Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: bd9uJ5qyxM3hyLhvSlFGWMBPb+WmA0IheX3WF2p2ixM=
Subject key identifier: 59:40:75:D6:1F:A6:C9:A0:B0:67:34:E9:6C:C4:13:36:F0:C6:40:C9
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 01A0C66A206C6ED4189794C56B1549319A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1706
Signing time: Tue 22 Sep 2026 00:00:38 +0000
Manifest this update: Tue 22 Sep 2026 00:00:38 +0000
Manifest next update: Wed 23 Sep 2026 00:00:38 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: t2l1XXUIAuUJPsosYHyLHkmeMODlm2a8vb1vzzwKL6M=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:20:6c:6e:d4:18:97:94:c5:6b:15:49:31:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Sep 22 00:00:38 2026 GMT
Not After : Sep 23 00:00:38 2026 GMT
Subject: CN=594075d61fa6c9a0b06734e96cc41336f0c640c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:a0:67:2b:69:9f:bd:63:65:29:d7:12:b1:
61:a8:9b:44:f0:9e:77:3b:da:f3:99:f0:29:19:d6:
4f:ea:02:8f:6d:b6:0d:d2:34:5c:a5:6d:4d:8c:8f:
2e:11:5d:55:d8:90:7c:20:81:f2:b8:b6:1a:b4:42:
8c:8a:7e:24:69:61:6e:71:cc:43:61:4c:fa:cf:af:
50:bc:9e:10:06:42:4a:b4:9a:0a:1e:ab:b1:3a:73:
c9:b8:f4:22:15:1b:2d:f5:43:12:ea:49:aa:6e:ac:
17:07:46:9c:e5:fc:e9:87:38:31:16:24:5e:df:88:
0e:65:61:38:16:4e:ec:75:6c:79:5d:30:ab:2f:c0:
f1:43:f3:8e:0f:52:6a:4f:af:eb:d0:c2:69:f7:71:
fb:4e:4b:9b:23:c1:2f:2c:d9:d6:8c:46:9a:b2:74:
ee:62:dc:9e:a0:ab:96:bf:de:06:42:98:6c:58:b3:
ec:4a:02:dc:e7:35:19:49:6e:f4:5f:8e:80:13:dd:
ff:70:15:9b:6f:70:3e:e3:78:e2:fc:c4:93:04:d6:
48:26:11:5e:23:9c:d9:bd:ea:22:d9:06:17:65:14:
8e:23:76:19:76:3e:b0:15:1b:c6:41:64:c9:df:36:
68:ac:87:ca:9f:dc:e4:3c:70:83:fe:6f:e8:7d:0c:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:75:D6:1F:A6:C9:A0:B0:67:34:E9:6C:C4:13:36:F0:C6:40:C9
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:82:f1:e3:5d:2e:39:ce:d6:12:4f:43:65:01:a3:4b:1c:bc:
da:e5:95:44:18:7a:d1:e9:de:6d:52:95:6a:09:e4:eb:74:df:
f6:bf:43:1d:9a:99:70:8c:1b:c1:03:b5:a6:f5:a2:25:32:da:
7c:5a:6e:6d:de:21:b5:45:c2:e5:27:82:8f:e9:c2:f8:1d:02:
01:63:2a:c5:cd:0e:2b:92:62:0a:7f:92:df:44:c0:eb:53:e0:
1c:6b:c6:8c:5b:05:97:53:c4:ba:d2:c5:80:7e:b8:2c:bd:71:
b2:2e:68:e3:7e:4f:5c:cc:d8:bc:fd:2b:33:c9:85:f1:0d:ce:
86:a5:92:5b:4d:df:2e:00:95:4e:a3:d5:a1:04:4d:d7:a7:94:
8a:06:dc:4d:90:59:d7:47:30:5f:c2:b4:93:e0:e6:64:dc:98:
9e:ac:ac:2f:eb:2a:4d:9d:b7:43:65:d0:eb:ef:e5:2b:f5:cb:
a4:36:18:c2:6f:4d:36:c6:c1:e3:d3:a6:03:9f:99:87:91:6d:
2f:fc:6d:02:58:56:12:9d:c9:e7:5f:c6:b5:31:9f:e8:fc:87:
f6:96:c2:e1:9e:3b:d5:bb:f8:83:4c:36:2c:8e:1b:69:94:80:
95:55:f2:f1:aa:c8:28:d2:03:3b:49:f6:ac:8e:1e:90:54:fd:
a3:ec:b2:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGaiBsbtQYl5TFaxVJMZpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw
ZTFiM2UwHhcNMjYwOTIyMDAwMDM4WhcNMjYwOTIzMDAwMDM4WjAzMTEwLwYDVQQD
Eyg1OTQwNzVkNjFmYTZjOWEwYjA2NzM0ZTk2Y2M0MTMzNmYwYzY0MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX2gZytpn71jZSnXErFhqJtE8J53
O9rzmfApGdZP6gKPbbYN0jRcpW1NjI8uEV1V2JB8IIHyuLYatEKMin4kaWFuccxD
YUz6z69QvJ4QBkJKtJoKHquxOnPJuPQiFRst9UMS6kmqbqwXB0ac5fzphzgxFiRe
34gOZWE4Fk7sdWx5XTCrL8DxQ/OOD1JqT6/r0MJp93H7TkubI8EvLNnWjEaasnTu
YtyeoKuWv94GQphsWLPsSgLc5zUZSW70X46AE93/cBWbb3A+43ji/MSTBNZIJhFe
I5zZveoi2QYXZRSOI3YZdj6wFRvGQWTJ3zZorIfKn9zkPHCD/m/ofQxKLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlAddYfpsmgsGc06WzEEzbwxkDJMB8GA1UdIwQY
MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt
YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz
LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoLx410u
Oc7WEk9DZQGjSxy82uWVRBh60enebVKVagnk63Tf9r9DHZqZcIwbwQO1pvWiJTLa
fFpubd4htUXC5SeCj+nC+B0CAWMqxc0OK5JiCn+S30TA61PgHGvGjFsFl1PEutLF
gH64LL1xsi5o435PXMzYvP0rM8mF8Q3OhqWSW03fLgCVTqPVoQRN16eUigbcTZBZ
10cwX8K0k+DmZNyYnqysL+sqTZ23Q2XQ6+/lK/XLpDYYwm9NNsbB49OmA5+Zh5Ft
L/xtAlhWEp3J51/GtTGf6PyH9pbC4Z471bv4g0w2LI4baZSAlVXy8arIKNIDO0n2
rI4ekFT9o+yyUg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:14:27 2026 by rpki-client