Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: 55m4J2cLXCzZR3S1oFN7nl1aMZmjjBBYcoI18eMYopY=
Subject key identifier: 7B:7D:D4:A6:60:41:11:F7:BB:7F:2B:D3:8A:29:B0:64:48:A2:7C:79
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01A0CAEBA07FDDA8EE51FF97F68608C1A0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0474
Signing time: Tue 22 Sep 2026 21:00:34 +0000
Manifest this update: Tue 22 Sep 2026 21:00:34 +0000
Manifest next update: Wed 23 Sep 2026 21:00:34 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: 0BsOFHtwpSrVwU5Rk3zzwEpRZQOOtkNgMpV827aGo/Y=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:a0:7f:dd:a8:ee:51:ff:97:f6:86:08:c1:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Sep 22 21:00:34 2026 GMT
Not After : Sep 23 21:00:34 2026 GMT
Subject: CN=7b7dd4a6604111f7bb7f2bd38a29b06448a27c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:85:46:f8:b3:b7:90:26:3b:09:c3:f7:d4:
30:99:61:db:87:76:20:05:37:b8:52:aa:01:04:65:
1b:c0:ac:66:d5:12:96:81:90:c4:ff:f6:a1:8e:bb:
e1:12:8d:26:38:d2:0e:8e:e5:61:5b:82:1a:39:00:
73:35:46:59:93:19:3a:ab:89:d4:57:52:87:37:e3:
e6:49:4c:fc:20:e7:8c:c7:d2:04:c4:b3:3a:de:0a:
76:c9:bd:40:1a:54:68:71:58:7d:f7:44:9b:15:1c:
bc:28:e2:9e:d3:42:23:34:57:be:94:68:37:10:f7:
c0:dc:91:5f:f3:f0:3b:03:8c:e9:79:2f:4e:f4:93:
c7:40:c4:66:d4:5d:66:70:fd:b3:f0:f1:fd:ec:9f:
06:82:5b:50:0f:55:da:e7:6f:96:d4:2a:33:cc:9a:
4f:e5:b1:40:12:b8:40:54:06:3d:70:ac:96:4e:e0:
c9:8d:3e:fe:d5:80:64:de:77:cb:00:58:8d:1f:b9:
e8:07:9f:c4:92:27:78:90:6e:4d:77:24:e4:22:13:
0b:6c:fb:e2:7c:c0:ab:e2:57:a1:53:29:be:50:bb:
2a:85:28:d7:8c:85:18:39:72:1a:22:72:74:79:5e:
65:9f:8a:a1:ac:65:7b:de:f3:a7:e0:51:6f:ed:a2:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:D4:A6:60:41:11:F7:BB:7F:2B:D3:8A:29:B0:64:48:A2:7C:79
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e8:c9:0c:00:aa:dc:ea:8b:8a:b4:4b:32:72:dd:e0:90:0e:
55:13:21:ca:10:c4:18:3c:26:ae:23:a3:cf:2f:51:cc:5b:70:
ea:3f:97:89:59:62:0d:9d:9b:86:8d:2e:da:a4:1a:e4:64:4e:
87:9e:d9:fe:54:7a:96:6b:b3:78:96:c5:56:ea:e5:56:5b:6b:
f3:f0:7c:e2:21:65:1a:54:c6:5a:f1:99:88:ad:c2:82:ed:0b:
27:c3:2c:09:5f:a8:a6:17:ec:ee:e3:06:e2:eb:f6:63:a8:a9:
c8:d9:f8:7b:ec:82:77:6f:ad:62:dd:f0:1f:56:25:32:f7:13:
16:d4:b8:8e:8a:6f:f8:12:42:1e:16:98:d3:72:e6:ba:eb:bb:
25:68:5c:a0:a4:a5:6c:b5:9e:29:c3:2a:c0:a3:df:d4:97:da:
e3:3b:05:83:70:e8:7c:31:4f:0c:85:14:21:42:5d:ff:6d:88:
3c:4b:3c:22:10:94:98:9a:a9:fa:93:97:15:b5:27:4f:16:74:
7f:f7:c8:00:a3:40:9b:74:ff:3b:06:1e:8b:d3:10:c1:2a:5c:
e2:4e:9a:6f:da:b1:de:da:41:13:11:b2:3f:a8:f6:e5:89:06:
0f:27:ec:92:f3:55:b2:d7:2e:b3:e1:c0:c3:d0:2c:51:21:01:
80:52:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:35:06 2026 by rpki-client