Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: wMSiXRXd3P0ou0krlfMTqVsx1tOQPHs3j1XA89I6aMM=
Subject key identifier: 9D:62:36:98:C3:3D:CD:D4:57:29:2D:71:A8:79:C3:F6:1F:7E:7A:5A
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019CEB5D16788D4D21BB24AED76C814FA447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 05BF
Signing time: Sat 14 Mar 2026 08:01:12 +0000
Manifest this update: Sat 14 Mar 2026 08:01:12 +0000
Manifest next update: Sun 15 Mar 2026 08:01:12 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: 9BmusxmlSVGqJGKIQHxhcMrlkVcc7p/yPCoRKLOTGi8=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:5d:16:78:8d:4d:21:bb:24:ae:d7:6c:81:4f:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Mar 14 08:01:12 2026 GMT
Not After : Mar 15 08:01:12 2026 GMT
Subject: CN=9d623698c33dcdd457292d71a879c3f61f7e7a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:31:b6:d6:6e:27:06:b4:ad:f0:eb:f0:89:
c0:e9:57:f5:0b:3f:56:22:00:16:d2:eb:78:cd:2b:
c5:c2:12:cd:6b:50:c1:92:98:ce:59:d5:bd:f8:35:
73:c7:33:ba:9e:0f:cf:74:b9:5c:a8:04:58:ed:e0:
c6:66:2a:b6:67:05:3d:44:41:b9:95:36:af:c2:58:
6f:05:08:ba:13:cf:d9:f8:52:da:80:13:19:f7:2a:
2e:51:37:1d:d5:f5:07:6d:e3:0b:e6:c3:1e:b0:ca:
a5:e1:ce:be:52:2d:5f:bb:f0:46:bd:48:bf:cf:cd:
f5:ce:24:fb:f6:8a:c7:e4:06:55:00:16:1b:8d:fc:
fb:a9:c6:96:86:72:a3:8a:6f:6b:1b:a2:19:73:58:
65:8a:37:95:3f:1c:13:1b:84:41:47:f3:e8:da:44:
c1:b0:03:b9:6d:17:bd:31:8a:da:56:e2:f4:5f:e5:
8d:c9:8e:e4:68:1c:02:f3:5f:e2:06:1f:0c:6e:87:
29:4c:8c:4f:06:ea:21:ab:23:d7:b6:bc:5a:6d:50:
8e:9d:45:ee:a1:01:76:27:8b:b0:d7:06:76:a4:0e:
a0:79:bf:a1:a7:2a:b6:ff:b2:dc:23:c4:53:76:01:
cf:39:6b:dc:5c:f3:6f:dd:0d:59:45:21:d3:32:64:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:36:98:C3:3D:CD:D4:57:29:2D:71:A8:79:C3:F6:1F:7E:7A:5A
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a0:ec:82:cc:98:70:ed:62:c4:7a:03:6d:69:39:a3:81:55:
7d:ed:8f:e4:b4:94:c2:e9:7f:dd:9d:ed:67:22:72:d7:c2:9e:
84:1a:06:22:29:19:e5:5e:98:9b:c8:61:b7:ec:f7:b9:74:21:
b8:b3:b8:cd:af:0d:9f:09:f5:30:15:7c:cb:52:32:b9:8a:80:
7c:a5:88:ae:0c:09:17:c3:53:78:d1:c6:3e:45:fa:03:5f:3b:
82:99:14:88:de:a1:c5:c1:2d:8b:69:b6:58:d7:8e:91:ac:be:
ee:7c:d4:23:80:9a:0e:2d:26:58:1b:e9:0b:a8:a7:32:c9:07:
28:e6:c6:71:02:b6:f7:bc:2a:44:ce:6e:41:31:54:ae:aa:58:
4a:ee:08:6a:0b:43:b8:30:8e:ee:42:ea:84:65:94:51:30:5f:
44:ba:5d:d3:89:61:a8:a7:bf:7d:e6:07:f5:96:f8:e6:0c:e7:
f9:1a:29:00:ae:82:15:5d:c3:65:22:dd:a7:2d:d6:20:0a:2b:
16:bd:8f:d2:e9:e0:5d:dd:16:fd:db:97:24:b7:ab:61:41:81:
9a:a5:f0:b6:df:8b:63:a3:c5:66:25:d6:60:0e:52:cd:00:32:
ab:24:98:99:b2:3c:a7:cb:95:c9:a8:71:dc:2b:ec:1f:a1:b3:
e1:fe:7a:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZzrXRZ4jU0huySu12yBT6RHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjYwMzE0MDgwMTEyWhcNMjYwMzE1MDgwMTEyWjAzMTEwLwYDVQQD
Eyg5ZDYyMzY5OGMzM2RjZGQ0NTcyOTJkNzFhODc5YzNmNjFmN2U3YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsxttZuJwa0rfDr8InA6Vf1Cz9W
IgAW0ut4zSvFwhLNa1DBkpjOWdW9+DVzxzO6ng/PdLlcqARY7eDGZiq2ZwU9REG5
lTavwlhvBQi6E8/Z+FLagBMZ9youUTcd1fUHbeML5sMesMql4c6+Ui1fu/BGvUi/
z831ziT79orH5AZVABYbjfz7qcaWhnKjim9rG6IZc1hlijeVPxwTG4RBR/Po2kTB
sAO5bRe9MYraVuL0X+WNyY7kaBwC81/iBh8MbocpTIxPBuohqyPXtrxabVCOnUXu
oQF2J4uw1wZ2pA6geb+hpyq2/7LcI8RTdgHPOWvcXPNv3Q1ZRSHTMmROnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJ1iNpjDPc3UVyktcah5w/YffnpaMB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk
MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6Ds
gsyYcO1ixHoDbWk5o4FVfe2P5LSUwul/3Z3tZyJy18KehBoGIikZ5V6Ym8hht+z3
uXQhuLO4za8Nnwn1MBV8y1IyuYqAfKWIrgwJF8NTeNHGPkX6A187gpkUiN6hxcEt
i2m2WNeOkay+7nzUI4CaDi0mWBvpC6inMskHKObGcQK297wqRM5uQTFUrqpYSu4I
agtDuDCO7kLqhGWUUTBfRLpd04lhqKe/feYH9Zb45gzn+RopAK6CFV3DZSLdpy3W
IAorFr2P0ungXd0W/duXJLerYUGBmqXwtt+LY6PFZiXWYA5SzQAyqySYmbI8p8uV
yahx3CvsH6Gz4f56nw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:06 2026 by rpki-client