Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: /h8tYzFLENyMaGMcWupnJqzG6KBKjgc6Sk4o7zg1ZO8=
Subject key identifier: 74:30:C0:D9:44:47:21:67:20:FA:BA:D2:94:7C:A2:22:D6:28:80:83
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01A196FC1AB05E4C2A93A2A6BDDB399A3F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1AD5
Signing time: Sun 01 Nov 2026 12:01:06 +0000
Manifest this update: Sun 01 Nov 2026 12:01:06 +0000
Manifest next update: Mon 02 Nov 2026 12:01:06 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: sbwzYvkMTqMJ2zpc3HEBtUEwGNC3oIj3LVNjETAOhsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fc:1a:b0:5e:4c:2a:93:a2:a6:bd:db:39:9a:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Nov 1 12:01:06 2026 GMT
Not After : Nov 2 12:01:06 2026 GMT
Subject: CN=7430c0d94447216720fabad2947ca222d6288083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:57:c9:f1:11:ba:1b:f5:2f:0c:c6:2c:bf:
7d:28:59:ae:2d:7c:48:60:00:cb:83:79:58:9e:0c:
bd:bc:14:14:82:30:47:f8:8a:54:86:e4:9e:be:df:
7c:ca:1c:fd:a6:53:d3:35:f3:4e:be:b6:f1:3f:1a:
41:75:cf:89:cd:1a:ca:8c:a6:96:0a:54:3e:bd:a1:
04:cd:fc:fd:1c:66:a6:9d:31:3d:90:db:4f:1e:c7:
4b:3d:d2:e2:7c:a0:8f:11:f6:91:d9:d5:42:d9:80:
10:7e:7f:c6:0f:35:08:65:8b:fc:73:0e:70:ea:81:
dd:6a:b1:43:b7:d6:ea:96:ac:05:e7:9f:c4:58:32:
8f:6d:5e:ca:f9:7c:2b:31:9e:f9:a4:f0:0c:74:06:
59:62:b2:aa:27:d7:9d:bd:a4:a0:ed:2a:57:9c:0f:
a8:10:d3:30:0f:bc:fa:20:42:6f:bf:00:f9:68:4f:
12:5d:82:76:e8:4d:42:fb:c9:4c:48:c5:5f:12:0c:
13:ff:3f:f5:af:5d:e9:18:7d:b4:03:ac:ae:9c:7a:
41:db:fd:26:a4:12:d8:95:cc:dd:9a:7b:61:6f:af:
dd:2b:14:22:be:ba:03:cd:90:ee:8a:0a:97:91:be:
22:2c:be:eb:dd:54:32:28:cf:d5:b4:c9:c2:c2:c4:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:C0:D9:44:47:21:67:20:FA:BA:D2:94:7C:A2:22:D6:28:80:83
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2a:52:63:39:5a:60:70:ad:d7:0e:b7:ea:41:1b:97:7f:3e:
65:d5:23:c5:b7:df:c2:04:cf:55:03:78:a8:e2:08:f2:fc:8f:
56:cd:35:04:19:69:5b:a4:c8:97:50:14:c6:50:91:97:9b:2a:
0c:4d:17:fc:35:8e:67:88:f2:8f:b0:1d:ce:8b:a6:c9:85:1e:
70:25:68:dc:5a:89:ec:1b:a1:73:f9:a9:9c:54:d9:92:28:d9:
38:69:e0:3c:31:da:38:f5:9e:3c:60:c4:a3:05:58:bc:fa:0d:
7d:a5:40:34:bb:84:54:08:6b:40:79:0b:cc:ca:8a:e1:05:46:
2c:5c:71:68:4f:41:69:25:ab:b3:6d:73:73:bb:19:f8:96:fa:
db:b7:02:66:ac:92:14:06:20:c2:55:6c:94:d3:77:ad:96:1a:
ce:bd:2d:56:7a:39:7b:1e:09:c5:dd:a6:04:a1:54:35:2f:68:
96:00:06:30:87:a0:4e:29:cd:6a:9e:99:a3:8b:8f:4e:98:58:
2c:eb:91:5d:92:e8:c8:87:fc:78:2a:7b:c8:07:51:11:8b:28:
9b:4d:83:e2:9e:b6:8a:e7:e6:9a:1c:99:2c:1e:a6:08:38:a8:
50:a0:4d:6e:f1:c7:2d:19:04:af:d1:53:5a:53:45:72:7a:1e:
df:ad:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:37:10 2026 by rpki-client