Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: xmyftusZeZuqPs4Aqk1OlmMVli8TzI8N9Dy4FAjaSf0=
Subject key identifier: FE:A8:DC:43:3C:D7:55:39:13:60:54:BC:08:FE:FB:2F:C2:D4:51:82
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 01A0D614CEE609D0C9CDCA3F8C6FA30F60AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 01B6
Signing time: Fri 25 Sep 2026 01:01:22 +0000
Manifest this update: Fri 25 Sep 2026 01:01:22 +0000
Manifest next update: Sat 26 Sep 2026 01:01:22 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: Q2v6odFkmlumly0cEjuXaYoHWXzrJSc3p7WZv28mHTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:ce:e6:09:d0:c9:cd:ca:3f:8c:6f:a3:0f:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Sep 25 01:01:22 2026 GMT
Not After : Sep 26 01:01:22 2026 GMT
Subject: CN=fea8dc433cd75539136054bc08fefb2fc2d45182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:59:8e:2e:d2:0c:66:be:2d:35:ff:b6:7e:
9a:c2:9c:88:da:83:27:05:ea:5c:40:7f:c8:2b:6a:
ab:f8:bd:4b:f5:b8:5f:07:20:25:0e:1b:b6:09:ca:
44:c9:37:9b:ab:55:14:78:24:57:50:7a:c0:fb:aa:
7f:bc:74:ce:74:33:65:30:69:8f:71:f1:2f:9e:24:
54:ed:10:0c:36:86:0b:b3:1a:ba:88:7d:b6:46:f7:
c7:08:b5:69:40:ff:69:35:94:d2:97:cf:45:4a:f4:
54:50:b1:a0:12:83:61:f1:95:2d:79:40:02:b0:ec:
81:83:61:43:ae:6b:22:4d:d4:11:10:6a:98:3e:50:
58:3d:50:16:46:5f:e3:cd:56:dc:c3:94:95:91:5e:
f9:5a:37:ae:b9:21:ec:36:36:a7:d1:54:0b:8b:1f:
4e:ff:c5:2c:f5:dc:0f:35:13:cf:fa:c2:fc:34:5f:
7d:21:cf:41:7e:ec:b4:cf:ba:6d:83:f8:f5:bf:c4:
63:86:40:9a:36:26:76:f8:f7:69:fe:35:5d:96:9a:
ef:01:94:f1:df:6a:5b:1e:79:82:53:a8:60:3c:1d:
f0:fa:f9:28:d5:57:d9:88:d7:b9:34:d2:0c:c6:7d:
39:9d:4d:09:5c:a5:fd:0c:98:f0:6a:e9:98:21:65:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:DC:43:3C:D7:55:39:13:60:54:BC:08:FE:FB:2F:C2:D4:51:82
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:95:09:39:9c:f0:5a:d0:38:7d:a8:10:fe:68:ed:59:3a:09:
91:9d:c0:59:b6:6c:e3:84:d2:30:7b:62:64:84:7d:c0:95:64:
88:71:d0:df:c2:5d:74:4d:b3:14:96:a3:3f:60:76:a8:b9:09:
42:f3:2d:81:4d:94:3c:0e:38:34:8b:05:ae:eb:cf:2f:ed:7a:
6b:58:aa:15:42:ad:9a:10:4a:22:ee:10:ed:3a:1f:8b:1b:6b:
a1:9f:b6:72:97:4e:b1:1f:e0:fe:3a:4a:52:9d:71:0d:cf:05:
99:a0:a4:35:93:c4:a5:62:5e:83:40:4f:a2:07:d9:6b:5e:ca:
c3:10:69:22:39:a7:db:43:6e:2a:7d:62:0c:8b:cc:2c:cf:2f:
98:f0:03:71:74:1a:b0:d3:dc:94:8c:e0:bb:3c:a1:e9:74:2c:
f1:a2:29:08:c6:09:ba:94:23:7a:d7:0f:44:f8:5f:b4:1f:dd:
22:02:7b:4f:71:e0:6e:e8:d0:32:6d:d1:ca:19:4b:ca:12:2d:
e6:5b:31:74:e8:6f:f3:bb:49:d1:c2:9f:ec:0d:85:df:ee:94:
f4:84:20:7a:e7:33:df:2e:83:7a:8c:b7:cd:95:84:2e:21:c6:
e4:50:bb:0f:96:bc:6c:ad:d5:47:58:6a:bf:8d:f9:3a:61:b6:
fa:60:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:54:59 2026 by rpki-client