Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: Tab3MDVUovXJ12tCX0VKpuwykhnY1jPvWNS/r5IWVAg=
Subject key identifier: 23:C3:C3:58:67:0A:C6:D9:D4:7C:B0:12:7B:5C:06:B1:B3:EB:04:93
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01A119E238E8A4624023B971C47F7EC9A8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 1287
Signing time: Thu 08 Oct 2026 05:00:18 +0000
Manifest this update: Thu 08 Oct 2026 05:00:18 +0000
Manifest next update: Fri 09 Oct 2026 05:00:18 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: HmBB4m5kgP/uTTUw91ot9bkz1+3Ybh4qwsb+z8N3vqE=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:38:e8:a4:62:40:23:b9:71:c4:7f:7e:c9:a8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Oct 8 05:00:18 2026 GMT
Not After : Oct 9 05:00:18 2026 GMT
Subject: CN=23c3c358670ac6d9d47cb0127b5c06b1b3eb0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:52:b0:a0:d6:45:67:13:36:64:73:d6:6d:
6c:19:6d:4e:e8:38:4c:70:49:ee:ad:0a:87:79:9f:
34:11:e0:b8:3b:bb:40:f9:80:c4:70:4c:bf:24:a0:
a9:c0:22:ff:26:e4:dc:d2:af:f3:3d:64:64:93:4b:
04:e4:ce:b8:b1:74:f7:57:34:84:9c:c9:d6:e9:59:
e0:96:5d:01:d0:fd:e9:d6:3e:85:0c:e8:b9:07:d2:
0f:b4:c3:54:a9:48:c6:65:87:cc:02:f7:e6:68:32:
8d:2e:3f:48:e0:ee:10:57:b4:ab:f2:7c:ab:47:c8:
c1:6a:ab:4e:9a:f3:b4:9f:e7:02:0a:17:97:e5:5e:
02:4d:f9:b8:fe:a7:5b:66:58:e4:13:3a:16:fd:cc:
5f:58:c6:88:77:4e:24:5e:ea:90:25:d8:13:a5:e0:
f9:36:54:d6:b2:6b:15:19:9e:2b:4c:81:79:9d:5e:
47:28:39:5a:03:61:c1:70:66:5f:f0:4f:d6:71:95:
41:15:62:f3:78:1f:0c:d3:84:a2:60:05:f2:00:b6:
c7:a9:60:d0:8d:39:3b:b0:3d:00:6b:4c:5c:87:8a:
d0:3c:6e:e4:df:ce:84:53:db:0c:6b:0d:f7:d8:a2:
91:e6:a1:a0:a9:e8:40:91:cc:5c:96:19:93:ac:f1:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:C3:58:67:0A:C6:D9:D4:7C:B0:12:7B:5C:06:B1:B3:EB:04:93
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:27:bd:dd:87:bf:77:ea:79:8f:07:1a:d1:67:9e:0b:0d:
9d:ab:49:e5:2b:55:fe:6d:ce:78:c3:da:64:4a:e4:09:2d:c9:
c3:ab:aa:ac:8a:28:cd:8d:f4:fd:ed:10:bc:92:36:e6:60:d2:
90:4d:5d:fa:c5:a8:19:97:e3:79:14:a4:4c:e6:2a:a2:33:08:
40:4e:91:8e:3c:15:6e:68:72:62:77:48:16:8e:00:2e:0b:80:
35:38:fb:15:67:59:fc:c1:b3:e8:7e:8a:ea:d0:3e:e3:3c:a1:
31:d0:b7:7f:42:c9:6b:af:f9:18:b7:16:aa:ce:63:c2:5f:3f:
a7:b9:90:dd:4b:e2:61:aa:86:8e:4f:f6:8b:2c:a1:86:93:8b:
c4:68:21:91:fd:06:39:d2:4c:73:48:c6:38:90:af:57:44:36:
24:ba:df:fe:96:77:29:ad:10:94:64:c9:92:8b:d5:fb:79:41:
c8:39:bd:92:22:79:ad:09:6e:6c:86:24:4b:75:a7:94:95:75:
4d:5a:f0:de:4d:9f:5a:ec:2f:1b:6d:9b:a8:4a:98:a4:80:4f:
06:bc:78:66:ab:a4:ea:23:15:15:e9:34:cc:fa:c1:37:4a:b3:
63:3f:c5:20:1a:ab:c8:ce:4c:e1:c7:88:15:75:67:e3:c5:88:
d1:6e:a3:62
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEZ4jjopGJAI7lxxH9+yajJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2
NTkwMDgwHhcNMjYxMDA4MDUwMDE4WhcNMjYxMDA5MDUwMDE4WjAzMTEwLwYDVQQD
EygyM2MzYzM1ODY3MGFjNmQ5ZDQ3Y2IwMTI3YjVjMDZiMWIzZWIwNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dpSsKDWRWcTNmRz1m1sGW1O6DhM
cEnurQqHeZ80EeC4O7tA+YDEcEy/JKCpwCL/JuTc0q/zPWRkk0sE5M64sXT3VzSE
nMnW6Vngll0B0P3p1j6FDOi5B9IPtMNUqUjGZYfMAvfmaDKNLj9I4O4QV7Sr8nyr
R8jBaqtOmvO0n+cCCheX5V4CTfm4/qdbZljkEzoW/cxfWMaId04kXuqQJdgTpeD5
NlTWsmsVGZ4rTIF5nV5HKDlaA2HBcGZf8E/WcZVBFWLzeB8M04SiYAXyALbHqWDQ
jTk7sD0Aa0xch4rQPG7k386EU9sMaw332KKR5qGgqehAkcxclhmTrPGPHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCPDw1hnCsbZ1HywEntcBrGz6wSTMB8GA1UdIwQY
MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj
LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2
ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoAn
vd2Hv3fqeY8HGtFnngsNnatJ5StV/m3OeMPaZErkCS3Jw6uqrIoozY30/e0QvJI2
5mDSkE1d+sWoGZfjeRSkTOYqojMIQE6RjjwVbmhyYndIFo4ALguANTj7FWdZ/MGz
6H6K6tA+4zyhMdC3f0LJa6/5GLcWqs5jwl8/p7mQ3UviYaqGjk/2iyyhhpOLxGgh
kf0GOdJMc0jGOJCvV0Q2JLrf/pZ3Ka0QlGTJkovV+3lByDm9kiJ5rQlubIYkS3Wn
lJV1TVrw3k2fWuwvG22bqEqYpIBPBrx4Zquk6iMVFek0zPrBN0qzYz/FIBqryM5M
4ceIFXVn48WI0W6jYg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:37 2026 by rpki-client