Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: V9Jyy9MlfvLJesQEECcMfKib83qu+2S3wxZBVTVmcXk=
Subject key identifier: E4:AA:F9:2E:F2:B2:A0:C7:E5:8A:9F:35:9F:C0:B7:37:99:BB:5F:9E
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019F189E91AB1AFE20864A18EAF9063E5870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0B23
Signing time: Tue 30 Jun 2026 13:01:12 +0000
Manifest this update: Tue 30 Jun 2026 13:01:12 +0000
Manifest next update: Wed 01 Jul 2026 13:01:12 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: c5QRWu1WJJr3YGKCWfPe2crhRySTcahHeBApjA54iwA=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:91:ab:1a:fe:20:86:4a:18:ea:f9:06:3e:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Jun 30 13:01:12 2026 GMT
Not After : Jul 1 13:01:12 2026 GMT
Subject: CN=e4aaf92ef2b2a0c7e58a9f359fc0b73799bb5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:ec:a1:38:83:e1:dd:39:60:02:7e:39:32:
51:94:7d:b2:74:f0:e2:01:d6:9a:85:60:73:82:4a:
e4:a9:a6:8d:4d:88:ee:ce:df:ca:82:35:1d:39:74:
d7:b0:bd:53:3c:66:8e:c5:3f:19:e4:38:2b:51:ef:
13:10:57:d1:78:4f:57:4c:7c:2c:76:8f:20:29:a9:
60:89:00:01:b7:69:08:4c:cc:8b:0d:44:e5:54:eb:
cc:26:fe:03:79:5b:88:51:e8:53:ab:20:38:97:8f:
e3:63:46:22:7c:7a:78:90:86:ee:8b:77:74:89:45:
d7:9d:66:82:78:59:cf:07:a8:e5:e3:62:8a:d9:5b:
14:38:56:e7:80:2e:d8:7a:82:f9:19:c5:df:07:82:
c2:cb:dd:88:9e:9b:c3:54:44:5a:73:61:c8:7c:b7:
8d:eb:02:37:8a:dd:24:f4:f2:00:1e:7b:b5:89:98:
e9:c0:4e:57:08:6b:ac:00:92:98:96:b7:e1:ad:67:
70:4d:b3:ce:a2:d5:24:ad:4a:ef:52:78:04:77:c1:
2f:be:05:6b:6b:76:9e:a8:56:8a:03:1c:8a:b0:af:
31:8d:15:d8:d6:17:9f:ea:95:18:86:01:d1:54:04:
99:b9:4c:8f:76:0a:30:47:c2:36:14:14:ec:7a:07:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:F9:2E:F2:B2:A0:C7:E5:8A:9F:35:9F:C0:B7:37:99:BB:5F:9E
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:53:9b:3b:7d:5b:7c:e5:a2:fe:17:c8:2e:63:c0:ef:d4:cf:
38:44:c9:38:09:51:e9:1b:33:a0:f5:47:67:da:62:d1:46:e9:
d2:d4:1d:66:03:ce:4f:9e:11:4f:11:cb:fc:ad:aa:8d:82:99:
f4:21:21:3b:f8:53:18:ff:3b:53:e6:61:95:29:68:83:3a:07:
56:44:a1:ee:49:f2:3c:28:c6:3c:21:50:a8:f6:2f:63:1b:e3:
64:bb:0e:b9:b0:46:9a:3c:c3:76:80:c5:66:be:14:05:6b:b2:
77:f3:08:e1:27:e3:63:a8:7f:fe:d2:0d:33:39:97:a9:8b:8d:
49:95:c1:3b:3e:2e:f1:be:55:b7:34:b0:1d:73:85:36:08:1e:
3f:7d:bc:f1:52:f7:80:43:80:83:22:a8:fd:e2:d6:f5:78:1e:
36:ec:70:9f:0e:28:84:28:93:b6:87:90:68:9e:2e:0d:72:90:
d7:2d:56:3c:80:66:49:98:64:e6:c3:34:36:ee:5e:24:55:38:
c2:e6:af:8d:a6:3b:2a:85:8b:7d:33:a3:04:fa:7b:00:74:b7:
a9:8c:1a:cc:45:2d:b3:1f:bf:ad:9d:30:de:61:ce:85:80:de:
0e:aa:ee:fa:27:43:42:db:42:6b:01:da:81:3e:d3:b1:54:3a:
36:fa:95:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:18 2026 by rpki-client