Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: E1tRvohKUma87PkA2bp/iQL8aKg8osgqPHKXwQrudK4=
Subject key identifier: 9B:45:0B:F3:8E:B1:D7:0A:78:50:6D:8A:0C:28:84:A6:C7:F5:FA:1F
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 01A0E098E2DFAC647BD0ED7739F8CE9F54EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 0126
Signing time: Sun 27 Sep 2026 02:01:50 +0000
Manifest this update: Sun 27 Sep 2026 02:01:50 +0000
Manifest next update: Mon 28 Sep 2026 02:01:50 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: 425LROul/7U3611KBZJ9W+l31NV8rZIqzgiYAeLekRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:e2:df:ac:64:7b:d0:ed:77:39:f8:ce:9f:54:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Sep 27 02:01:50 2026 GMT
Not After : Sep 28 02:01:50 2026 GMT
Subject: CN=9b450bf38eb1d70a78506d8a0c2884a6c7f5fa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:68:7d:cf:f8:c2:60:ca:65:47:f1:8e:55:
41:78:84:e3:66:af:48:74:3f:a0:a2:d8:c8:be:5e:
af:36:c5:f2:d4:cf:90:ee:55:c5:5c:1f:2d:82:78:
13:67:ca:77:6b:7e:4b:4c:25:e3:6f:66:84:0c:fd:
27:7d:28:95:f1:2d:82:c2:de:55:e1:8d:24:4d:e2:
12:b1:8c:cf:7c:2f:f3:fb:b6:89:1f:a7:19:17:9f:
9c:ed:8d:86:43:fc:15:8c:b5:44:fc:df:e8:e8:1d:
95:6e:3a:6a:5f:5a:fa:6b:11:4f:46:e9:95:34:33:
fe:f9:a1:c5:c6:5a:e4:a6:b7:5d:a7:38:94:96:02:
32:2e:38:2b:33:87:25:c4:64:0e:df:f4:78:f6:4b:
3a:f6:25:55:64:ec:f6:d2:15:50:5d:e5:3f:e6:29:
9e:60:fb:97:a4:53:ff:a8:d5:17:bc:20:cb:d1:2c:
45:13:3a:ed:3d:d0:d7:64:d2:d6:77:e4:2d:18:47:
43:6f:80:79:53:fd:b6:71:20:11:1d:48:78:7d:5a:
29:2a:62:cf:6a:c9:ce:72:51:b0:2f:c6:74:43:a4:
ae:20:93:9f:c6:65:c6:f8:c3:cb:e7:9d:92:a5:45:
42:80:5c:51:de:d5:b5:06:ca:b8:0e:c0:08:af:09:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:0B:F3:8E:B1:D7:0A:78:50:6D:8A:0C:28:84:A6:C7:F5:FA:1F
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e6:0c:9b:69:5c:cb:73:d8:ca:ff:b4:ed:b4:e8:a1:97:c8:
69:4c:a3:4b:c5:61:f6:11:8d:8c:b9:ec:b8:bd:cc:24:56:05:
67:fe:00:a2:68:b4:d8:cf:0b:3e:3f:74:0b:6a:3d:6d:cc:f6:
2b:80:9e:10:dd:e3:b9:46:79:42:fa:5b:05:d8:d7:db:dd:2f:
6d:34:57:20:c2:07:1a:34:48:8b:e8:05:a2:a2:97:1e:bf:d3:
f0:48:4e:f9:8f:21:35:53:0c:c0:7d:10:a7:6f:ec:3f:0b:d7:
4e:7e:91:52:ea:3c:4f:19:f8:7f:c9:ea:25:5c:a7:d2:a9:fc:
5e:3a:89:72:29:84:46:15:d3:54:10:fd:9e:42:f9:e8:3d:b7:
c3:2b:7b:c9:83:f5:69:cd:f2:79:8e:f1:92:3d:53:df:7a:10:
b0:08:4d:55:ad:41:63:34:e1:94:bb:f0:a2:5d:37:18:58:34:
25:5d:2e:d2:ab:97:38:24:27:ad:da:ce:c4:a0:29:42:2d:c6:
7a:a4:cf:c4:4d:f1:ce:d9:cb:13:b7:9b:a7:14:ee:60:f0:a5:
25:9f:6e:9f:ff:d0:bc:ee:92:60:bd:e4:94:f9:ec:9a:0f:17:
1b:03:bf:25:00:0d:de:f6:4c:78:c0:8e:43:df:5c:37:87:32:
17:a2:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:46:56 2026 by rpki-client