Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: sDxkfwimXSbG5nb+CenpCv0EFusyDV887CpRYjB4k4c=
Subject key identifier: 32:A0:AA:77:6F:78:C0:76:E8:D7:2F:B1:C0:7D:1C:23:D4:17:E8:C8
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019CA9EB2004B00C638897BF1AA005DF116C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 14E5
Signing time: Sun 01 Mar 2026 15:01:24 +0000
Manifest this update: Sun 01 Mar 2026 15:01:24 +0000
Manifest next update: Mon 02 Mar 2026 15:01:24 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: c8rGtHAL1lm7+5krzOC/yCN0DyaksneyYM8QHEqER6Q=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:20:04:b0:0c:63:88:97:bf:1a:a0:05:df:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Mar 1 15:01:24 2026 GMT
Not After : Mar 2 15:01:24 2026 GMT
Subject: CN=32a0aa776f78c076e8d72fb1c07d1c23d417e8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:b8:b2:42:ca:d5:2d:91:e9:c6:44:5e:e5:
ca:2a:2e:7c:91:27:f1:7d:e0:55:d1:6c:b5:30:b7:
37:05:a7:34:96:e1:e0:43:97:21:a2:7a:4d:1b:9b:
2b:b8:30:4b:6b:62:79:c3:70:4e:3f:d2:b1:42:91:
d9:b8:a5:b7:70:e4:14:5b:af:9f:c8:55:8a:d2:ea:
f6:5c:7b:f0:87:9f:75:3c:2a:4e:07:e3:ad:22:34:
76:8a:00:9a:e7:d9:4b:6c:fa:35:59:f8:e6:7c:43:
59:c7:88:c8:28:80:ab:75:c5:13:12:1c:b9:24:d6:
96:6a:86:32:57:01:23:d0:90:93:b1:df:08:f7:00:
6a:85:76:60:5a:a9:0e:4e:cf:39:b8:07:4b:c6:f0:
21:46:b0:bf:ec:84:01:da:af:28:44:8f:e2:fd:f9:
77:24:63:9e:47:4b:b2:cc:f7:a6:f1:d9:8d:e5:f6:
20:d1:2b:dc:35:8b:db:17:7c:90:88:5c:a8:c3:51:
43:3c:a5:f8:0f:de:90:52:19:9f:6c:b5:4b:65:26:
00:2e:e3:a1:25:ff:c1:5e:ed:0b:59:cb:17:0a:47:
e2:bb:72:4e:ef:6f:01:cd:ec:2e:42:6d:34:3a:cd:
39:f3:e8:94:ef:57:ea:07:7b:29:0a:88:0b:ef:9f:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:AA:77:6F:78:C0:76:E8:D7:2F:B1:C0:7D:1C:23:D4:17:E8:C8
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:61:63:e3:06:38:91:91:c0:d5:68:31:d8:73:34:19:8f:
38:e1:0e:a7:ff:c8:c7:d2:ae:c0:10:0d:8d:b2:03:59:41:e4:
3b:81:f7:16:5e:c4:12:5f:5b:fa:34:eb:ec:70:6f:21:86:e5:
e5:e0:58:7a:5d:75:89:7e:49:05:91:d0:9f:ea:6c:83:fb:6f:
d3:98:54:bc:90:2e:a5:fb:a8:8f:dd:0a:8b:c5:11:a2:0f:ab:
07:2f:1d:31:b5:9e:a6:a8:f2:2b:0b:22:f1:7b:4e:f0:0a:af:
12:3b:68:e7:00:e1:ba:84:b4:cb:77:8d:11:e8:6d:ea:b7:bc:
d5:08:06:c1:23:8b:a9:ff:27:68:1d:73:e2:8a:92:7c:e3:b4:
2b:93:90:73:d3:e5:d6:7d:34:8f:8e:0f:c0:3d:03:89:58:db:
0e:4c:fa:21:c9:f0:07:31:10:29:75:0a:5d:11:65:8b:1d:bc:
7f:a6:4b:7c:8a:cf:04:e2:5f:a2:49:fd:06:af:24:28:e3:f4:
f6:2b:e9:2f:28:aa:d1:77:69:15:e2:a9:47:b4:89:91:c5:3d:
1e:47:74:b0:d5:16:d3:69:99:59:9f:6f:b9:b7:39:82:c5:e3:
27:14:b6:c7:f4:fc:ba:59:23:f8:59:69:aa:b7:d8:14:11:48:
e5:54:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:53 2026 by rpki-client