Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: kXhsV5NOWWi3UE4wJ5PEQcRj5x5fG/4UJ4l5o2O31w4=
Subject key identifier: ED:D0:38:0F:8B:A4:3E:76:2C:A8:0F:72:9A:D9:5A:77:53:89:8F:E1
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019EBEEC89685B8D8079D76C8CBABCC3F897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 15F9
Signing time: Sat 13 Jun 2026 03:00:33 +0000
Manifest this update: Sat 13 Jun 2026 03:00:33 +0000
Manifest next update: Sun 14 Jun 2026 03:00:33 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: rvhJV4r1HcVMNhwGzyOxsxDp5l1rtzGBVdj4KqfSmUI=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:89:68:5b:8d:80:79:d7:6c:8c:ba:bc:c3:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jun 13 03:00:33 2026 GMT
Not After : Jun 14 03:00:33 2026 GMT
Subject: CN=edd0380f8ba43e762ca80f729ad95a7753898fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:bc:1b:5c:6d:16:44:5b:dd:3b:c3:09:2d:
b8:79:f3:b7:c3:c7:f9:8a:03:63:04:fc:bc:c7:65:
95:ca:56:e7:67:4d:d9:7c:1a:ad:cd:ad:3a:13:05:
95:c3:d6:63:4b:a1:10:d8:1b:a4:e5:35:3b:a9:07:
37:32:aa:cd:cc:ac:a3:5d:71:6a:35:39:94:e1:80:
79:99:70:51:fa:f4:0e:0d:dd:d1:c9:13:22:9d:fd:
d2:41:87:b9:58:58:e8:c3:88:27:49:d1:f3:ff:c0:
d0:53:92:a3:50:51:3d:b5:16:79:e2:6b:20:b3:0c:
f0:20:84:b6:75:c3:ae:af:fb:45:51:33:df:50:44:
40:17:51:97:74:df:f3:06:03:78:b3:c4:c8:4d:4e:
c5:da:57:c7:76:a9:40:e1:30:c7:d9:b1:f9:68:5e:
51:72:40:e5:f2:8b:42:ee:a8:47:0f:15:2b:07:90:
f6:35:a8:22:47:13:cc:eb:03:98:17:8c:69:b4:60:
3c:51:8c:d4:81:29:ef:01:14:59:c4:7f:e4:e5:36:
4f:f9:34:c1:89:0d:11:0d:93:bb:44:ae:a9:99:0b:
40:0d:06:d8:4d:a6:e0:15:6f:11:40:de:ca:74:d2:
63:d0:38:af:74:1b:61:b3:ec:58:5d:6a:d9:29:b5:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D0:38:0F:8B:A4:3E:76:2C:A8:0F:72:9A:D9:5A:77:53:89:8F:E1
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:58:0e:32:fc:27:92:75:35:e4:1c:5c:93:54:6c:41:b6:62:
dc:2d:d8:34:4d:05:1f:91:a0:7a:4a:af:cb:9a:03:2a:63:c0:
0b:2b:e0:d9:17:c5:da:c9:4a:50:3d:d4:1d:76:a9:f6:e0:1f:
b2:04:6d:79:ff:bd:f7:fd:e5:93:78:28:be:48:14:df:95:12:
ac:1b:2b:6a:27:6c:48:a8:0e:2a:23:8c:92:5d:81:a0:ea:3a:
6f:0a:10:26:99:67:b0:90:25:a4:94:c8:b6:03:79:4c:2e:4e:
c0:19:7f:20:22:fb:b4:0a:1a:ce:e2:e4:e2:db:9d:fd:06:52:
32:32:bc:f8:23:ac:5a:2a:86:44:8d:7a:f7:65:99:6d:e3:24:
fe:26:bb:55:d0:54:c0:ef:fc:3b:5b:d7:31:06:87:bf:dc:b3:
6c:98:58:9c:06:6a:de:d4:0b:6a:2c:cf:47:8a:d6:31:4a:ff:
39:a3:dd:b5:40:32:7d:2d:be:da:7d:19:e8:7a:fb:9e:f7:07:
ec:49:ec:a7:fb:db:92:90:42:c3:52:0b:e7:7f:e8:ee:f3:ea:
d3:95:00:37:c8:43:1e:44:cf:76:fd:cc:33:e6:eb:32:49:25:
ee:56:93:9b:15:30:77:b1:28:50:83:1f:18:7f:db:ee:67:0f:
34:cc:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:48 2026 by rpki-client