Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: 0Ny2mRAP5GD7Y3Wm/zw2MXXY/SeuIIoCL9u4PXHLAhk=
Subject key identifier: FC:AC:10:58:11:79:97:1F:11:B8:80:03:33:D9:62:AE:F6:3D:FD:AD
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019FAAF61AA63462B0B903CC929A3A895C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 11C9
Signing time: Tue 28 Jul 2026 23:01:23 +0000
Manifest this update: Tue 28 Jul 2026 23:01:23 +0000
Manifest next update: Wed 29 Jul 2026 23:01:23 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 9xVO22q08cq3JT42w7DkVtpyJ51radJHuNx9H26h1Kg=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:1a:a6:34:62:b0:b9:03:cc:92:9a:3a:89:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jul 28 23:01:23 2026 GMT
Not After : Jul 29 23:01:23 2026 GMT
Subject: CN=fcac10581179971f11b8800333d962aef63dfdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:f0:3f:9f:d6:d2:d1:7a:57:6b:11:2d:33:
93:f2:85:51:f7:94:e9:c3:e7:a2:cd:7c:f7:25:d7:
15:11:19:89:84:d0:ed:00:08:ed:71:5e:da:c0:2b:
a7:1d:f5:6e:23:57:1e:7a:69:81:ef:85:55:04:0a:
be:92:23:df:17:5d:61:ea:2c:cd:63:fc:7f:bd:2b:
4e:5f:bf:de:b1:36:31:5b:eb:1b:4c:61:b9:e4:41:
7c:b4:4e:11:66:13:1d:f2:e7:54:a3:77:b7:42:62:
6d:bb:9b:23:8c:9a:ad:6b:71:55:03:a6:bb:dd:ab:
82:e4:0d:b8:ba:65:6d:a9:a9:cd:30:ab:4e:6f:01:
d2:5f:ca:63:4f:1e:f1:3d:e6:71:d4:c9:9c:87:6a:
b8:9c:e6:3e:64:97:ea:a4:4a:69:94:ff:30:fa:df:
53:17:4e:6b:b5:40:f8:f4:c9:0b:47:34:c4:3d:52:
d0:9b:7a:65:72:b4:9c:08:a5:9e:e2:a5:ee:2a:e2:
2d:fe:89:02:c7:27:13:6b:d8:26:bc:22:a7:c2:8d:
42:9a:9a:98:7f:e3:30:93:6c:b1:01:93:93:e4:dd:
24:2f:dd:97:c4:a4:dd:a6:e4:d4:7f:bc:7e:0c:09:
09:e9:92:b1:ea:4e:34:77:f4:51:8a:b0:b9:b1:fe:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:10:58:11:79:97:1F:11:B8:80:03:33:D9:62:AE:F6:3D:FD:AD
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8b:e3:b9:4b:ab:ae:61:9b:41:df:87:13:69:d1:2c:50:ed:
7e:80:ec:b8:89:07:c7:38:e8:92:8e:04:52:81:d5:5a:ac:0c:
3a:14:d4:29:ea:ff:63:59:1f:dd:b0:e4:05:51:31:5f:33:1d:
ba:8b:26:63:32:58:ca:c6:06:5c:07:bf:fc:a4:75:30:04:8b:
da:ae:cf:12:5c:c9:08:50:c4:95:18:6d:31:74:f1:95:cc:fd:
ce:4c:3b:a6:0c:57:35:d5:b5:e9:fd:71:8c:e4:5f:b6:6a:08:
dc:77:83:de:39:b8:a7:12:36:d7:44:46:a5:31:72:56:9a:b8:
d1:6d:90:b9:38:fb:e5:2a:aa:58:7f:2e:03:f5:0d:18:85:a3:
0b:23:a6:5c:dc:26:ba:f9:d2:65:08:29:a7:8e:68:e5:58:9a:
b6:53:d0:e3:a0:41:97:46:4a:f9:c5:b3:4f:2d:b9:78:ee:f4:
57:32:c7:14:d7:13:2e:24:79:ff:e4:f9:a6:ec:8e:5f:09:a8:
00:04:82:85:b8:a5:da:91:99:98:8d:be:bd:3f:e9:db:79:84:
91:15:16:02:77:f4:8f:d9:5b:fe:7e:0d:6f:a7:a7:6e:f3:81:
cb:b1:f7:cb:c4:8d:fe:17:a9:09:6a:94:13:74:99:39:fb:d4:
80:5d:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:35:12 2026 by rpki-client