Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: gA0Z/B6Poz4hWG3i80fGUn8rB6c6DlfMw+0cgXJMXd0=
Subject key identifier: A8:06:01:D7:45:66:57:97:B7:BC:83:94:60:50:07:95:3D:E6:6E:83
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 01A11B63748CCC350B94F279B0B316A97C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:01:05 +0000
Manifest this update: Thu 08 Oct 2026 12:01:05 +0000
Manifest next update: Fri 09 Oct 2026 12:01:05 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: CwuPs2uEDYOlLe2HAQxr31mYSpTNKETxepE5vn1vxJY=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:74:8c:cc:35:0b:94:f2:79:b0:b3:16:a9:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Oct 8 12:01:05 2026 GMT
Not After : Oct 9 12:01:05 2026 GMT
Subject: CN=a80601d745665797b7bc8394605007953de66e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:47:9d:38:7c:9a:7c:ea:b9:e7:54:d8:0c:
20:3b:21:46:61:29:e3:47:f0:11:d4:1c:c3:13:16:
ae:36:ea:a0:72:a6:b7:15:d4:86:66:ea:a2:d1:cd:
2f:a1:f9:af:18:3b:6c:eb:80:83:14:de:89:8f:ed:
ef:6d:cf:29:6d:5f:19:60:67:06:4b:4c:f4:87:07:
2c:3c:98:c0:6c:47:06:95:e1:e4:b2:ee:a7:7d:e4:
74:47:c7:c1:25:c9:3e:53:0b:5f:3b:f3:c7:66:e4:
54:81:bc:fd:68:c7:e9:ee:63:a6:47:83:02:6a:7f:
c5:41:e7:73:78:b5:d5:c6:94:57:f8:0d:0b:5b:e7:
1f:75:fa:86:42:c7:8a:cb:a6:b9:f0:71:a8:bc:4e:
9f:1a:08:b3:d6:f3:a5:63:e3:9e:db:5f:af:96:bb:
a1:e9:b7:bc:59:79:07:a7:19:bf:59:f3:b5:25:a5:
5f:52:ba:0d:83:a0:7b:69:0a:4d:97:01:9a:e6:9f:
43:86:f6:6d:92:7e:99:27:d0:1a:3c:37:95:2f:ab:
9d:27:82:7c:c8:47:8b:5b:97:f0:45:ac:61:82:43:
c5:1b:ef:a8:14:8e:82:03:35:9e:4b:dc:85:29:8e:
fc:ca:6a:bd:79:2c:46:3d:5f:67:b1:29:2f:cc:6a:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:01:D7:45:66:57:97:B7:BC:83:94:60:50:07:95:3D:E6:6E:83
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:c8:67:6b:dc:b1:90:a0:40:a8:5e:62:05:4e:a1:34:00:
ba:f7:d6:1e:d3:76:68:6a:8b:6d:18:67:7a:a6:5a:d7:b1:6f:
cb:ee:c7:7f:dc:4f:0d:d4:ce:da:82:dd:43:af:5e:af:13:ae:
31:6f:9b:97:67:b4:81:82:0b:71:42:f4:57:63:87:f8:3c:10:
2a:4c:d1:6e:17:2c:03:36:f7:93:fb:f6:6e:8e:72:24:51:ad:
d8:96:be:7b:3c:a9:6c:7f:b8:35:69:f3:f7:6f:66:de:e5:dd:
cf:8a:d1:37:53:29:99:f1:ed:e5:e8:b9:ff:20:25:cb:f3:8c:
3f:71:f7:ef:e0:ac:4f:0f:8a:71:63:81:37:9e:30:8c:37:70:
e7:10:6f:4e:66:d3:68:db:a9:51:e5:65:1a:06:d9:b7:56:cc:
fb:33:d2:81:af:10:4f:e4:8c:02:55:2c:b5:ad:a2:88:6b:06:
d1:f1:7f:bf:a3:47:14:ae:82:92:70:03:1d:ab:7a:99:3e:a5:
af:c9:f5:2e:5a:9a:ac:b2:b0:3d:ac:4a:01:c0:93:9c:ea:77:
ff:a8:0b:33:df:b1:95:89:dc:ef:fe:b1:76:6d:ad:f6:a4:c8:
24:bb:fd:e3:03:be:53:96:5d:e9:51:58:60:fd:a7:2b:95:53:
94:ec:4c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:19:18 2026 by rpki-client