Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: irVJVC+YlSIF5eJliQ4HbP4VO3GQDKDDT7VrURUfxt0=
Subject key identifier: 49:73:75:F3:D4:A6:06:15:7B:47:01:CB:C9:6B:36:A1:C7:DC:3E:0B
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019CAAC6F8F530C7B5046E64DF4F13E988B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 09E1
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: 6Ta6/SHwr/GLpTCi+jsNGn3Me9Y/BdLTsxHpcn3ZE4k=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f8:f5:30:c7:b5:04:6e:64:df:4f:13:e9:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=497375f3d4a606157b4701cbc96b36a1c7dc3e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:05:7c:14:82:da:03:7e:40:b5:29:b1:9e:
52:c8:c9:31:08:81:46:08:26:4b:cf:e1:8b:5a:82:
15:9f:4a:9c:41:f3:b7:8d:aa:ef:8f:5b:74:ee:5f:
3e:cb:86:12:74:56:05:c2:92:87:47:48:6c:3b:b8:
b1:78:3c:30:cc:c9:97:16:8f:bd:f7:04:dd:a8:2c:
1b:19:72:07:eb:d6:28:a3:ca:10:19:e9:06:a2:94:
bc:d0:d2:43:a0:95:78:50:f4:f0:63:f4:8e:c4:6f:
a6:a8:48:d6:94:6d:f5:fa:92:11:5f:15:b2:2e:70:
f6:7c:88:83:d0:b4:13:c7:fe:aa:55:18:c2:5f:87:
e9:08:ac:98:16:f3:f6:51:5f:89:9f:94:e9:70:dc:
1c:5b:f3:c3:79:b1:d1:5a:6e:6e:de:4e:15:3f:b7:
dc:fd:d6:15:e2:7f:91:6e:17:58:c7:44:7b:9f:18:
be:51:1c:75:0e:95:cf:11:bf:b1:4f:0c:dd:23:e2:
3a:25:da:82:3a:65:f1:d8:19:ac:4d:45:7f:d9:1c:
57:eb:bd:ce:93:57:30:6d:ec:fe:2c:3e:d5:f6:e7:
db:2d:1e:0f:19:d5:e6:c2:f0:43:0f:ac:79:41:1a:
15:34:2a:db:b0:1b:04:fc:cb:31:4b:e1:0d:24:db:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:73:75:F3:D4:A6:06:15:7B:47:01:CB:C9:6B:36:A1:C7:DC:3E:0B
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d8:e1:20:15:12:61:42:20:62:fb:6a:1b:0a:13:d7:ab:d5:
fa:de:34:73:76:c9:5a:32:ba:e5:c0:11:1d:2c:4c:9e:d5:4a:
36:b0:fb:5f:69:04:8d:47:fa:e3:b8:75:0b:2a:25:1f:56:ff:
61:a5:e0:2d:87:26:d9:fc:88:eb:27:67:bc:6c:ed:17:14:22:
42:e9:3b:e0:17:31:05:cb:e5:37:ec:b2:4b:d4:46:aa:b4:1c:
da:56:d9:b5:d1:35:be:f4:c0:b2:e8:25:af:e5:bf:75:6f:a4:
38:e2:c7:24:08:cd:f4:ec:06:82:2d:cb:d7:50:5f:79:89:b3:
08:71:b6:64:3e:89:d0:bb:e2:29:48:87:52:56:01:de:99:71:
9d:8a:bd:d4:92:60:c6:00:2e:3b:ba:d7:66:cc:e5:a8:3f:1b:
4d:20:d2:01:1a:03:14:4e:26:17:be:0c:71:0b:02:3f:89:27:
09:7a:62:88:19:4b:83:1d:cc:15:92:ea:96:6d:81:3e:d8:68:
f7:a7:7d:dc:ac:36:ea:1e:67:0a:57:ea:1f:6d:8d:c3:3a:84:
8a:55:65:19:0e:08:e3:b3:85:75:c9:93:f0:47:18:8a:e9:d1:
2a:b1:79:53:f8:a5:95:a8:10:66:d2:8e:69:9b:fc:b3:af:2f:
cf:5c:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:48 2026 by rpki-client