Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: ZtfuE5fPYXrSMXTHHM74I7/l4/eUGeIj4UOBzh2LcMU=
Subject key identifier: 27:65:D5:5A:2E:0D:73:4E:12:38:26:CE:2F:23:EB:71:2E:D0:F5:28
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019CABA202656CBE86B3FB83E5BF87AA5513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:47 +0000
Manifest this update: Sun 01 Mar 2026 23:00:47 +0000
Manifest next update: Mon 02 Mar 2026 23:00:47 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: ucHLSYeqkbVexsPvRmyfQhWkJk9a+yPnjIVrVFOfLx8=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:02:65:6c:be:86:b3:fb:83:e5:bf:87:aa:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Mar 1 23:00:47 2026 GMT
Not After : Mar 2 23:00:47 2026 GMT
Subject: CN=2765d55a2e0d734e123826ce2f23eb712ed0f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:14:7d:ef:d1:b5:d8:e9:e3:b7:ed:81:fa:
cc:18:99:d0:42:eb:54:7e:bc:4f:99:73:09:75:9b:
54:c5:ef:72:4f:33:77:ee:ad:34:57:0d:bb:e5:6b:
d9:78:e8:35:3a:27:d0:61:99:22:a3:a7:1a:c2:43:
49:27:e4:72:af:13:13:67:63:13:70:6c:74:a7:68:
a8:cc:d6:d7:a3:aa:d2:a2:b0:34:93:4a:13:df:02:
7b:80:e0:3c:65:28:c3:62:97:15:e0:17:13:4a:29:
51:b2:c6:16:90:eb:1b:a6:eb:21:c9:e4:b3:82:f1:
de:cb:e2:50:92:68:4e:c6:14:cf:a0:da:f9:2f:b3:
be:50:7a:9e:b2:7a:e9:f2:c6:88:f3:53:a9:b6:9c:
09:1f:23:01:ae:b6:f8:bf:4e:c8:f0:f7:00:5f:5a:
d4:87:7d:9d:ba:6c:12:66:92:72:3a:12:30:29:a7:
29:5d:9b:7a:08:6c:38:0a:ff:12:7a:12:47:09:dc:
1a:7c:ac:86:0f:08:08:c9:ae:78:16:0e:e1:4b:37:
32:d7:b0:83:89:4f:a4:82:82:8f:b6:f9:25:fe:71:
cc:c9:48:d6:ce:d1:20:9e:ab:eb:df:7f:5b:48:bb:
0c:35:b6:cd:34:10:f0:a6:38:bb:5f:e5:db:96:98:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:65:D5:5A:2E:0D:73:4E:12:38:26:CE:2F:23:EB:71:2E:D0:F5:28
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:8d:a5:64:57:71:0a:ce:b5:c7:ac:40:87:5f:0a:12:d5:
f6:f8:9d:a6:da:b3:74:d1:23:a0:96:00:0d:56:79:53:74:9a:
2a:a0:a4:d7:8c:3b:ae:5b:bf:dc:6d:30:78:f6:da:5b:67:de:
c7:d7:da:cf:c6:e0:8b:42:85:60:75:53:5b:f5:c0:3b:4e:52:
26:dd:cb:15:ae:42:3a:0a:be:56:1c:5e:e7:73:ea:29:c4:a2:
49:76:39:62:cf:bf:f1:97:e2:a5:7b:64:81:75:1a:03:cc:dd:
ff:86:ac:4a:1d:62:57:3b:62:eb:ac:57:19:ff:a8:9a:c9:e9:
23:98:d8:11:ec:da:e5:5d:88:fd:18:b1:2d:eb:f7:a4:9d:e5:
3a:68:90:2a:57:a7:b1:38:3f:fb:f5:84:b2:ab:72:ab:f3:eb:
85:ca:90:1e:71:31:ae:2b:99:94:42:87:78:b9:2a:8e:55:61:
64:e3:22:15:52:76:99:56:cd:1b:9d:9b:4b:71:d1:dd:14:13:
4f:5e:9c:b6:1a:7c:6a:07:92:6c:f3:9e:74:e9:56:71:b2:c6:
09:46:61:85:06:66:56:f5:aa:25:f4:e0:c6:1a:41:eb:33:c6:
9f:39:0d:f8:a6:91:ed:b9:c9:06:85:de:ba:8c:59:1c:58:58:
64:66:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:16 2026 by rpki-client