Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: o49IiPNPIz1S8hVvlMM0OXCd5gVpE+z/rCUT5cWUeeY=
Subject key identifier: 15:9A:79:88:06:B5:DE:30:9C:8F:66:A6:FC:DF:55:E9:5C:2B:26:03
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 01A0C256AC09CD5394236367992D7D76D216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 05:00:55 +0000
Manifest this update: Mon 21 Sep 2026 05:00:55 +0000
Manifest next update: Tue 22 Sep 2026 05:00:55 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: Nooa9Ci2X4z0dQaZ9aXzLMw1hI8r2/o5xdXw3GHe4RU=)
2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:ac:09:cd:53:94:23:63:67:99:2d:7d:76:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Sep 21 05:00:55 2026 GMT
Not After : Sep 22 05:00:55 2026 GMT
Subject: CN=159a798806b5de309c8f66a6fcdf55e95c2b2603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:58:7a:97:60:77:51:ba:40:98:1b:a8:ca:
3d:73:70:e8:7c:72:d3:86:86:75:e0:7d:bb:c7:9f:
d5:c3:d0:b9:a7:dc:82:48:e0:48:c8:4b:29:f9:bc:
42:a8:8d:90:44:39:65:dd:7f:3b:42:ce:b5:d7:cc:
0e:03:10:c4:5b:eb:4e:27:08:28:4b:12:e6:34:81:
d9:54:3b:d7:b2:ba:c8:43:18:95:93:7b:fa:69:15:
53:5a:d6:a7:66:3b:77:63:ca:5f:ed:d4:b5:d1:ef:
71:e8:d9:c1:a1:e3:a7:45:9d:1e:29:cd:c5:f6:44:
7a:1c:cc:b1:cf:ef:80:eb:bf:a6:f1:26:75:32:0a:
65:68:63:66:f0:8f:49:18:f3:83:dd:98:cb:3c:46:
db:91:b0:35:54:d1:38:c9:8c:80:81:ce:77:9d:60:
57:50:f1:54:cf:d9:a1:4d:b7:26:4f:15:51:e7:dd:
60:bb:75:5e:23:5c:65:1b:43:3b:1f:97:70:27:1c:
02:21:10:48:12:19:25:6f:e4:31:0c:ca:88:a4:c7:
01:78:38:f2:50:05:aa:23:31:97:db:56:c1:3d:32:
c0:8a:98:93:56:82:d0:be:f4:ad:54:6a:51:55:13:
9b:02:cf:59:2f:09:36:db:89:0e:03:2b:70:c6:76:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9A:79:88:06:B5:DE:30:9C:8F:66:A6:FC:DF:55:E9:5C:2B:26:03
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:60:0b:89:14:e7:39:f3:b6:40:38:26:40:29:8d:e0:7f:56:
8b:ee:25:e3:3c:39:4b:37:7f:33:00:37:ae:3c:87:34:6c:45:
1c:bf:ff:54:8e:7f:22:f5:ac:ae:e7:84:9d:11:0b:a5:d8:56:
8e:df:b1:86:a0:1b:6c:15:4a:e0:4d:7f:48:e4:4f:72:01:14:
f4:79:e4:58:f0:32:59:e4:3f:23:22:ef:49:83:92:a3:66:10:
80:5b:b6:63:59:da:92:68:a4:5e:6b:99:55:52:02:85:0d:1b:
89:6d:3f:d7:fb:47:ce:36:20:78:a0:ed:ca:14:03:f6:8a:94:
39:22:d6:27:51:29:ad:af:40:ed:92:02:ae:05:90:0e:72:86:
0d:d8:3f:5e:f9:34:0d:1a:da:34:2a:76:3f:19:2f:54:0b:8f:
9c:ba:bf:34:7f:5e:a6:7d:04:20:1a:9a:a3:d2:5c:80:28:28:
e2:3d:0e:5b:bf:85:a9:ee:dc:59:ad:3f:6a:65:bf:db:44:3c:
f8:91:14:e8:58:fe:1a:15:ba:d0:f2:2f:20:6f:da:c7:2e:de:
e8:a3:2f:37:30:08:1b:d1:27:91:79:23:98:f8:e2:c2:0d:5c:
31:58:76:c4:ef:e1:c7:96:56:d1:51:ea:46:59:b7:10:e8:2c:
30:17:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:50:53 2026 by rpki-client