Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: jVRLyPibrG59KTXHLkYxwW+l366RZ29eY8Yq+Ks2CJU=
Subject key identifier: CB:A4:B8:36:DE:40:E0:0E:A1:93:93:3C:49:A1:28:7B:F8:BD:E9:B7
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019D37C075DB290564A4B21C3B590E41DCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0A2A
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: vxsNSfDNTizW5ZD+9iubnnXXoVbyUeV82E6B2ssbqYA=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:75:db:29:05:64:a4:b2:1c:3b:59:0e:41:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=cba4b836de40e00ea193933c49a1287bf8bde9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:73:b4:0a:26:0f:a5:90:56:ce:8f:43:c8:
97:f2:18:65:c3:e1:33:00:01:6a:e1:cb:a5:df:07:
3e:13:e9:69:0e:c5:a9:c9:83:98:aa:9c:d6:bb:1d:
15:d0:aa:32:52:d4:10:ce:33:90:b9:c9:4a:03:57:
bd:08:97:0f:ac:db:57:d8:78:67:cf:c3:15:c9:fb:
b2:f3:d4:79:5b:34:56:79:8b:0f:84:f6:04:c4:5c:
89:1f:1a:61:d1:8f:0c:f5:50:2e:d9:65:e7:95:7c:
3b:1a:46:99:54:3f:20:2f:d9:57:0c:76:5e:33:00:
06:4f:5d:64:6b:51:1d:08:9e:84:63:15:29:26:d1:
a9:eb:15:5f:ac:56:7a:ae:b0:fa:0c:5f:43:0d:b5:
6e:33:ce:06:6b:05:6d:a1:82:0c:ba:9a:97:ca:e2:
d5:3e:00:19:fd:9a:33:75:4e:c7:19:fd:8c:45:64:
6e:b0:f0:b6:2d:09:c9:22:df:dd:d0:9c:68:64:84:
5f:3f:6f:0c:cc:6f:11:5e:74:be:b4:86:db:86:6d:
e5:a3:81:3d:13:a5:2c:97:41:91:b3:a1:9d:00:7a:
8b:f3:c6:56:b9:d4:20:dc:5f:45:e6:98:5a:f3:94:
b5:5c:b4:11:df:2e:c5:e5:ff:e3:ff:12:c9:58:6e:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:B8:36:DE:40:E0:0E:A1:93:93:3C:49:A1:28:7B:F8:BD:E9:B7
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cc:72:33:b3:35:45:0e:2c:81:76:2d:92:0e:d5:d3:29:87:
fd:87:0d:66:5a:55:dc:00:8e:79:7a:6b:ca:6f:62:0e:b6:2b:
6f:bc:fa:12:5b:72:90:ad:86:d6:dd:35:4f:96:6d:db:b3:ab:
ba:7a:f8:b0:c7:e6:fa:1b:d7:12:71:09:94:85:26:45:40:f7:
5e:41:48:07:44:31:3d:c6:8a:06:de:6c:e4:3f:73:16:c3:1d:
dc:fb:85:c1:d5:25:9b:6e:d5:17:41:88:4d:64:3a:99:31:12:
82:96:0b:9b:84:e0:cf:96:06:a8:db:51:9e:13:cb:08:29:4e:
02:ab:31:f7:d2:1d:82:14:90:09:06:67:b6:69:07:e5:c4:a1:
8d:a5:f2:52:41:7e:a3:7f:64:83:4a:4c:de:11:f1:82:c3:2e:
25:80:2e:8d:2c:42:3a:67:75:29:e8:88:e6:81:42:70:28:af:
06:16:a8:2d:66:cf:91:a0:fa:56:a5:80:ae:5b:cf:50:9b:cf:
60:31:8a:05:a0:4c:69:1f:2e:54:4d:f5:7c:ae:53:d7:09:60:
2d:5c:7c:77:e6:9a:95:cf:ec:cb:df:0d:ca:5f:01:3c:30:0a:
10:1d:d4:a9:f3:39:be:9f:31:c8:4c:d0:83:f7:7a:ce:25:76:
41:28:2c:22
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03wHXbKQVkpLIcO1kOQdy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj
ZDNlNzMwHhcNMjYwMzI5MDQwMDUyWhcNMjYwMzMwMDQwMDUyWjAzMTEwLwYDVQQD
EyhjYmE0YjgzNmRlNDBlMDBlYTE5MzkzM2M0OWExMjg3YmY4YmRlOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZtztAomD6WQVs6PQ8iX8hhlw+Ez
AAFq4cul3wc+E+lpDsWpyYOYqpzWux0V0KoyUtQQzjOQuclKA1e9CJcPrNtX2Hhn
z8MVyfuy89R5WzRWeYsPhPYExFyJHxph0Y8M9VAu2WXnlXw7GkaZVD8gL9lXDHZe
MwAGT11ka1EdCJ6EYxUpJtGp6xVfrFZ6rrD6DF9DDbVuM84GawVtoYIMupqXyuLV
PgAZ/ZozdU7HGf2MRWRusPC2LQnJIt/d0JxoZIRfP28MzG8RXnS+tIbbhm3lo4E9
E6Usl0GRs6GdAHqL88ZWudQg3F9F5pha85S1XLQR3y7F5f/j/xLJWG5IQQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMukuDbeQOAOoZOTPEmhKHv4vem3MB8GA1UdIwQY
MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi
LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5
ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcxy
M7M1RQ4sgXYtkg7V0ymH/YcNZlpV3ACOeXprym9iDrYrb7z6EltykK2G1t01T5Zt
27Orunr4sMfm+hvXEnEJlIUmRUD3XkFIB0QxPcaKBt5s5D9zFsMd3PuFwdUlm27V
F0GITWQ6mTESgpYLm4Tgz5YGqNtRnhPLCClOAqsx99IdghSQCQZntmkH5cShjaXy
UkF+o39kg0pM3hHxgsMuJYAujSxCOmd1KeiI5oFCcCivBhaoLWbPkaD6VqWArlvP
UJvPYDGKBaBMaR8uVE31fK5T1wlgLVx8d+aalc/sy98Nyl8BPDAKEB3UqfM5vp8x
yEzQg/d6ziV2QSgsIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:23 2026 by rpki-client