Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: JRWfsA9nN8fOxeOoo2SVniKB8HDNAmDMIyjxywAJjwk=
Subject key identifier: 85:76:08:2A:57:BC:1F:9B:58:0E:A5:84:BB:4B:90:F3:69:52:4C:71
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019FA8995D0B3C2D33A19F9E232F735EC6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 1672
Signing time: Tue 28 Jul 2026 12:00:50 +0000
Manifest this update: Tue 28 Jul 2026 12:00:50 +0000
Manifest next update: Wed 29 Jul 2026 12:00:50 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: cgn2sWyZYDLqyv34tNJdv56bXdI+2Pr97a2iYsTjUQ4=)
2: iX9f-EzSBZVahm_eBu7qNdeTIv0.roa (hash: c2QhZ9r34Kk9CIhAjt/NPLFP2q8FB8VeWJ8RWP+MAD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:5d:0b:3c:2d:33:a1:9f:9e:23:2f:73:5e:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Jul 28 12:00:50 2026 GMT
Not After : Jul 29 12:00:50 2026 GMT
Subject: CN=8576082a57bc1f9b580ea584bb4b90f369524c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:57:6c:35:85:9e:1f:c4:95:2d:22:54:73:
12:33:74:da:f4:36:77:8c:7c:17:88:24:86:bc:9a:
f2:de:54:99:9c:42:54:61:b8:b7:a3:69:5c:8c:6a:
47:73:25:61:4b:e9:02:a0:97:56:fa:df:5c:a1:33:
83:1e:e1:29:78:44:22:db:50:40:27:cd:9b:24:d8:
76:1c:e9:e6:86:c1:71:43:5e:e7:b3:db:3a:ff:7f:
a3:37:d9:e8:3e:27:8f:cb:cf:58:5f:fc:4a:a2:98:
6d:b1:b8:0d:a2:80:f5:9c:78:2e:76:18:3f:40:1e:
8d:b2:24:43:96:f6:73:80:ef:a4:5b:75:1b:5e:f3:
18:9e:b8:94:58:c2:8d:80:ec:67:de:db:a7:f2:d3:
40:ea:56:3f:32:97:c2:f0:4f:8b:29:20:56:c4:52:
02:38:42:d4:02:03:31:da:89:9d:6a:19:40:db:93:
42:61:33:75:f6:db:44:3d:02:be:22:f2:76:a6:ba:
cd:21:b2:d4:d4:18:b7:c6:c6:6e:0c:2d:23:33:6d:
17:bc:b1:67:50:e6:0a:8b:fd:32:fa:e2:0b:70:f3:
46:1c:81:14:70:d4:69:2a:b6:f3:c1:6d:df:3c:41:
7e:e6:0f:48:d8:00:38:86:c2:14:7d:ca:69:e3:f0:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:76:08:2A:57:BC:1F:9B:58:0E:A5:84:BB:4B:90:F3:69:52:4C:71
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b1:79:a2:23:cc:ed:cf:ca:e1:bf:f7:8d:7d:91:9b:eb:14:
04:76:de:e0:7e:5c:2a:9e:07:b1:f7:68:1a:69:db:e4:27:01:
d6:0f:ef:f4:0d:34:ef:3c:f1:3e:4b:6c:32:06:52:55:2b:64:
84:35:7e:f9:de:88:34:a5:2a:78:51:ba:99:d5:cd:37:72:e4:
3e:bc:a9:38:59:e3:ae:af:6e:45:9b:c4:a3:9c:8b:96:f8:3e:
02:b6:1e:0c:ac:20:c2:fb:41:1d:ed:80:02:17:63:60:b3:6b:
86:1d:63:e6:f2:eb:ff:53:f6:26:4a:22:74:c6:ef:99:ba:25:
3c:f8:f9:a2:f7:b3:e6:65:b6:f1:ac:c9:94:43:17:d3:16:a6:
c5:63:cb:ff:f3:14:d5:e8:40:e6:61:66:75:cd:c1:5b:ed:4a:
a0:5f:3c:0c:70:e8:64:62:2d:3e:8c:26:d9:6f:a3:a7:bb:91:
4a:06:25:81:a2:d4:be:41:92:9e:2a:4e:a9:99:43:7a:fe:09:
5f:48:1f:7d:3a:ab:8f:4d:6c:ca:51:50:7f:1c:25:6c:ac:70:
0e:a5:ee:14:87:48:64:6a:57:15:d1:d4:31:59:14:c1:ed:3f:
44:25:30:28:f0:7e:52:a7:ed:bb:34:68:c5:46:9c:d5:92:50:
43:6b:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:34 2026 by rpki-client