Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: rEZShKV7ND+q6U4xD3VJ1mWFIczOT5AWw8fJwXPSQZ0=
Subject key identifier: 39:63:30:5B:26:5D:FF:3C:56:A7:53:11:02:21:A5:6B:61:72:DD:72
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 01A001384EBE902A65C9E268FA01C5889755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 17:01:02 +0000
Manifest this update: Fri 14 Aug 2026 17:01:02 +0000
Manifest next update: Sat 15 Aug 2026 17:01:02 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: 35ImF4KSplHaksIJHetaxbLmKAkCAKUdbMz2bKXN94o=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:4e:be:90:2a:65:c9:e2:68:fa:01:c5:88:97:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Aug 14 17:01:02 2026 GMT
Not After : Aug 15 17:01:02 2026 GMT
Subject: CN=3963305b265dff3c56a753110221a56b6172dd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:d2:da:8d:ff:97:a7:7e:d6:d2:70:96:1a:
38:b0:a2:e5:a8:39:ed:4c:f2:33:e1:0c:92:5e:4c:
f9:06:0b:34:0c:e8:00:96:69:ac:8b:9c:3a:bd:49:
f3:83:c2:db:d8:74:ef:42:9b:3a:f8:af:21:63:71:
1d:d6:38:96:51:12:ba:db:cc:d8:53:9a:13:ca:0b:
44:d7:ea:ca:78:cb:dd:61:e6:cc:01:5d:4c:ec:87:
26:ef:d7:58:75:fb:ab:f0:ad:b3:de:a2:82:8c:64:
43:b3:39:f6:96:25:22:97:12:d7:fa:57:24:b9:51:
25:8b:c4:c7:7a:b7:47:ab:f7:e8:38:00:8f:42:ca:
8c:e1:3b:59:aa:b6:dd:ec:08:bd:52:89:63:10:b2:
31:65:3d:af:e2:be:f0:92:57:3e:f5:91:e5:c2:4d:
22:a1:d8:8e:6c:40:07:15:6c:5d:2d:1b:75:41:02:
ab:ad:fe:c7:bf:d7:12:55:3d:87:ef:b1:9a:ef:00:
65:99:02:d4:c8:4d:3a:fb:e0:c1:12:09:d5:f6:21:
36:18:ac:73:8c:f4:b7:0c:06:b8:8d:b1:b6:c2:e6:
7e:c2:2c:63:fc:73:3d:f0:b0:2b:82:68:7a:3b:6a:
25:d5:36:41:6e:2d:47:a6:ce:8e:39:6a:9e:9f:4f:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:63:30:5B:26:5D:FF:3C:56:A7:53:11:02:21:A5:6B:61:72:DD:72
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3d:94:db:c1:3e:b2:1b:08:f5:16:35:d9:ef:be:69:c6:35:
50:36:87:b9:ae:03:e1:50:46:aa:16:a0:1d:58:e1:da:7c:c7:
11:cd:98:25:b6:2b:e2:a7:3a:63:dd:3f:af:c1:49:78:0b:3d:
28:96:35:d8:1c:da:36:d7:92:f3:a5:47:45:77:9e:ad:6d:fa:
6a:f5:2a:36:0a:43:b0:f3:a6:54:08:03:a8:b0:f8:9e:99:cc:
56:e0:d7:d0:9a:f1:d4:fd:f4:be:7c:4d:fc:56:75:d1:c5:93:
df:95:4a:c1:27:7a:e5:35:1e:a6:09:3f:1f:73:00:94:df:c2:
33:ea:e6:a3:93:04:75:06:6a:d2:3b:30:40:10:e1:ab:e0:56:
d4:e8:14:7a:6d:28:f2:75:b0:6e:b3:0c:e2:a3:da:ec:b7:64:
c0:ff:2c:cf:b0:76:96:a3:d2:09:6e:98:b6:bd:bf:ad:0a:cb:
73:c9:fd:73:37:63:fe:5c:de:b0:a2:85:27:84:f4:4b:a8:a7:
e6:31:aa:14:b8:be:26:b8:91:97:82:23:1e:22:30:e0:0a:50:
aa:c0:5c:04:f1:ff:64:61:15:00:4f:66:5c:12:a2:5f:d7:55:
fe:69:a9:e9:85:55:2c:95:d4:0f:b2:c2:93:89:43:f4:9c:25:
5a:9e:21:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:20 2026 by rpki-client