Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: tpgDK4vX2J8l41fNllwseIDiTIgOh7ycN4mlXkItO2o=
Subject key identifier: 56:6D:89:78:D1:DA:41:AE:72:60:DE:64:4D:AF:4A:DF:75:A0:A3:77
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 019D984F88A05421053C638DD3D835B7B410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0A5C
Signing time: Thu 16 Apr 2026 22:00:42 +0000
Manifest this update: Thu 16 Apr 2026 22:00:42 +0000
Manifest next update: Fri 17 Apr 2026 22:00:42 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: LwVHPptK9IS+3RXES8zriYNgJ4rf2/6Zj2RfKMfzbtA=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:88:a0:54:21:05:3c:63:8d:d3:d8:35:b7:b4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Apr 16 22:00:42 2026 GMT
Not After : Apr 17 22:00:42 2026 GMT
Subject: CN=566d8978d1da41ae7260de644daf4adf75a0a377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:4e:9f:15:13:46:18:1b:37:0f:82:69:0c:
83:5d:60:c5:67:04:66:65:64:7e:7e:52:8d:0f:f0:
d0:72:60:2c:e2:bd:2f:ee:45:57:c7:7e:7d:7e:f8:
8e:8a:f1:7b:04:21:26:db:f7:e7:b0:f8:f4:a2:37:
44:fc:38:55:e8:dc:07:de:35:42:49:ff:4d:9c:d2:
9b:fd:c5:e5:3f:02:70:1b:82:e0:04:61:71:61:d7:
8d:e7:77:1c:0c:4a:72:9a:6b:e3:4e:39:a9:6b:48:
b3:9c:22:fb:a7:96:43:07:ac:ac:bc:16:a2:6a:f2:
c3:95:fc:c7:f2:6f:f1:06:2b:10:46:9b:8c:9d:4c:
64:1a:ca:1f:7e:39:63:d6:e6:8a:79:1c:52:fb:14:
85:46:b0:01:fc:d6:6e:71:dc:89:a1:7d:4e:2e:c0:
1b:6b:e1:d5:45:e7:32:25:74:f0:9d:60:5f:7b:a9:
c8:d7:f5:06:02:56:0a:f9:d2:61:f1:df:0b:b3:4e:
51:af:3d:47:aa:e4:87:db:c6:69:4f:dd:35:7a:0d:
e5:70:92:cf:80:a3:ec:b7:d9:d8:44:e3:7c:d4:61:
29:38:c3:d3:51:da:d9:28:5c:7c:f9:d4:f4:7c:1f:
df:0f:d4:a9:92:b3:8c:39:06:b3:34:af:f6:f4:7c:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6D:89:78:D1:DA:41:AE:72:60:DE:64:4D:AF:4A:DF:75:A0:A3:77
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:61:38:60:da:69:0d:33:2f:ef:d0:43:85:18:10:20:99:63:
5c:e3:a7:d7:f7:de:bb:fc:f9:fe:be:f4:b3:e8:3f:9b:70:83:
d0:08:01:30:24:57:f6:41:23:60:77:27:3b:06:ce:08:1e:ba:
01:21:d4:83:31:94:85:b7:88:29:af:25:9f:11:73:ae:7e:61:
6e:eb:51:ce:4a:6a:3a:8d:8f:1d:87:81:2c:96:25:cc:e0:47:
88:92:53:4c:23:6a:38:79:06:d8:62:4e:d7:8c:f7:8b:2d:64:
e4:61:0d:ad:cd:ad:3c:f3:1e:46:0c:3f:d5:36:ee:38:d1:b7:
ce:28:1d:ef:64:3a:c8:23:c6:8c:bb:5c:7c:c6:3b:0d:0d:b6:
3d:78:bf:3c:94:27:5f:0f:15:f1:a0:25:25:0f:6c:00:81:e2:
df:f1:a7:42:0a:b3:0c:66:75:d7:11:9d:fd:e1:a4:5b:fe:48:
33:32:a7:04:1f:3d:ae:2b:d3:ed:da:a6:8d:25:48:c1:d3:14:
e4:dd:b1:f4:82:ba:17:7e:ef:da:fc:19:c8:49:07:8d:38:54:
9a:e9:06:12:16:fb:1a:bd:e5:b6:0f:40:3f:e6:13:ac:40:e6:
37:65:e3:a1:b3:9d:fd:77:5e:0c:36:ab:8d:28:00:7e:64:8f:
25:58:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:04 2026 by rpki-client