:82:53:da:38:6d:8c:86:a5:13:54:0c:7d:bb:26:
f8:84:c6:f4:d2:81:96:f0:14:03:3b:12:6e:6b:0f:6b:aa:11:
82:90:d1:d1:77:b4:91:16:86:dc:6f:df:22:37:a0:a5:4b:7b:
8e:0b:dd:d4:f8:80:40:d7:82:81:18:a1:b4:c4:94:c4:c6:57:
f3:5f:8e:42:cc:ab:2a:4c:d2:f9:dc:c0:47:34:33:23:68:5b:
79:ff:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:42 2026 by rpki-client