Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: +XG2e7QW/LTCDzG36TDW/bOF/ay7jQCxsb5ESBRv0fw=
Subject key identifier: 1A:CB:9B:7D:91:2A:BF:70:A8:D2:6D:97:4B:91:AC:9E:DF:E3:D5:42
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019D9A7535C16EFA5DFABA950BD17134BC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0FB5
Signing time: Fri 17 Apr 2026 08:01:05 +0000
Manifest this update: Fri 17 Apr 2026 08:01:05 +0000
Manifest next update: Sat 18 Apr 2026 08:01:05 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: Jql3ESn1CdGs/ewQA5unBRWJkmmADXiLXeG5X1VEXoE=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:35:c1:6e:fa:5d:fa:ba:95:0b:d1:71:34:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Apr 17 08:01:05 2026 GMT
Not After : Apr 18 08:01:05 2026 GMT
Subject: CN=1acb9b7d912abf70a8d26d974b91ac9edfe3d542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:ba:68:39:c5:6e:62:b8:8b:b1:c6:8e:7d:
d3:64:ba:e6:bc:8b:9c:69:05:df:04:ae:aa:5d:58:
8a:2c:ee:59:17:75:78:7c:92:1c:11:f7:5e:12:0f:
ba:b3:d4:bc:30:9d:a1:e0:67:50:42:3e:dc:bc:f0:
e1:3b:d2:31:1d:2f:17:7e:5c:ba:cd:79:10:2b:eb:
b1:cc:be:57:96:24:9b:32:74:0d:6a:ff:9a:d9:6b:
fb:f6:31:cb:b6:72:a3:e7:04:68:c0:9c:74:11:6e:
5f:ad:10:aa:6b:f3:27:a8:8c:ab:c4:51:80:5e:5c:
0c:0c:c4:36:7f:d4:66:69:77:16:26:a7:e6:14:5f:
d0:43:77:07:69:91:c7:ae:9b:0e:53:92:09:ee:22:
f9:88:4d:79:8e:6e:7d:08:0d:6e:ca:b4:36:a3:f8:
74:16:9d:c7:fe:d5:91:ca:70:35:56:76:58:d4:c4:
35:f2:c4:a7:8d:8f:f6:09:22:6f:eb:57:00:2d:1a:
65:91:f8:c5:db:f5:ca:65:1c:3e:00:78:e7:28:28:
8b:df:23:60:f4:ec:fd:a4:89:c2:22:7b:7d:99:2d:
45:67:6e:6a:9f:00:8c:95:26:c4:df:14:7e:f2:47:
73:ad:bb:ad:42:e7:b4:d1:c7:c1:da:de:b6:45:9f:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:9B:7D:91:2A:BF:70:A8:D2:6D:97:4B:91:AC:9E:DF:E3:D5:42
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:71:8f:f3:0a:4c:fb:fb:3c:28:65:05:cc:20:0b:00:8a:
12:70:06:52:31:31:93:61:c2:58:a3:d4:cb:79:04:16:ff:db:
7e:95:15:c9:1b:2c:5b:5e:f5:7a:99:5a:25:04:0a:09:22:fe:
8c:12:1f:09:68:93:73:d1:c8:c7:0e:7a:53:a6:89:4a:59:61:
61:8a:42:29:53:bf:04:b9:37:61:a7:cf:90:21:bc:3e:72:2e:
ca:90:c3:f5:cd:7f:ce:c8:98:85:9f:aa:1a:87:63:19:21:0b:
cb:e0:8f:33:94:cc:43:8f:43:20:2f:bf:1a:f3:1d:95:77:e0:
9d:74:4d:9b:3e:d5:6d:58:f1:e9:b3:0d:b8:81:f3:64:3f:a0:
a2:d4:d6:4d:2f:29:82:c0:7d:dd:ec:71:f7:86:79:f7:96:13:
95:3a:49:c4:36:5a:c5:14:f0:4d:05:f2:7b:dc:bf:21:9b:0d:
a6:58:e7:72:35:0f:45:3b:6f:47:5f:c4:6e:bc:07:db:e4:f0:
92:aa:2a:a4:3f:dc:dd:ef:4b:16:25:cd:3c:1d:61:43:bb:b8:
cb:1b:ba:52:34:53:8c:6a:45:7f:fc:c3:7c:ed:bb:4e:da:9a:
f7:fd:32:17:e0:32:92:d1:52:d1:18:aa:8d:38:c3:8b:9b:bb:
21:ce:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:27 2026 by rpki-client