Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: J77ew5UgVCQkZIYUvKDUCQ8iQi2FJfnOPYgkSbHWwEM=
Subject key identifier: B0:AE:3C:26:00:33:B5:C5:86:E0:9C:93:00:51:86:48:C2:3C:A9:48
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 01A13D13AA8A129DC4FE918DC49BD3A4ADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0C3F
Signing time: Thu 15 Oct 2026 01:01:01 +0000
Manifest this update: Thu 15 Oct 2026 01:01:01 +0000
Manifest next update: Fri 16 Oct 2026 01:01:01 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: nbnPXt50Hlbt0dpXiBMhviI5w6672yM3FiDwx1dlldo=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:aa:8a:12:9d:c4:fe:91:8d:c4:9b:d3:a4:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Oct 15 01:01:01 2026 GMT
Not After : Oct 16 01:01:01 2026 GMT
Subject: CN=b0ae3c260033b5c586e09c9300518648c23ca948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:cd:b4:92:26:d5:58:66:cc:94:5f:6e:2b:
4f:df:23:8e:4a:1b:06:ce:a8:f7:11:06:71:10:83:
a5:b9:87:91:74:3e:ed:e6:c8:00:20:e5:5b:72:83:
2f:8c:21:7d:61:8a:d1:15:8c:19:ab:a7:52:e6:e0:
e8:41:db:fa:6d:a1:f2:39:b8:cc:b5:48:ef:2f:96:
11:3d:db:1b:37:e6:ec:a6:1a:22:10:14:1a:b7:d8:
eb:24:12:5c:4e:ab:fa:27:ab:04:24:8b:22:af:05:
57:81:9c:6c:65:bc:7a:d9:f8:58:a2:cb:e4:ab:fc:
ce:01:e5:c5:b5:a1:cd:3f:9c:8e:f5:fd:4c:29:14:
d5:c7:cf:bb:cc:90:51:8c:25:1a:f6:25:03:7d:40:
08:08:b1:45:74:6d:8f:2d:d6:51:a9:b2:43:2a:44:
79:91:c1:30:e2:2d:b4:d1:c9:c4:4e:fa:ff:c0:9d:
d2:96:2c:96:b0:f6:de:b9:18:d8:1f:01:6e:70:e5:
7d:90:36:ca:41:5f:7a:8b:df:be:7e:7a:53:c1:fb:
10:eb:88:af:21:32:02:e2:09:b9:c9:db:81:27:56:
e5:61:9b:33:aa:e9:9a:fd:83:8e:45:a4:b4:4e:d6:
01:9e:17:e7:e4:18:fc:5a:5a:a7:ba:f2:f2:fc:e3:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:3C:26:00:33:B5:C5:86:E0:9C:93:00:51:86:48:C2:3C:A9:48
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:ae:bf:22:b8:3a:b8:7c:00:77:eb:91:21:15:1f:11:03:
d6:c8:45:63:25:3e:8f:e4:76:93:2a:3f:1f:97:92:1e:4f:4a:
8e:40:eb:1f:86:d0:27:80:d1:77:73:03:7c:4c:8c:01:37:64:
15:25:28:6c:c8:a1:46:4d:c7:6c:c0:62:2a:70:79:80:e5:67:
f2:4e:a8:92:5f:a3:f1:b7:38:15:65:b2:7e:f1:af:99:52:e2:
6f:9a:ca:64:5c:43:c2:11:03:14:18:33:1e:96:8c:03:bf:8e:
ab:1d:db:f8:f9:cf:5c:29:f5:bf:0e:8b:ae:9f:98:70:fd:46:
fb:94:8d:d7:d9:15:e9:a1:2c:39:d7:43:7d:b3:f8:4d:e3:a6:
cf:69:35:15:99:f3:22:9d:b1:95:71:2d:2b:22:1a:4f:32:14:
54:e5:bd:b2:d7:f6:26:b9:44:22:c1:6c:87:72:67:a7:04:6b:
cf:f8:ee:ae:45:e5:74:e6:e6:06:f3:23:9f:a4:c5:92:84:9f:
4c:7b:93:d0:32:dd:be:99:42:9a:4b:72:98:26:0d:16:4d:c1:
64:19:d6:ee:83:fb:47:c7:44:7a:dd:f9:94:b0:58:b5:ce:8b:
35:f9:5e:56:d7:59:0e:b3:83:df:af:d1:14:69:88:ac:11:a5:
85:42:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:56 2026 by rpki-client