Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: pPKoYCUjkl1frGTrSE4MvceVr3fqCwvGP3NUJzUfdbo=
Subject key identifier: C7:3A:69:01:30:B6:03:A7:A0:A0:C8:DB:16:DE:30:BC:14:99:08:EF
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01A18F4318A67F4511FF6111F720B2FA1DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 00:01:41 +0000
Manifest this update: Sat 31 Oct 2026 00:01:41 +0000
Manifest next update: Sun 01 Nov 2026 00:01:41 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: gAaIP/v2qPh516cPrEL0ZuSKv96ihaS2YkvD2a61TC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:43:18:a6:7f:45:11:ff:61:11:f7:20:b2:fa:1d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Oct 31 00:01:41 2026 GMT
Not After : Nov 1 00:01:41 2026 GMT
Subject: CN=c73a690130b603a7a0a0c8db16de30bc149908ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:b6:cc:70:e0:a1:b3:98:1f:ce:b1:89:3a:
3f:52:fc:e3:21:db:b7:c7:90:21:7a:3d:7f:c6:57:
62:fe:e7:1e:ce:5d:78:ef:bb:7d:de:7b:bf:9e:e0:
a3:97:4c:42:ac:9d:01:3a:8d:8b:9c:d6:91:38:41:
26:8c:f7:00:e0:dc:9d:af:83:69:27:13:6a:3a:fc:
8d:bc:fe:5a:59:58:fe:df:a6:30:91:40:66:cf:fa:
ec:07:5e:ed:a0:f5:aa:7a:bb:94:c7:bd:00:83:c0:
5a:39:3f:a3:28:f3:33:f0:b7:41:df:d8:bd:20:ec:
35:3c:4d:c3:c8:b5:42:f8:ff:da:b0:34:b8:7e:6e:
ca:dc:d6:95:ac:f1:83:45:06:a2:f9:dc:06:bf:e4:
6e:2c:a9:9e:cd:cd:d6:1c:a9:c0:48:44:2a:17:51:
3a:00:c1:c2:d8:ff:c8:17:3e:9a:24:6f:16:3d:8e:
4f:93:01:43:8c:f4:f2:ba:ad:e8:5a:d7:41:db:34:
2d:fc:81:23:52:ae:a0:e3:80:20:da:7f:65:32:53:
49:a1:9a:a4:44:f3:df:26:c5:a9:33:cf:3b:45:17:
e2:61:78:56:c2:dd:72:ea:5c:e7:ed:f0:f5:82:90:
8b:ea:06:9e:b7:b4:45:a8:83:c0:63:dd:2c:36:52:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:69:01:30:B6:03:A7:A0:A0:C8:DB:16:DE:30:BC:14:99:08:EF
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:27:50:35:30:ba:a3:d2:c3:14:5b:f7:fa:e4:c5:d0:d6:88:
f3:a7:89:bf:bf:0d:15:ab:2e:21:a1:64:e1:82:61:22:86:53:
b3:63:f6:d4:2b:6b:08:94:93:cf:ee:b7:af:6d:2e:4e:50:00:
72:8f:23:40:fa:58:82:37:1e:a7:88:e3:2d:c1:a5:6e:aa:ba:
c8:89:e1:eb:fc:cd:f2:43:d7:ba:e0:64:3c:4e:35:24:d5:f6:
df:6f:e1:9d:c9:27:c1:57:7e:6f:61:bb:89:57:e0:a8:8f:76:
ee:63:cd:59:fc:04:9d:d1:85:6c:e6:15:08:3c:3d:d5:ee:49:
9d:c6:f5:9c:98:73:f4:54:90:fb:9a:a7:bb:b4:87:eb:d7:06:
41:81:de:9b:7e:8d:01:0e:7b:4a:4a:82:a5:e9:15:b7:50:ee:
d2:bf:20:14:27:02:29:10:73:62:8e:a0:1e:d7:bf:bc:c3:45:
ae:b0:ad:32:27:f7:a3:5e:8a:fd:cd:53:01:6c:aa:08:66:5a:
e7:51:fe:2f:8b:ac:53:68:7d:2f:57:62:a5:8f:04:d1:d7:6e:
b2:4a:02:fa:ea:a4:67:28:ec:9b:4a:8a:df:93:9d:98:55:44:
c1:fd:6a:7a:eb:b7:b9:1d:aa:0e:a7:41:52:61:25:51:c6:0c:
bc:4a:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:18:50 2026 by rpki-client