Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: +jT46Gz4f7bYxIWL4Vc4mqvEVS3QBaeFI2chxFYP9pw=
Subject key identifier: B0:DF:D2:7E:47:92:46:51:AD:9A:76:1E:50:CE:94:B0:72:8C:4C:68
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019FA18473E1E640E9C7DE7E588214D19501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 1187
Signing time: Mon 27 Jul 2026 03:00:39 +0000
Manifest this update: Mon 27 Jul 2026 03:00:39 +0000
Manifest next update: Tue 28 Jul 2026 03:00:39 +0000
Files and hashes: 1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: XFJGxHved06dS6/cb6kRLYDUDqPqsSOD8AoFbz/V2G8=)
2: AMh4k1oWD7PnlfMavG7L6jv07hw.roa (hash: +g6V9pdeR+6pG0sd9oadIWK01wzE9uV3/4JWPD1+Ejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:73:e1:e6:40:e9:c7:de:7e:58:82:14:d1:95:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Jul 27 03:00:39 2026 GMT
Not After : Jul 28 03:00:39 2026 GMT
Subject: CN=b0dfd27e47924651ad9a761e50ce94b0728c4c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:19:f8:f8:40:4f:f2:8b:ce:23:15:13:0f:
f1:4a:b9:a5:32:00:4a:f2:b3:cc:b5:f0:90:a2:f1:
2a:2a:b6:0c:79:97:0f:16:b0:41:8e:08:5b:42:d3:
7f:4d:b1:99:f5:e8:35:b5:b8:a1:16:34:5d:ca:97:
2d:b7:13:c0:42:f5:04:f8:1e:c4:68:56:07:9e:92:
fd:75:e8:b7:36:fc:e0:5f:8e:05:1b:06:dd:6f:04:
c5:b5:8f:d7:88:c2:f4:d5:38:b1:1b:2a:ce:85:c2:
5c:0e:34:dd:85:31:02:d2:89:2d:14:77:8a:17:d4:
5a:be:97:fb:8b:77:0f:1f:42:a5:fa:36:dd:a6:69:
5a:22:5f:82:0f:81:30:79:08:36:93:8e:1a:16:6a:
d0:f7:a9:83:69:eb:2a:85:df:83:fc:59:25:f0:90:
e0:ff:34:83:57:3e:0c:03:cc:b8:0a:dd:75:5a:bf:
7f:e8:c6:b7:39:12:1c:4d:56:ae:2f:41:c1:d8:0d:
07:fe:41:f9:4c:91:18:7f:7b:6f:56:0a:61:f8:7b:
e1:33:5b:1a:fb:6f:fe:0e:b7:cf:af:dd:72:06:a5:
54:68:2a:15:f3:70:9d:2a:f4:06:1d:86:f7:7f:07:
eb:49:3a:ab:43:b1:a0:61:b2:37:80:b1:a3:2b:b3:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DF:D2:7E:47:92:46:51:AD:9A:76:1E:50:CE:94:B0:72:8C:4C:68
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:fb:c6:7d:47:7c:52:a8:a2:25:7c:42:f5:39:69:a9:77:e8:
d1:0e:70:7d:34:47:cb:20:5f:6e:26:4f:a0:43:6a:ff:a8:cc:
ae:f3:e4:79:c9:53:74:ee:b2:43:8b:1d:3a:f2:66:89:2e:e3:
76:31:c9:31:f3:66:e5:bd:23:9d:01:b8:5e:eb:07:00:f4:a7:
64:d9:45:9c:35:6d:ae:4a:53:7f:e6:63:da:72:e9:2f:95:cb:
03:a1:3c:08:f9:e9:6c:41:d1:11:be:47:5c:86:36:f6:1a:e8:
c6:56:3b:7b:bc:6c:95:f6:9f:ab:f8:38:0c:f5:e8:aa:19:2d:
e9:09:4b:db:61:bf:ba:bc:cb:49:f5:05:96:1c:77:25:2c:bc:
fa:1b:25:8f:25:eb:c5:71:f5:48:45:39:bc:fb:06:5c:97:c3:
a8:3d:89:b5:d7:64:91:c1:61:2f:5a:11:fc:f6:2e:db:ff:dc:
f5:c8:ef:cb:16:03:d7:69:24:95:bd:30:5c:e6:90:9a:74:a7:
69:6c:0a:8d:53:28:b8:3e:5a:57:cb:bc:83:06:45:53:4e:f8:
8e:f0:2f:1b:f7:21:77:3f:5f:95:42:ec:d4:f8:66:cb:bf:eb:
f9:f7:e6:22:e6:91:ed:13:0e:c7:b7:7f:ef:28:47:02:6c:78:
53:25:af:58
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+hhHPh5kDpx95+WIIU0ZUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDcyMTNmMzU4NWI3MTEyZGZmMGNiNDNjMTkyYjFjYWYz
MDdkMTgwHhcNMjYwNzI3MDMwMDM5WhcNMjYwNzI4MDMwMDM5WjAzMTEwLwYDVQQD
EyhiMGRmZDI3ZTQ3OTI0NjUxYWQ5YTc2MWU1MGNlOTRiMDcyOGM0YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r4Z+PhAT/KLziMVEw/xSrmlMgBK
8rPMtfCQovEqKrYMeZcPFrBBjghbQtN/TbGZ9eg1tbihFjRdypcttxPAQvUE+B7E
aFYHnpL9dei3NvzgX44FGwbdbwTFtY/XiML01TixGyrOhcJcDjTdhTEC0oktFHeK
F9Ravpf7i3cPH0Kl+jbdpmlaIl+CD4EweQg2k44aFmrQ96mDaesqhd+D/Fkl8JDg
/zSDVz4MA8y4Ct11Wr9/6Ma3ORIcTVauL0HB2A0H/kH5TJEYf3tvVgph+HvhM1sa
+2/+DrfPr91yBqVUaCoV83CdKvQGHYb3fwfrSTqrQ7GgYbI3gLGjK7N5QQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLDf0n5HkkZRrZp2HlDOlLByjExoMB8GA1UdIwQY
MBaAFPjXIT81hbcRLf8MtDwZKxyvMH0YMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OY2hQeldGdHhFdF93eTBQQmtySEs4d2ZSZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNDk1M2VlLTkxMGYtNGI4ZS1iNDY0
LTI2NTBlZGQzMDEzZi8xLzEtTmNoUHpXRnR4RXRfd3kwUEJrckhLOHdmUmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzQ5NTNlZS05MTBmLTRiOGUtYjQ2NC0yNjUwZWRkMzAx
M2YvMS8xLU5jaFB6V0Z0eEV0X3d5MFBCa3JISzh3ZlJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5PvG
fUd8UqiiJXxC9TlpqXfo0Q5wfTRHyyBfbiZPoENq/6jMrvPkeclTdO6yQ4sdOvJm
iS7jdjHJMfNm5b0jnQG4XusHAPSnZNlFnDVtrkpTf+Zj2nLpL5XLA6E8CPnpbEHR
Eb5HXIY29hroxlY7e7xslfafq/g4DPXoqhkt6QlL22G/urzLSfUFlhx3JSy8+hsl
jyXrxXH1SEU5vPsGXJfDqD2JtddkkcFhL1oR/PYu2//c9cjvyxYD12kklb0wXOaQ
mnSnaWwKjVMouD5aV8u8gwZFU074jvAvG/chdz9flULs1Phmy7/r+ffmIuaR7RMO
x7d/7yhHAmx4UyWvWA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:10 2026 by rpki-client