Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File: 1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier: x9pQcku3V6hA9sx6Qt2vCPyQOl/W0+BzJY9WmlRGba4=
Subject key identifier: 4D:8A:45:D3:9F:72:13:B0:32:6D:C4:BC:5F:89:C2:DA:31:28:1E:21
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 01A0C3695D79F37084268D5D2421ACB29C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number: 0C00
Signing time: Mon 21 Sep 2026 10:00:57 +0000
Manifest this update: Mon 21 Sep 2026 10:00:57 +0000
Manifest next update: Tue 22 Sep 2026 10:00:57 +0000
Files and hashes: 1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: I3DMcqrZXB+0WCf0fGRM0dPqqJnTpGbc76lCGHqmiRg=)
2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:5d:79:f3:70:84:26:8d:5d:24:21:ac:b2:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Sep 21 10:00:57 2026 GMT
Not After : Sep 22 10:00:57 2026 GMT
Subject: CN=4d8a45d39f7213b0326dc4bc5f89c2da31281e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:71:41:da:76:62:8b:98:ca:cc:1a:94:8f:
dc:a8:16:66:70:c8:20:53:bb:49:7e:1f:50:e4:79:
ad:5c:57:a0:07:66:9f:4a:a9:6c:2b:eb:d4:54:63:
20:58:91:57:fc:09:32:13:8a:3c:83:63:48:18:79:
37:f8:4c:3f:0e:df:ee:28:0a:43:6c:3d:e5:6c:20:
c1:18:b6:4e:3d:60:c7:29:a2:e0:fa:3f:04:2d:33:
22:6c:65:b4:ef:03:83:73:2d:77:fa:ce:29:ff:7c:
94:0a:58:ff:5b:13:37:69:54:c1:e4:cb:f4:63:49:
70:1a:48:49:db:94:af:bf:b1:68:0a:f4:66:47:f1:
e6:b2:80:4e:4b:84:d7:0b:9e:74:24:99:9e:1e:b8:
5d:cd:85:ed:02:a0:ba:0d:6d:45:99:fc:8f:d1:6c:
31:cf:ed:30:38:cd:17:15:b3:fa:e4:5d:74:c3:e1:
97:66:7c:e6:fa:c6:21:14:0c:bc:b5:bb:9b:4e:82:
b2:76:cb:82:5a:bf:89:a6:06:49:ed:7d:f1:f1:18:
73:9f:3e:01:f5:e9:f9:27:ec:2a:e9:c4:2c:fc:57:
c2:79:92:25:70:3e:04:f1:62:c5:f4:b2:85:e8:28:
67:6a:a3:13:27:5b:87:0e:5d:03:5e:50:03:fe:18:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8A:45:D3:9F:72:13:B0:32:6D:C4:BC:5F:89:C2:DA:31:28:1E:21
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:90:d1:60:2e:bb:5e:c4:31:c8:e5:06:77:da:b3:10:93:ff:
fe:50:b2:8f:54:2f:f5:a4:96:c0:ae:e1:c2:9d:2a:26:89:12:
b3:ff:b9:35:5a:29:2e:27:d7:78:a8:64:f1:f7:52:7a:7d:92:
96:33:15:0b:b2:7b:ca:d9:fb:dd:2b:43:01:f7:02:ab:eb:12:
46:01:d6:0d:01:ad:83:01:9d:5f:c2:51:98:9c:c2:27:94:8a:
09:44:2b:2c:82:62:b4:a3:36:d2:57:21:0e:9d:0f:5d:5c:21:
7e:fc:40:d9:c7:23:9a:f7:bd:3c:16:90:1b:b6:c6:c7:ac:5d:
b3:fc:63:46:dd:14:26:fa:14:af:b6:b0:1b:36:7e:ba:63:04:
d3:d8:e6:59:cc:1e:c5:e5:26:a3:7b:d2:29:85:1c:b4:8f:0a:
9d:05:82:54:c4:7c:5a:29:38:15:e5:68:4c:8c:93:1c:c0:df:
43:bc:2c:52:43:ed:cc:89:fb:bf:fb:54:6d:cf:28:66:dd:fb:
c5:64:a5:54:f8:a3:5e:b3:03:de:e9:30:67:87:28:56:91:c9:
34:4d:51:93:12:dd:82:7b:d4:c4:01:60:17:40:77:41:53:20:
69:ba:19:c6:3f:6e:ac:0a:3c:c2:35:22:c6:2a:17:a7:bf:64:
57:3e:43:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:03 2026 by rpki-client