Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: mXGDMl5YQaNQldsADv9VHkn+1e/cSryI9liwj/D1jxM=
Subject key identifier: 04:BB:9D:A3:15:4F:64:0A:FE:B0:86:EF:6A:A4:2C:36:67:84:EB:2C
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019CABD9CCBF60CDAAAB8E50885CCB9778F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: wIY5i5ZZZW8D7omxeKBMY3xx39d+rQw/3wst0DnlWBM=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cc:bf:60:cd:aa:ab:8e:50:88:5c:cb:97:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=04bb9da3154f640afeb086ef6aa42c366784eb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:6e:aa:57:51:1f:ec:b1:ae:5e:83:0c:8f:
bc:be:7a:08:dd:71:58:df:97:28:7d:be:c0:e4:4a:
ea:72:6c:dd:05:7d:11:f1:5d:44:01:d0:32:58:13:
98:6b:4d:87:63:5b:16:86:ed:a3:ee:54:72:f3:85:
cf:84:19:23:bc:a3:ba:5c:66:5d:38:38:d8:bb:db:
b5:e4:5b:b6:88:1a:9b:0c:05:06:11:ee:2d:51:70:
c9:19:7c:d9:4d:92:b4:e1:ef:56:97:55:66:22:70:
8b:b8:a9:62:96:db:f7:4e:dd:72:c7:e7:fa:12:1c:
ce:56:c1:1d:9b:cb:a8:42:fb:3d:ad:63:5c:a9:eb:
9c:b2:c4:4d:1a:fc:b6:e8:36:aa:ee:5e:99:2b:aa:
88:98:77:da:89:f2:7c:cb:73:2a:21:a9:4f:db:22:
60:33:a6:2e:76:2e:1a:e8:e0:04:96:d7:04:a6:37:
52:9c:bc:f3:fb:6c:33:59:ca:0d:c7:ac:bb:2c:25:
d3:49:74:d2:ba:ff:fe:f2:63:63:be:9e:c0:9f:95:
cf:c4:f5:b2:7d:86:a6:3f:d1:8e:a2:50:39:ca:e2:
3c:92:a5:c1:e1:3c:71:44:52:6e:a9:28:95:6b:d0:
b9:bf:3f:f1:37:5d:bb:db:03:55:64:38:71:ef:12:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:9D:A3:15:4F:64:0A:FE:B0:86:EF:6A:A4:2C:36:67:84:EB:2C
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:cf:6c:ce:81:23:10:b3:63:2d:aa:a7:a5:77:7c:dc:97:
ed:73:98:16:9f:37:6d:7f:28:14:e7:68:c5:5b:ee:d2:4d:b3:
da:af:a4:ae:8a:4b:a8:8e:20:cc:27:51:72:0e:f6:73:38:e4:
a1:3c:0c:f3:58:08:7e:06:37:b1:6c:91:41:ef:4b:7d:3b:03:
1b:68:89:72:a7:62:d0:8a:74:ff:95:60:3c:ec:1e:91:8b:d4:
83:cd:d2:17:56:4d:66:13:7a:63:f2:94:f8:89:4d:ff:91:f3:
b6:af:1d:43:22:ae:6c:aa:16:0e:19:f1:8a:43:0c:e2:5b:fc:
9f:5e:ab:9d:89:88:f2:56:7f:32:8e:58:95:7d:4e:6d:71:71:
c6:91:da:88:71:93:bc:40:70:62:b2:1d:64:54:fb:af:f5:e8:
db:99:cb:8b:08:6e:98:9e:47:3b:c1:b8:5f:dc:ea:b9:09:a0:
56:57:05:26:a7:2e:a3:62:96:f7:45:a9:5a:62:18:75:61:e3:
00:c3:c8:43:87:25:d3:49:51:45:70:36:fa:58:fa:4b:91:c5:
3d:30:ac:21:8b:c1:88:1f:a4:b7:5a:09:cb:76:51:42:33:2b:
7f:23:ba:af:f9:0d:a8:1c:3e:ae:1b:c6:c0:b0:f4:32:a4:18:
32:a0:14:53
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyr2cy/YM2qq45QiFzLl3j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi
ZTc1NzYwHhcNMjYwMzAyMDAwMTQzWhcNMjYwMzAzMDAwMTQzWjAzMTEwLwYDVQQD
EygwNGJiOWRhMzE1NGY2NDBhZmViMDg2ZWY2YWE0MmMzNjY3ODRlYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymluqldRH+yxrl6DDI+8vnoI3XFY
35cofb7A5ErqcmzdBX0R8V1EAdAyWBOYa02HY1sWhu2j7lRy84XPhBkjvKO6XGZd
ODjYu9u15Fu2iBqbDAUGEe4tUXDJGXzZTZK04e9Wl1VmInCLuKliltv3Tt1yx+f6
EhzOVsEdm8uoQvs9rWNcqeucssRNGvy26Daq7l6ZK6qImHfaifJ8y3MqIalP2yJg
M6Yudi4a6OAEltcEpjdSnLzz+2wzWcoNx6y7LCXTSXTSuv/+8mNjvp7An5XPxPWy
fYamP9GOolA5yuI8kqXB4TxxRFJuqSiVa9C5vz/xN1272wNVZDhx7xKC3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAS7naMVT2QK/rCG72qkLDZnhOssMB8GA1UdIwQY
MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi
LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0
ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWATP
bM6BIxCzYy2qp6V3fNyX7XOYFp83bX8oFOdoxVvu0k2z2q+kropLqI4gzCdRcg72
czjkoTwM81gIfgY3sWyRQe9LfTsDG2iJcqdi0Ip0/5VgPOwekYvUg83SF1ZNZhN6
Y/KU+IlN/5Hztq8dQyKubKoWDhnxikMM4lv8n16rnYmI8lZ/Mo5YlX1ObXFxxpHa
iHGTvEBwYrIdZFT7r/Xo25nLiwhumJ5HO8G4X9zquQmgVlcFJqcuo2KW90WpWmIY
dWHjAMPIQ4cl00lRRXA2+lj6S5HFPTCsIYvBiB+kt1oJy3ZRQjMrfyO6r/kNqBw+
rhvGwLD0MqQYMqAUUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:30 2026 by rpki-client