Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: os1ib3HwojNpzrluGehLE2w3bkUG81OmdLFyxSeit2c=
Subject key identifier: BA:EE:3C:21:96:26:07:4C:03:E2:4C:E6:E6:88:3A:49:E2:1C:70:63
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 01A0016F04D2DF75583A470290BDAC7E5DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 09E1
Signing time: Fri 14 Aug 2026 18:00:47 +0000
Manifest this update: Fri 14 Aug 2026 18:00:47 +0000
Manifest next update: Sat 15 Aug 2026 18:00:47 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: RBOjrOU+HdoPxXwwuGqyVYlgxSFa7rcsffdK57etklo=)
2: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (hash: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk=)
3: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (hash: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:04:d2:df:75:58:3a:47:02:90:bd:ac:7e:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Aug 14 18:00:47 2026 GMT
Not After : Aug 15 18:00:47 2026 GMT
Subject: CN=baee3c219626074c03e24ce6e6883a49e21c7063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:29:85:00:6e:5c:5a:45:aa:8a:d6:6b:21:
a1:64:99:73:fe:bb:6a:86:8a:d1:f0:e8:11:3d:0b:
7e:64:99:de:e5:b0:72:f8:3e:9e:bf:e0:73:ba:a0:
22:6a:b0:1d:05:75:8c:c3:38:33:c7:e6:47:e8:3e:
2a:38:df:12:7e:ec:f6:51:6e:5c:ca:b6:eb:bb:df:
b2:38:d6:f9:62:ad:c1:da:29:f1:e1:d1:9e:2e:f3:
a1:a8:be:de:84:9a:d2:76:2b:48:79:45:cd:36:c6:
f5:f9:9c:73:30:06:ce:dc:5a:f0:ca:96:03:17:83:
08:e8:fd:59:b5:8f:7c:3a:15:ea:6e:ae:75:c9:3c:
8f:db:c8:5f:94:4a:79:1c:54:cb:14:bd:47:b9:d4:
57:6e:33:6b:1b:c5:b4:9b:f5:3b:e3:6e:da:76:fc:
49:b2:4a:06:05:9d:70:82:f5:3b:80:f1:8c:d8:74:
53:c4:47:90:c8:f8:44:c1:b9:2b:80:3e:e4:e3:7f:
1e:fa:e8:bf:21:11:87:39:c9:bd:67:ec:98:0c:ec:
86:ac:9e:c6:71:00:a0:c1:29:ec:3f:d9:de:eb:d6:
f3:59:b1:e6:47:a7:e1:81:f5:b7:3d:4c:9a:61:bc:
76:42:41:5a:2c:56:b9:a8:fb:d2:ed:bd:fc:1c:0e:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:3C:21:96:26:07:4C:03:E2:4C:E6:E6:88:3A:49:E2:1C:70:63
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:79:57:c3:1e:53:37:50:5b:8a:d6:32:91:5f:d8:9d:7f:cc:
0f:8f:2a:57:73:1e:cf:53:71:25:64:e9:37:eb:52:60:4d:b5:
c1:8e:39:72:90:c0:33:f1:38:74:5d:d2:c4:e4:0b:34:a4:b2:
ae:75:8b:21:3b:a1:57:bb:3b:28:e3:0e:be:60:ef:40:54:cf:
30:e0:4e:f0:f0:8b:88:b4:7b:07:88:0e:e0:94:0c:ce:12:81:
e9:3a:8b:6f:25:80:b2:8d:11:5d:97:14:d6:c4:d3:78:25:f2:
b9:eb:aa:e8:09:75:21:e2:78:7d:5c:34:3e:5d:28:cb:d2:7f:
8c:6e:84:9a:e2:f6:8e:d1:7b:66:6e:31:2e:e6:47:03:52:e9:
49:4c:eb:78:aa:52:b4:35:ba:28:b0:9f:39:53:e8:61:9b:21:
af:bf:52:d3:20:3d:0b:d1:32:48:68:a8:a7:52:03:24:a3:d9:
f7:6e:8b:e9:85:45:9c:77:3f:e7:07:14:3d:07:54:59:2b:18:
35:10:bb:14:bf:b9:30:74:2f:df:b3:86:df:b0:db:69:5b:c0:
b0:4f:98:f8:27:0b:70:59:78:7a:b1:0f:12:5e:f8:78:c3:1d:
8c:0d:41:06:2b:4f:68:f1:02:91:f2:1d:56:27:c5:14:b8:38:
a0:52:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:38 2026 by rpki-client