Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: MxPa1r6B/PNwI8mJykBs+WuC+yODBjLtuPWd6eZKdxI=
Subject key identifier: C5:48:3D:5C:15:FC:1D:3C:F2:F9:22:06:85:24:DB:B5:20:87:82:AE
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 01A0E32B674E48F4E98B0222B5E99C9641E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 09D1
Signing time: Sun 27 Sep 2026 14:01:07 +0000
Manifest this update: Sun 27 Sep 2026 14:01:07 +0000
Manifest next update: Mon 28 Sep 2026 14:01:07 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: sWaMuOfsQMkw45jP7ju5zXOlsLzGnBxsXpn25XBt3CI=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:67:4e:48:f4:e9:8b:02:22:b5:e9:9c:96:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Sep 27 14:01:07 2026 GMT
Not After : Sep 28 14:01:07 2026 GMT
Subject: CN=c5483d5c15fc1d3cf2f922068524dbb5208782ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:03:bd:03:c6:0d:a1:1c:6a:16:a7:53:e5:
7a:91:bd:86:5e:c4:f4:ac:2c:11:3d:4a:3f:d9:ed:
c4:40:70:c0:f7:d8:e0:77:b1:2b:45:0d:0f:68:f5:
dc:31:6d:0a:38:f9:ab:a0:b8:04:9d:78:36:49:8a:
b0:67:e4:b4:55:57:24:c8:15:e7:95:bb:37:d6:67:
1a:f5:79:ca:6c:a3:88:96:e0:34:0f:9c:f9:5c:57:
f1:af:31:8a:19:9e:a3:a0:08:9a:44:f4:2b:a2:fc:
5f:96:82:bd:31:bd:f4:50:15:85:65:03:ba:19:98:
78:25:8d:77:75:4f:35:fe:90:fb:c0:7c:3b:bf:ea:
ed:68:b1:b2:6e:23:87:e0:68:60:69:da:f3:6b:e9:
28:b9:be:b9:4a:ae:a4:2a:17:c3:ed:9a:4c:03:15:
d5:d6:cd:12:8c:34:e4:62:56:63:98:cd:f5:b6:50:
03:1e:f4:6e:1b:43:89:85:ae:ea:06:20:41:ce:89:
d3:0b:d4:e0:a7:35:4e:2f:da:9d:d8:96:d4:43:65:
05:dd:30:fc:61:a9:51:52:6b:16:84:61:bd:96:4d:
d3:d2:0e:2d:56:a1:37:27:11:3d:73:da:c8:d3:ac:
11:31:03:d9:64:21:97:ca:f0:aa:d2:47:03:a8:87:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:3D:5C:15:FC:1D:3C:F2:F9:22:06:85:24:DB:B5:20:87:82:AE
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:42:7e:f3:05:ed:33:a5:c7:d5:27:66:1c:59:ae:5d:70:
14:63:11:4d:b9:1f:e5:af:3d:7c:2f:05:54:5b:48:22:40:df:
41:3b:ce:4c:aa:e4:05:09:52:3d:24:eb:10:f4:cf:6c:56:79:
a4:17:2c:c2:ed:0c:40:fd:4e:e9:ed:2d:98:dd:17:e3:18:b3:
66:d2:f0:f0:28:2b:22:77:c0:08:85:9f:a3:bd:0d:1d:44:60:
3a:7b:da:73:65:0f:43:59:cb:cc:ca:a1:06:55:55:27:a3:3a:
f2:c4:0c:50:97:97:6d:9c:28:c6:7b:54:43:e7:d9:f2:74:e0:
bb:aa:ee:c8:37:75:da:9c:34:c1:54:57:ec:21:b1:37:b2:43:
53:63:69:08:be:aa:8b:50:e2:84:21:28:83:cb:e4:e6:17:d5:
1f:7c:17:0c:4f:03:a0:94:ff:5c:66:4f:a9:87:c3:90:ff:d6:
4f:12:7c:e0:50:b7:39:74:f3:a2:e6:5f:51:ae:bb:78:d0:c0:
2f:e3:c8:9e:89:51:ff:24:fa:30:cf:6f:b0:2b:41:90:9c:c6:
cb:a9:40:67:08:da:ff:d6:94:f8:fe:da:c0:d0:e0:34:d9:10:
b4:53:4c:73:84:53:bc:42:1f:89:d0:c8:bf:22:4b:f3:10:75:
a7:20:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:50 2026 by rpki-client