Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: ttJAoHuY9T36akbMhNxMGSpMR7Yv/Isg/hFL+ewNNTY=
Subject key identifier: D3:0E:B7:93:6A:B1:20:29:07:C7:89:57:60:B4:96:1F:47:64:32:D5
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019D37F767F1AEA9D7EAE0EDEC3C13A1597E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0F82
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: EUcOOWoRoODkWJCzq1B9ygk1dgVQJFp+N7DtaNf8x54=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:67:f1:ae:a9:d7:ea:e0:ed:ec:3c:13:a1:59:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=d30eb7936ab1202907c7895760b4961f476432d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:eb:57:50:64:35:16:86:80:15:31:4b:6a:
ae:dd:37:d0:41:63:3f:10:cf:03:3a:bf:77:40:ce:
36:06:97:04:b3:fe:4d:15:07:a3:8d:a7:8d:dd:3a:
81:49:65:b4:99:2e:ad:ac:e7:9a:e9:3e:f6:77:fe:
07:e2:49:3c:ec:9e:c4:f6:2f:c7:59:13:2b:ae:57:
28:b3:b5:74:7f:2f:8b:59:d2:16:87:10:d2:3c:26:
15:bc:9b:1f:8e:c1:1f:16:5e:5e:41:b5:c1:21:de:
4e:e6:af:23:83:1d:21:6f:35:f7:3b:de:2d:1a:fa:
73:c6:f2:bd:d5:c2:ec:8c:75:6e:3d:09:75:45:31:
1a:49:c2:86:53:ee:59:0a:bf:20:a2:6f:be:68:86:
fc:ea:46:75:ad:9c:4a:ee:4c:de:e3:0d:0c:18:4c:
9c:86:59:99:d9:bd:5c:da:4e:c3:e0:25:2d:7e:cf:
7a:2c:9a:58:b7:72:d3:67:95:c2:d0:54:b9:68:d3:
e6:8e:7f:f7:f5:99:9a:4d:72:1d:96:91:a0:e7:48:
5f:ad:b6:15:74:88:0f:a1:03:9b:41:38:6b:79:a7:
5c:3a:c8:60:7b:b9:5e:05:78:fb:02:65:db:ba:a6:
a3:fc:58:fd:11:5c:b6:f8:51:39:06:c2:c8:f2:d5:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0E:B7:93:6A:B1:20:29:07:C7:89:57:60:B4:96:1F:47:64:32:D5
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e5:07:27:2e:0c:47:22:92:20:96:2e:50:62:51:15:63:18:
46:45:12:66:f1:9f:a0:ea:6f:59:14:c9:71:41:4b:b2:93:47:
25:4d:26:63:04:ab:3c:86:12:f0:aa:94:43:df:c3:9d:b1:b8:
55:c4:bb:6f:b8:3f:49:5d:ee:b5:f1:0c:17:ef:e0:63:9a:82:
33:46:ac:c6:34:6e:d7:bc:62:d8:6a:1d:52:62:a1:ce:b8:f5:
8c:c1:0f:36:f9:5e:1e:77:77:8c:ff:f0:00:34:47:7e:6a:dc:
57:45:e2:f5:c6:2e:7c:01:18:54:d8:80:c7:40:0d:24:2c:8a:
12:f6:87:3f:33:d2:80:b9:85:8d:71:d5:62:02:c9:41:ce:92:
9f:56:db:92:1c:a8:ce:03:35:16:84:12:b4:ed:db:7b:eb:23:
d3:88:ad:cf:6b:26:29:5d:29:3f:c9:31:03:51:70:93:6c:85:
af:8e:0c:f8:6d:07:67:08:2a:71:5b:ce:3b:ad:29:1d:e3:c5:
8e:cb:53:b6:c4:80:ab:84:26:a5:a0:84:b5:95:c0:e5:a5:86:
82:af:08:4c:2f:15:cf:8a:b3:fa:cb:c6:86:56:3d:5d:17:86:
68:d2:fc:31:45:fe:2f:c4:cf:41:53:20:37:42:c2:64:f2:26:
dd:a4:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:55 2026 by rpki-client