Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: uZcUStY2cdT+4y3m9IYARtcSIJ1PgvmF94hR9Qdx9Mk=
Subject key identifier: 89:96:A0:06:24:FF:81:35:00:7B:67:FC:53:9A:5B:D3:37:7C:44:E1
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019D9774835AC1A2DFEF206678D37BBC7622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1560
Signing time: Thu 16 Apr 2026 18:01:28 +0000
Manifest this update: Thu 16 Apr 2026 18:01:28 +0000
Manifest next update: Fri 17 Apr 2026 18:01:28 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: kOoXr8zCmnAnt9xnz+HJH4qm9Lz5l3Yn7e6Ts4h0mSU=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:83:5a:c1:a2:df:ef:20:66:78:d3:7b:bc:76:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Apr 16 18:01:28 2026 GMT
Not After : Apr 17 18:01:28 2026 GMT
Subject: CN=8996a00624ff8135007b67fc539a5bd3377c44e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:04:18:98:8a:6f:1c:6c:f8:b6:15:6a:13:
18:07:6a:15:42:16:4e:ee:b3:f4:5e:ec:6f:a7:7d:
19:27:e4:c3:ad:09:8a:61:53:16:c1:fa:f3:14:79:
46:b9:60:93:02:a9:2d:cc:32:ae:8f:a6:d9:ee:42:
ba:5e:30:2a:3f:fd:da:74:b3:98:e5:a3:25:03:71:
f4:91:34:39:84:64:6e:55:ae:fb:4e:aa:50:b6:59:
ea:7d:e9:f4:0f:88:40:ea:95:9f:4d:df:87:62:d9:
9e:f5:62:57:92:b3:75:37:c8:ea:5f:e4:d5:19:f6:
2a:95:3a:ea:fc:b8:b9:5e:34:b9:3a:80:10:10:70:
c8:80:ce:ea:67:55:fa:a3:60:ce:34:da:1f:25:a4:
89:74:41:6e:5b:bb:ad:b7:19:c3:81:72:3c:b1:e0:
28:bc:e7:15:d8:77:b0:92:75:99:69:f8:84:8f:82:
c1:25:9d:76:ca:57:17:11:b8:6d:77:d5:83:a6:e5:
14:1f:cc:2a:7a:e2:6e:ea:a7:5a:3e:a6:28:5f:a4:
34:d1:73:54:af:ea:a8:7d:3e:f9:8d:ba:1f:e2:c5:
9f:73:5c:cf:35:ef:2b:a8:66:f2:9e:69:11:b0:bc:
e1:c8:41:cb:d6:a2:b7:98:1e:63:0d:ba:06:cf:82:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:A0:06:24:FF:81:35:00:7B:67:FC:53:9A:5B:D3:37:7C:44:E1
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:b6:9d:81:83:72:4c:de:b0:82:67:6f:ba:db:58:59:02:
15:5c:25:9a:30:63:80:44:e5:8c:ed:2c:20:2e:3b:40:2a:1b:
1c:54:1f:ba:a4:5e:9d:26:61:5d:b6:29:45:37:25:92:13:30:
d7:89:d2:77:e4:0d:e6:30:66:ee:f1:87:83:c6:d6:b2:a6:21:
e3:b5:5d:bb:c5:a1:7c:bc:5f:5f:ac:d0:b7:6c:f0:65:66:1a:
8e:e9:70:8d:1f:91:95:37:1e:2c:cc:5d:6c:25:a2:64:55:33:
8a:b0:1d:2e:f7:3e:49:d1:c2:24:7f:4d:b2:69:07:b9:34:ef:
e7:90:0e:9e:8e:cd:5e:d3:dd:3e:5e:ed:af:aa:52:28:76:18:
9d:fc:93:99:1d:3d:58:58:f3:28:68:75:76:f9:b9:0d:ec:e6:
c0:7c:69:fa:1d:cb:65:ba:03:c2:e7:6e:4e:e6:c3:f0:7c:e7:
c9:33:b3:8a:ad:25:b3:57:93:86:af:c7:a4:a6:fb:78:39:61:
00:21:5e:7b:68:b9:d8:da:93:7a:12:29:13:c9:6e:6a:75:f9:
c9:83:15:da:a2:06:33:53:e7:6e:c1:78:08:00:c5:e3:d2:7f:
71:41:ca:35:f7:3e:00:d5:00:10:b6:28:77:92:0b:aa:ad:05:
21:b3:3b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdINawaLf7yBmeNN7vHYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw
ZTFiM2UwHhcNMjYwNDE2MTgwMTI4WhcNMjYwNDE3MTgwMTI4WjAzMTEwLwYDVQQD
Eyg4OTk2YTAwNjI0ZmY4MTM1MDA3YjY3ZmM1MzlhNWJkMzM3N2M0NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q0EGJiKbxxs+LYVahMYB2oVQhZO
7rP0Xuxvp30ZJ+TDrQmKYVMWwfrzFHlGuWCTAqktzDKuj6bZ7kK6XjAqP/3adLOY
5aMlA3H0kTQ5hGRuVa77TqpQtlnqfen0D4hA6pWfTd+HYtme9WJXkrN1N8jqX+TV
GfYqlTrq/Li5XjS5OoAQEHDIgM7qZ1X6o2DONNofJaSJdEFuW7uttxnDgXI8seAo
vOcV2HewknWZafiEj4LBJZ12ylcXEbhtd9WDpuUUH8wqeuJu6qdaPqYoX6Q00XNU
r+qofT75jbof4sWfc1zPNe8rqGbynmkRsLzhyEHL1qK3mB5jDboGz4J9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImWoAYk/4E1AHtn/FOaW9M3fEThMB8GA1UdIwQY
MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt
YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz
LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeK2nYGD
ckzesIJnb7rbWFkCFVwlmjBjgETljO0sIC47QCobHFQfuqRenSZhXbYpRTclkhMw
14nSd+QN5jBm7vGHg8bWsqYh47Vdu8WhfLxfX6zQt2zwZWYajulwjR+RlTceLMxd
bCWiZFUzirAdLvc+SdHCJH9NsmkHuTTv55AOno7NXtPdPl7tr6pSKHYYnfyTmR09
WFjzKGh1dvm5DezmwHxp+h3LZboDwuduTubD8HznyTOziq0ls1eThq/HpKb7eDlh
ACFee2i52NqTehIpE8luanX5yYMV2qIGM1PnbsF4CADF49J/cUHKNfc+ANUAELYo
d5ILqq0FIbM7Xw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:58 2026 by rpki-client