Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: BUfxK88MWxYvBssvO1ftvbAtJk4VGdhy6PCMk9LKKxQ=
Subject key identifier: 91:AC:2E:E6:B1:8D:5F:AB:E6:55:E5:A0:09:08:30:E2:EC:C9:E6:99
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 01A0D9F1E5688DE5C257CAF271C2F4C020A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1A7F
Signing time: Fri 25 Sep 2026 19:01:43 +0000
Manifest this update: Fri 25 Sep 2026 19:01:43 +0000
Manifest next update: Sat 26 Sep 2026 19:01:43 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: TNrhFpQyjktzjEX6P/PMUbfvESvr1pk8fTJdJttpriM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:e5:68:8d:e5:c2:57:ca:f2:71:c2:f4:c0:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Sep 25 19:01:43 2026 GMT
Not After : Sep 26 19:01:43 2026 GMT
Subject: CN=91ac2ee6b18d5fabe655e5a0090830e2ecc9e699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:28:6c:4e:07:8f:e7:f6:27:37:f9:ac:30:
1b:6e:0a:77:a2:a3:f7:25:12:75:c6:a6:a5:b6:c1:
bc:c9:95:db:6b:47:86:81:e7:88:80:65:09:58:e0:
f7:4b:4f:98:27:c7:8b:9c:fe:a3:21:cf:45:aa:74:
ee:9a:1e:45:08:70:e1:ae:18:00:7c:07:b3:00:bb:
4a:92:7e:29:a2:af:91:8b:4b:ce:ff:1e:91:8b:e2:
48:b5:79:fe:aa:20:90:63:33:a3:00:7c:dc:79:29:
27:5d:38:bb:9f:cf:da:ee:0f:0c:1c:bc:80:0a:3a:
fc:18:85:90:cd:55:ea:37:85:4b:32:92:43:09:85:
fc:97:52:f3:1f:2b:a5:74:70:e8:3e:97:fd:1d:fb:
6a:d2:c8:f2:fb:7a:d5:a0:fd:01:90:76:c5:06:0a:
a8:ed:63:d5:53:c8:52:6c:36:92:ed:b6:80:00:0f:
93:69:73:1c:e5:35:59:19:85:a2:ae:95:fc:f5:aa:
17:3f:58:05:25:fc:7a:5d:68:42:89:dc:0a:b2:08:
c8:29:86:0b:9d:cc:f4:83:9a:04:8f:34:70:42:bc:
6a:f9:d9:2f:e2:c7:19:f6:2e:39:01:ef:d7:fb:8d:
d6:2a:b4:95:50:ca:82:21:bc:da:c6:e3:77:52:7a:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:2E:E6:B1:8D:5F:AB:E6:55:E5:A0:09:08:30:E2:EC:C9:E6:99
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:51:98:c9:e8:f3:0b:9f:2b:81:7b:cd:12:d3:3d:c0:d2:3b:
9d:f7:e6:66:bb:ff:58:8c:07:63:5d:e4:af:77:82:08:ab:81:
59:3f:21:6a:d1:16:e6:f4:d0:73:e3:51:0b:82:7f:6a:4f:ee:
a3:67:92:f7:db:24:7e:d8:f7:ea:39:5f:35:8d:95:b1:df:1f:
83:3f:c1:52:47:4c:b1:78:e8:df:26:6e:ab:a1:95:de:77:7f:
5d:9b:4a:6d:dd:bf:24:c4:bf:3d:e3:17:0e:01:e9:c4:7b:cf:
81:e6:b4:2e:6f:27:dd:47:fa:54:1d:61:ca:74:82:8b:9b:8f:
b8:d6:07:f9:47:da:b5:c0:f8:48:34:d0:16:c9:a3:8a:03:71:
8b:a8:3b:1c:57:fe:3e:e6:c3:a7:30:20:48:6c:69:47:a3:cf:
99:51:8c:f5:c1:fc:8a:69:8e:0a:ed:78:42:46:c3:9a:e7:85:
4b:57:df:df:ca:ae:ec:1b:29:6f:8a:ae:d5:46:48:1a:59:65:
09:86:b8:48:f5:7a:cf:22:03:3e:6c:45:2a:04:7a:08:0e:87:
62:79:76:a0:e1:65:5f:37:28:9a:9a:fb:16:19:92:fa:9d:b7:
89:46:10:f9:69:cf:08:b7:d6:b5:37:b6:05:57:e3:fa:78:81:
3e:d5:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:31:04 2026 by rpki-client