Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: CMzsvgTlIZZziaGeQGM6ZOstYweLTpbOHEW4HO2qDso=
Subject key identifier: 11:0C:1D:DB:AA:28:1B:A0:D7:C5:85:30:81:87:3C:62:87:EB:5B:15
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019FAA50B36DD8B785C532DF6FFA1951AB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 072B
Signing time: Tue 28 Jul 2026 20:00:43 +0000
Manifest this update: Tue 28 Jul 2026 20:00:43 +0000
Manifest next update: Wed 29 Jul 2026 20:00:43 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: YQOYBXO6XpOJegrDEm5h+ZPemqGysvgr9mwzXtaD2kM=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b3:6d:d8:b7:85:c5:32:df:6f:fa:19:51:ab:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Jul 28 20:00:43 2026 GMT
Not After : Jul 29 20:00:43 2026 GMT
Subject: CN=110c1ddbaa281ba0d7c5853081873c6287eb5b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:9d:44:58:63:11:ee:09:b3:09:29:6e:b6:
65:c9:a6:9e:d2:c3:e0:84:04:2f:a4:32:55:6e:0f:
cf:53:1d:99:a0:c3:b1:58:2c:5c:a6:6d:ad:ba:16:
25:4c:78:07:8e:de:62:3b:85:3e:e7:29:88:52:50:
36:c0:52:03:1b:e4:59:44:94:61:cf:c2:13:6b:fb:
a8:e8:ce:c4:6d:55:52:f5:ae:2e:c2:9f:13:00:09:
b9:a5:ae:4f:6c:e3:57:7b:a3:ee:59:78:c9:9f:7c:
5c:c5:7a:f0:2e:b1:98:aa:40:eb:dd:d7:7c:60:c8:
17:78:81:b7:c9:fb:f5:6d:a7:b9:77:04:28:cb:f7:
d5:fe:a0:fe:e1:d8:1c:7f:ae:4f:8a:43:4d:e7:80:
df:4b:09:5e:66:f6:af:3d:fc:ec:56:7e:21:c0:1b:
e0:87:af:e1:33:e2:e7:fc:53:01:f7:f3:d3:71:53:
fc:39:de:e5:4a:d2:ad:9b:eb:ed:0d:d0:3d:fd:f6:
c5:80:e8:a1:14:d8:94:a7:30:bc:77:0b:4f:31:ea:
6b:87:25:fa:f1:c6:f1:c5:08:33:8e:a6:0f:8e:1b:
ad:3f:29:11:0d:67:6c:3b:07:01:3e:75:ad:0b:7f:
ac:12:a1:b7:8d:be:c7:5c:cb:23:16:16:26:66:73:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:1D:DB:AA:28:1B:A0:D7:C5:85:30:81:87:3C:62:87:EB:5B:15
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:c3:a0:f9:01:b4:95:9a:f9:92:88:4a:b7:0f:ba:40:c7:
91:1a:ee:15:84:05:58:e5:bb:6e:20:b0:5d:b8:c8:59:f8:f3:
52:89:1a:84:db:e3:00:a9:29:15:42:98:62:d9:da:32:d7:14:
59:d3:4e:5b:9a:95:b1:dc:68:2d:37:44:f7:d3:ec:ab:62:d1:
29:e4:a7:ba:6b:27:1f:ba:41:11:fb:1e:a0:16:bd:b5:47:5b:
67:7e:65:03:a6:5c:2a:5b:2a:0e:0e:f9:79:73:ee:aa:2f:ca:
69:e5:ef:7e:08:29:5a:ad:81:48:28:a0:70:95:cf:58:9d:91:
82:5e:0f:75:36:04:b6:23:aa:2d:3d:6b:c1:42:e7:e6:60:6c:
50:19:5c:96:73:01:81:6a:b8:26:6d:be:0c:73:0b:b5:9e:ac:
a3:c3:ff:d7:03:41:41:b7:e2:4e:47:b1:9c:85:ad:8f:07:04:
35:8c:8f:5c:6e:ff:70:e9:89:23:49:1c:8c:98:ad:a9:28:d9:
e6:98:0a:5c:13:66:03:e6:02:d1:00:0c:35:2a:7a:c9:8d:d6:
20:54:4e:54:ca:71:c0:33:3a:8e:db:af:28:ff:ab:22:69:1e:
97:2b:34:16:6e:0e:94:00:bf:b2:95:a2:35:66:d9:06:ee:0a:
f0:84:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:21 2026 by rpki-client