Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier: 9bExKISQuuv00AG38+QmXawYdnQKTPf0/EZUv0J38MQ=
Subject key identifier: 1C:52:FF:6B:56:E2:2A:F1:01:0D:C8:C2:64:B3:A4:72:2A:74:A8:DB
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer: /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial: 019CE47F27BEA7B8572F7BC9CED7DE46C9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number: 101C
Signing time: Fri 13 Mar 2026 00:01:04 +0000
Manifest this update: Fri 13 Mar 2026 00:01:04 +0000
Manifest next update: Sat 14 Mar 2026 00:01:04 +0000
Files and hashes: 1: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: Z+Gs7QA4QAAZsLVOMCDofPwn39CR9Y/Spr6B+TImzFM=)
2: AMh4k1oWD7PnlfMavG7L6jv07hw.roa (hash: +g6V9pdeR+6pG0sd9oadIWK01wzE9uV3/4JWPD1+Ejg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:27:be:a7:b8:57:2f:7b:c9:ce:d7:de:46:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Validity
Not Before: Mar 13 00:01:04 2026 GMT
Not After : Mar 14 00:01:04 2026 GMT
Subject: CN=1c52ff6b56e22af1010dc8c264b3a4722a74a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:bc:0c:33:72:37:15:89:6a:de:4b:e7:99:
98:dc:1a:93:89:07:db:41:11:d7:29:c0:e8:40:ec:
24:b4:b8:9f:36:60:7e:a6:32:5f:59:2a:d9:e0:2e:
a9:cf:a3:39:37:71:be:12:e6:90:b5:b1:c9:f8:8b:
8e:8c:33:9a:a0:22:60:4d:43:54:6a:f5:5d:16:a6:
d5:fc:27:2b:60:a8:7c:72:7e:20:5b:1e:df:db:83:
cc:21:27:e5:1d:1c:09:b1:a2:1c:7c:6c:a9:60:9a:
fd:e2:86:ef:83:3a:9f:39:92:47:5d:ad:c3:b8:16:
07:3b:65:87:10:66:28:40:9b:0d:c1:67:ff:72:ec:
f4:a1:76:3b:2e:ae:41:87:20:bf:df:17:52:5c:26:
ef:9f:34:47:d6:bb:19:a0:4b:f9:67:1c:0b:a6:bb:
59:08:2e:dd:8f:03:ad:d7:4a:2c:5e:d5:6e:3c:ba:
ce:72:96:fb:dc:8e:58:90:d5:5c:7b:f7:23:4f:48:
cc:bd:d1:f4:a3:ed:0e:d0:30:31:fc:ef:ef:a4:ec:
89:9c:f3:46:7a:cf:3d:da:81:d1:b5:71:6a:c0:7e:
c5:32:de:e5:9d:f5:ca:de:d5:3a:e4:4b:ea:85:f2:
e3:bd:d9:91:4b:d3:f9:df:72:fd:d9:4c:27:d5:a2:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:FF:6B:56:E2:2A:F1:01:0D:C8:C2:64:B3:A4:72:2A:74:A8:DB
X509v3 Authority Key Identifier:
keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a3:07:b4:f2:09:6a:53:a4:53:df:f7:c1:40:bc:45:ea:35:
92:98:3a:cd:b3:55:08:71:c6:03:11:49:25:dc:d9:96:1c:17:
3d:1d:aa:06:3f:26:61:f1:fb:6a:55:6a:b0:4c:35:88:27:e9:
ad:b0:2f:db:88:84:13:c9:ac:b0:ff:58:7a:5e:da:47:3f:d4:
82:d3:94:ba:a7:75:e4:c2:e6:c6:bc:9d:ee:f1:bb:15:16:f5:
4d:40:98:6e:72:43:aa:98:f8:8a:6d:5f:dd:f5:6c:bb:e5:57:
17:bc:18:42:e2:23:26:da:29:2f:db:16:8f:b4:f3:97:cc:fb:
a1:d6:3f:4e:57:81:46:d1:a4:81:29:f3:db:f7:0e:50:27:27:
21:2e:c6:ae:74:52:c8:4b:1b:5d:c0:c1:e4:3b:33:0f:14:b6:
4f:53:65:a9:71:3e:11:d8:72:1a:c6:8b:5e:91:ca:e5:01:8c:
ae:c3:ba:d8:ae:46:a6:f6:28:d8:4b:dc:bc:b7:05:17:2e:04:
ed:55:dd:c4:92:e9:e9:4f:0d:49:22:e7:ce:1f:06:08:65:7f:
34:d2:2f:3c:bb:51:b9:c9:70:c2:f1:88:cd:e1:f8:d6:7f:2e:
55:fd:bb:b4:f8:60:0d:05:4e:94:63:9a:82:2e:a8:3d:d1:f5:
03:d9:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:57:05 2026 by rpki-client