Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: lbLyxvZnFnZWgrj3UD8/z99VGPFx2nqJmj/z8TG0278=
Subject key identifier: 35:8F:67:16:7D:A5:91:45:B8:01:F2:91:31:1D:33:45:86:D3:39:A5
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019D9BBEF30657BA3AF6D8B8DA0FD3C7A6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 10B8
Signing time: Fri 17 Apr 2026 14:01:15 +0000
Manifest this update: Fri 17 Apr 2026 14:01:15 +0000
Manifest next update: Sat 18 Apr 2026 14:01:15 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: qerZCjurpPrpRp6OzjN+am5pUOWGU9awatXqIhcFS2A=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:f3:06:57:ba:3a:f6:d8:b8:da:0f:d3:c7:a6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Apr 17 14:01:15 2026 GMT
Not After : Apr 18 14:01:15 2026 GMT
Subject: CN=358f67167da59145b801f291311d334586d339a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:37:9e:aa:d8:98:12:18:b6:af:46:c1:1a:
c0:28:86:93:dd:03:bf:a8:1c:7a:51:67:ea:9a:6c:
06:bf:a6:b9:ac:2a:05:b6:c8:4f:d2:70:d8:13:24:
c8:44:87:3c:4b:e7:f1:8e:c6:b3:38:8b:f8:51:6b:
4f:c4:82:f1:64:58:ff:e1:48:ea:51:f3:2b:b6:49:
0e:89:83:e0:0c:42:48:45:5e:85:1a:3a:87:dc:80:
b1:1d:05:f2:97:03:2d:29:6a:4a:a3:74:32:c3:38:
cf:ae:23:2f:bc:0f:67:2c:81:e3:3b:27:3f:50:b6:
1a:e5:8f:57:33:fe:89:51:41:17:2c:66:53:bb:c1:
15:ab:f2:ec:e1:63:76:1e:2c:0a:f1:8d:eb:3e:25:
df:c0:da:34:9c:af:11:1b:53:4e:e7:c9:12:80:f9:
e7:08:08:e4:dd:79:99:e3:8c:ee:32:d4:91:91:d7:
22:fb:d5:b5:e7:dc:c6:aa:dc:cc:76:42:16:9a:bf:
b4:a5:51:4f:00:40:6e:96:ad:5a:9e:cb:2e:eb:0e:
82:a1:50:20:e7:6c:20:f6:52:ee:ab:4c:7e:58:a9:
02:e0:c9:5a:e6:b9:e8:52:d9:b2:3d:ba:a9:c1:bc:
66:b7:85:8c:05:af:78:89:a8:c0:09:aa:9d:9a:ee:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:67:16:7D:A5:91:45:B8:01:F2:91:31:1D:33:45:86:D3:39:A5
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:5c:c6:db:0e:60:25:ee:bf:79:ba:b4:aa:46:99:97:1c:
43:ca:9e:e0:75:f9:cc:67:2b:a3:d5:9a:47:e2:87:c0:ab:47:
97:84:d0:9f:cd:b2:dd:33:0c:0b:ce:68:c7:8c:66:80:86:3b:
99:75:72:5d:68:e8:29:06:83:3f:f1:00:78:07:4e:40:50:05:
ea:7c:c3:46:e4:93:9d:5a:23:0e:b9:c0:b1:e9:51:ec:93:dc:
94:0a:6c:08:95:96:81:1e:1c:28:c8:ca:c5:24:c3:19:a4:29:
91:1b:f4:f2:0a:e5:e7:cb:f9:e1:8d:86:4c:b3:69:64:92:96:
59:49:c0:3f:0f:65:03:25:77:ea:ff:03:2c:24:33:c2:47:aa:
04:82:55:9f:7f:5c:9e:50:a0:b7:0c:70:01:cc:f2:15:33:56:
90:55:44:2f:b9:0d:16:c9:0d:be:06:50:84:41:0a:17:27:47:
96:37:90:96:b4:8e:39:ee:c7:b2:cc:b0:20:f1:2c:21:ff:e0:
2e:5a:58:6f:41:a8:31:12:15:06:a9:d4:12:6f:92:cd:cf:0b:
5c:76:c4:51:bc:c8:23:d6:13:6e:27:42:e8:4d:35:50:0f:84:
88:aa:11:a2:50:ef:06:f3:ec:a3:b8:71:0a:a3:4e:00:1b:3c:
7e:e4:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:52 2026 by rpki-client