Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: YZ4zPysVGEDVqfVHv6rIqwKzgKKNec43/K0IBWSvF00=
Subject key identifier: 7C:29:9D:32:22:8C:5A:17:E5:64:61:AF:12:5B:84:0D:7D:4E:FC:02
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 01A1C10A80DFC253AD3A0959D7869DEF38F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0C84
Signing time: Mon 09 Nov 2026 16:00:53 +0000
Manifest this update: Mon 09 Nov 2026 16:00:53 +0000
Manifest next update: Tue 10 Nov 2026 16:00:53 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: kvjJWWKLHkdIqYfbAuRNzcOudnVxlH0TR/r6IMvGVng=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
3: UApE9cSqKRZ0Txn3JG5Q9Jmj2F4.roa (hash: m1cr622kePBOyq0mO5An5e06+FLt0tPrgEbLeHmtiD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:80:df:c2:53:ad:3a:09:59:d7:86:9d:ef:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Nov 9 16:00:53 2026 GMT
Not After : Nov 10 16:00:53 2026 GMT
Subject: CN=7c299d32228c5a17e56461af125b840d7d4efc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:cb:fa:dd:3f:b5:8d:8d:cd:d8:70:c1:33:
29:0d:12:88:93:2d:d7:3b:ad:ea:b6:dd:b5:1c:0e:
b6:f5:19:93:20:92:ea:59:83:19:a9:fc:36:5f:34:
2f:57:ef:06:6c:16:e5:5a:bc:ea:6a:7c:54:23:14:
cf:94:00:b0:34:12:39:c0:60:ae:dd:ef:74:d6:3c:
14:b1:bd:bf:06:a2:63:0b:93:5b:21:80:29:d9:8f:
67:c5:ba:43:43:21:52:d8:68:12:27:a7:d0:15:43:
a8:33:71:22:f2:44:a7:66:7a:a5:01:18:a5:0f:5d:
a2:86:e4:f8:bb:b2:67:30:2d:7d:23:cd:96:1b:f6:
43:b6:39:1f:f6:88:c1:d1:dd:a3:2e:a4:2e:c9:10:
6e:1d:59:24:33:9e:55:70:fb:79:da:be:c5:9e:5d:
ed:24:49:f9:36:50:5f:aa:c3:2c:92:53:6f:eb:44:
da:df:08:f8:f1:f9:5a:b7:90:f3:f3:ca:a1:85:41:
9a:61:80:13:4c:cd:84:e8:46:8a:57:20:ff:09:fb:
a2:70:e7:f7:6e:82:b7:be:3b:17:2c:41:10:93:19:
b6:80:49:79:32:45:f3:de:15:7d:64:22:e7:64:25:
cd:62:18:85:6f:5a:f1:d9:90:2e:a8:e5:5b:7b:02:
88:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:9D:32:22:8C:5A:17:E5:64:61:AF:12:5B:84:0D:7D:4E:FC:02
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a3:67:2c:3c:0f:d5:ed:b6:03:da:02:2f:f5:cb:20:af:17:
c0:d6:68:51:93:01:9e:b0:e6:1b:27:d5:0f:ea:8f:7a:72:0d:
dc:d8:f4:78:15:c2:80:48:cb:f8:a5:b5:6f:1f:ea:93:6d:32:
9f:24:17:c7:fb:b4:2b:eb:cc:e7:7c:58:ec:49:af:c5:e5:ba:
64:ad:aa:a5:63:e4:e1:45:4e:9f:cd:7f:06:61:15:aa:86:92:
06:a7:e8:d8:68:6c:08:99:b9:cd:b6:64:97:7e:97:27:b3:bc:
90:69:7c:34:cb:ee:0c:0c:b4:e8:be:a0:ee:9d:72:a2:10:2e:
13:16:ea:be:4d:56:54:0e:85:76:bb:2f:f1:d4:1d:eb:c2:b1:
7c:f9:70:d4:c2:b4:46:c4:bd:39:7f:29:5b:2a:a8:ec:dd:1f:
cd:3a:3d:56:c3:54:ce:53:0d:61:21:8f:9e:71:ab:40:5e:ff:
97:8a:50:82:da:09:ea:6d:4c:7e:da:44:2a:d9:3f:86:0d:21:
07:c2:c2:3d:b0:04:f1:6a:e4:22:63:b8:e7:38:30:ff:f7:42:
85:79:26:39:88:ff:e7:d9:52:45:dc:38:85:a8:7c:70:3b:e4:
55:a2:3e:18:11:7d:cd:dc:8a:2f:2a:65:aa:c3:7b:68:1d:f4:
da:bf:46:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHBCoDfwlOtOglZ14ad7zjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj
ZDNlNzMwHhcNMjYxMTA5MTYwMDUzWhcNMjYxMTEwMTYwMDUzWjAzMTEwLwYDVQQD
Eyg3YzI5OWQzMjIyOGM1YTE3ZTU2NDYxYWYxMjViODQwZDdkNGVmYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7L+t0/tY2NzdhwwTMpDRKIky3X
O63qtt21HA629RmTIJLqWYMZqfw2XzQvV+8GbBblWrzqanxUIxTPlACwNBI5wGCu
3e901jwUsb2/BqJjC5NbIYAp2Y9nxbpDQyFS2GgSJ6fQFUOoM3Ei8kSnZnqlARil
D12ihuT4u7JnMC19I82WG/ZDtjkf9ojB0d2jLqQuyRBuHVkkM55VcPt52r7Fnl3t
JEn5NlBfqsMsklNv60Ta3wj48flat5Dz88qhhUGaYYATTM2E6EaKVyD/CfuicOf3
boK3vjsXLEEQkxm2gEl5MkXz3hV9ZCLnZCXNYhiFb1rx2ZAuqOVbewKIIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHwpnTIijFoX5WRhrxJbhA19TvwCMB8GA1UdIwQY
MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi
LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5
ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKNn
LDwP1e22A9oCL/XLIK8XwNZoUZMBnrDmGyfVD+qPenIN3Nj0eBXCgEjL+KW1bx/q
k20ynyQXx/u0K+vM53xY7EmvxeW6ZK2qpWPk4UVOn81/BmEVqoaSBqfo2GhsCJm5
zbZkl36XJ7O8kGl8NMvuDAy06L6g7p1yohAuExbqvk1WVA6Fdrsv8dQd68KxfPlw
1MK0RsS9OX8pWyqo7N0fzTo9VsNUzlMNYSGPnnGrQF7/l4pQgtoJ6m1MftpEKtk/
hg0hB8LCPbAE8WrkImO45zgw//dChXkmOYj/59lSRdw4hah8cDvkVaI+GBF9zdyK
LyplqsN7aB302r9Gbw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 23:29:50 2026 by rpki-client