Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: 7cS8c8Wd3IiAGEoFZwPHuC6ULYYfLkci+pZSkgt1TjE=
Subject key identifier: E9:90:A6:0F:77:D7:9F:7F:9B:28:3C:D2:C0:9E:D1:4B:9E:41:CD:27
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 019CAC47A7DF2825F8029B5B7A28AFD7B049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 103C
Signing time: Mon 02 Mar 2026 02:01:43 +0000
Manifest this update: Mon 02 Mar 2026 02:01:43 +0000
Manifest next update: Tue 03 Mar 2026 02:01:43 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: Z5so/fzlplQSNeBUF0ajxwFsJYsFBL2JXV/eKxq7PbQ=)
2: KSM6-j7ZQdjUgo726e0-fcqcUhY.roa (hash: rShuWm/fiDs8a4GU2RfscjwEG1UcXC9a2zYTRv4DxMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:a7:df:28:25:f8:02:9b:5b:7a:28:af:d7:b0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Mar 2 02:01:43 2026 GMT
Not After : Mar 3 02:01:43 2026 GMT
Subject: CN=e990a60f77d79f7f9b283cd2c09ed14b9e41cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:57:a5:48:d0:f5:8d:fd:af:8b:a3:a5:17:
3e:20:b0:59:05:ec:62:00:c2:6d:2b:5e:4d:ec:ef:
7a:e3:a7:e3:87:43:cd:3c:9b:e8:61:92:a5:63:39:
bf:4f:77:52:b1:ab:54:1a:ca:99:8e:78:db:e0:3c:
3f:7c:22:f6:73:a9:60:6f:99:72:0a:a3:8d:e6:44:
ea:4c:55:67:84:37:8c:c1:2b:0a:9b:ef:aa:4e:06:
7c:1d:76:18:db:ff:c6:3a:e2:4a:01:0b:ab:5a:8e:
15:b6:5d:7c:9c:7e:04:12:2b:55:90:14:4c:13:f8:
bc:07:e3:a8:f1:81:b7:66:66:d6:30:50:6f:9d:1b:
df:d6:d6:1d:cd:e4:7b:aa:92:c0:39:52:d5:4d:9f:
03:2d:55:da:df:cc:2b:e1:7e:0b:fa:be:b8:23:e6:
41:79:14:ec:52:c9:bc:5f:da:df:ea:dc:12:43:5e:
c0:95:a7:cb:cc:de:ce:26:d9:26:8b:d5:9b:58:5c:
b6:3e:fb:46:9c:e3:d4:d9:42:62:4c:53:6c:dc:be:
4e:59:5d:31:00:40:74:d4:e6:28:75:83:aa:27:3c:
31:bd:df:d4:5f:0c:ad:7d:55:a9:2d:86:4a:90:11:
70:5d:08:b5:f0:f5:55:25:bf:01:4d:1a:6c:80:ff:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:A6:0F:77:D7:9F:7F:9B:28:3C:D2:C0:9E:D1:4B:9E:41:CD:27
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:15:42:4c:f9:ff:06:f2:6f:37:92:74:83:25:26:41:8f:
1e:7a:c2:16:6b:c1:59:2b:10:b9:d1:c1:be:92:86:87:db:b4:
16:89:a7:9f:f1:57:5c:f2:a8:d4:22:99:35:dc:4c:3a:b6:81:
6e:39:ef:24:67:75:af:46:10:2b:99:7a:9a:03:dc:c8:0b:1d:
65:a5:63:63:44:90:a4:98:e2:a2:d9:e1:7f:92:fb:ee:c6:6f:
fc:f9:14:a4:45:59:5c:a5:b0:ac:a6:df:61:c4:cc:98:39:7f:
2c:00:ab:34:49:74:c7:e0:7d:ad:62:78:17:8d:9d:41:e9:04:
a1:f7:f9:51:12:98:39:b5:1d:ed:39:e5:d3:97:c3:10:65:13:
44:f4:f2:e4:3b:a0:c3:39:bf:98:da:8f:a9:ec:85:ce:da:4e:
43:bc:7c:92:83:44:87:9c:08:08:f7:62:1d:9e:bc:af:ce:73:
06:e2:45:26:bd:f0:88:94:ed:65:b7:ba:ec:01:c1:04:18:56:
28:91:e3:6b:ec:2c:7d:23:89:5d:d4:ab:2c:17:b8:89:52:e0:
1a:62:3d:5a:82:0f:8c:11:91:6c:33:6b:5d:42:b8:ed:65:de:
6a:9f:f2:53:dd:8d:8a:da:f1:13:90:67:57:4a:45:cd:c4:b4:
6c:d9:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:20 2026 by rpki-client