Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: DVtdmzCW7/JkLgpDwcPLnikZcAtBN/nek0LSYdWZOUo=
Subject key identifier: 3D:42:5A:DB:4B:D4:05:44:FB:96:4D:F9:BB:14:D9:64:E1:CA:85:2F
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 01A13FDE4E082916742EBC1FEEA6D35F7609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 07FD
Signing time: Thu 15 Oct 2026 14:01:35 +0000
Manifest this update: Thu 15 Oct 2026 14:01:35 +0000
Manifest next update: Fri 16 Oct 2026 14:01:35 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: Bo2PfHyaRy8sO0ObfXHy/hPv/QkHLn0+kFwd64peAL4=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:4e:08:29:16:74:2e:bc:1f:ee:a6:d3:5f:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Oct 15 14:01:35 2026 GMT
Not After : Oct 16 14:01:35 2026 GMT
Subject: CN=3d425adb4bd40544fb964df9bb14d964e1ca852f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:e1:8f:9e:8c:a1:4d:11:4c:38:0e:06:42:
33:93:82:6c:07:6f:e4:5e:9c:38:ef:ea:e6:ec:08:
72:a0:ee:2e:a5:a2:90:9d:91:c2:bb:b8:08:bf:cc:
2a:fb:2d:c6:f9:10:a2:89:6d:65:47:f9:88:f9:c9:
f0:9a:ba:95:f8:9f:48:07:f9:8d:7b:30:8a:45:c0:
f0:bc:6b:0b:66:ae:5e:04:c6:74:07:09:10:5f:51:
64:e9:76:ce:43:7a:9e:96:e7:67:61:a0:92:c6:21:
9c:50:82:bb:a8:a6:0c:7a:fd:7e:14:87:24:92:a5:
96:a4:0f:66:e2:8d:2d:4c:36:46:57:ce:aa:37:3a:
af:34:a0:e8:b5:b5:f8:9b:e5:72:c2:4a:92:02:38:
a6:72:e1:d4:0e:6d:58:46:24:76:d0:17:5d:71:05:
99:57:02:f9:aa:65:ba:c0:3f:16:a8:50:f2:ef:9a:
f4:6e:43:ff:bd:50:47:62:f5:80:7f:bb:31:0f:25:
45:ac:d1:a8:9c:2b:d4:f1:66:63:5d:6d:0f:15:50:
dd:d7:f6:2f:ca:f3:00:09:11:a6:c4:e6:24:1b:13:
43:ae:2a:7d:39:9e:23:44:93:a2:2b:e8:ee:ad:09:
33:84:40:3b:94:32:95:c8:f3:5d:2c:81:86:e0:2d:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:42:5A:DB:4B:D4:05:44:FB:96:4D:F9:BB:14:D9:64:E1:CA:85:2F
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:41:72:52:c9:ca:38:ed:12:49:8a:af:85:d6:75:a1:b8:
be:64:f0:a0:82:5d:be:d7:fd:04:34:6e:95:2c:96:43:0a:a5:
4d:bd:06:21:c8:ce:2f:8d:80:8d:ae:bd:ea:f2:d0:53:37:19:
f5:df:32:aa:d3:f7:a2:05:e2:00:98:bb:f2:47:1d:84:a4:5b:
5d:5b:50:b3:bb:63:cf:7c:b5:ae:69:2d:32:45:5f:af:bb:3e:
59:86:53:84:68:09:1e:42:b8:13:d9:49:0f:5f:60:00:df:67:
fa:43:93:a3:2a:35:9f:ad:24:0d:78:c7:71:c8:77:d9:d5:ee:
c9:c4:42:8e:5b:76:33:87:66:36:15:e8:99:6d:11:a2:6e:32:
22:8c:11:7f:8c:8e:71:f4:9b:2e:7b:74:6b:1c:bf:da:d7:dd:
92:76:af:fc:f9:6e:d7:44:21:0a:e9:fb:37:34:8d:1e:81:25:
be:18:25:37:14:da:bd:72:84:8f:43:f0:ff:a2:55:54:dd:cd:
b5:a5:07:c8:0c:cd:ff:4e:a7:6e:f9:fe:85:b7:bb:2c:21:8e:
77:9b:39:6a:d8:9f:ca:55:7f:2c:77:e7:3b:77:68:e8:3e:a7:
95:46:3b:b8:b7:59:73:b4:80:60:ef:b1:b1:bf:3e:75:85:f4:
2f:0a:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:54:39 2026 by rpki-client