Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: 2Xxz3URzSHkkgcAw5ZvfemZ/RKepTqaAKvcKUl6lYUo=
Subject key identifier: 24:F1:83:7F:63:EC:A6:82:40:38:3E:4B:29:AC:A6:52:79:32:0A:07
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 01A18074578A1FC3B0EDE6A524387BD1AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 127F
Signing time: Wed 28 Oct 2026 03:01:10 +0000
Manifest this update: Wed 28 Oct 2026 03:01:10 +0000
Manifest next update: Thu 29 Oct 2026 03:01:10 +0000
Files and hashes: 1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: 392P92huS49u4B9E/DhGtrX8kIQXB+F2suufCrsPKS8=)
2: AMh4k1oWD7PnlfMavG7L6jv07hw.roa (hash: +g6V9pdeR+6pG0sd9oadIWK01wzE9uV3/4JWPD1+Ejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:57:8a:1f:c3:b0:ed:e6:a5:24:38:7b:d1:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Oct 28 03:01:10 2026 GMT
Not After : Oct 29 03:01:10 2026 GMT
Subject: CN=24f1837f63eca68240383e4b29aca65279320a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:81:f5:50:39:a5:09:67:35:83:11:b7:e8:
f4:43:75:0c:e7:ef:ee:53:87:cd:f5:41:2e:d4:0e:
73:96:46:0d:c7:34:8b:e0:98:39:a4:7d:10:8f:91:
01:4e:5e:51:a6:e5:8a:f7:52:89:84:9e:8f:52:1c:
fa:a5:32:1f:7b:db:3f:55:8e:1b:6b:32:b2:e3:79:
5d:20:b8:54:85:a5:8f:ec:d6:36:6e:64:aa:5d:ba:
1f:69:9c:04:d1:66:37:0b:d7:94:3c:00:64:46:4c:
aa:1a:a6:45:b2:cf:f3:0c:3e:c5:8c:ae:b4:48:b7:
26:4d:53:9a:44:e4:ca:66:dd:26:e9:57:19:11:1f:
98:05:e3:f5:0e:f4:a5:1d:c2:87:1d:65:08:ac:27:
39:1c:5e:39:a2:c6:ec:b6:37:3e:d4:36:a0:90:79:
09:dc:49:e6:d8:52:9a:83:cf:62:8d:75:68:06:66:
c4:26:74:9e:63:44:4c:f9:d7:2c:b7:dc:1d:c6:7a:
83:24:35:ad:4c:d3:8f:10:14:e2:b0:86:ac:d9:27:
30:e5:b3:34:46:c1:da:9c:b5:84:5c:27:5b:3e:3a:
fc:2f:2c:7e:52:38:62:1b:b1:b6:4b:c3:11:e6:b1:
6f:1a:b4:e0:ca:f2:27:e5:14:fe:fc:af:74:92:1c:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F1:83:7F:63:EC:A6:82:40:38:3E:4B:29:AC:A6:52:79:32:0A:07
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:86:89:73:89:2d:b9:e0:e1:2e:11:9f:30:b6:ce:d9:93:96:
0c:6c:9f:c6:67:27:0d:83:8f:76:e5:5d:02:45:33:c3:2e:14:
0e:dc:01:51:fe:83:17:b6:37:03:94:2c:27:63:9d:4f:c7:13:
b2:57:e8:d8:c6:4d:98:b5:4d:59:41:48:14:78:0d:00:9a:65:
8b:b3:e9:6b:f8:eb:68:0d:7f:16:55:bb:a1:f3:54:95:9f:a0:
d7:ac:56:88:cb:cf:96:61:be:3b:b8:de:6f:94:80:70:84:77:
09:ab:30:65:2c:31:56:47:5d:7c:05:20:9b:f7:8d:4a:0b:62:
e5:b8:33:40:9f:0b:c5:0a:73:ed:3c:4a:3a:02:c4:e0:2e:97:
22:94:9a:60:35:7c:53:49:94:26:5d:44:9d:29:9c:06:69:2b:
24:7c:ef:82:0b:99:ce:ee:c3:ce:3b:cd:25:47:54:2c:94:df:
5d:c4:f3:7d:b7:72:23:84:1a:42:ba:a1:a7:12:93:a2:16:63:
38:54:85:8d:c9:f5:72:03:c8:7f:55:a3:bd:72:73:38:71:d6:
01:39:88:19:f5:c0:b6:04:08:70:55:19:ca:5b:78:8e:89:0f:
dc:41:02:5c:d3:8b:55:3a:eb:2a:a3:e8:6c:b6:ab:a8:66:a0:
42:0b:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:45 2026 by rpki-client