Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: 6AJ/hB/62InHd8iUP8q1ANp7HvZn5e4t3pxpE1Av4w0=
Subject key identifier: 35:FF:5D:45:F2:30:34:DF:53:7B:39:90:8E:10:AF:35:6A:13:D6:DA
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 01A1DEDE280D2AE176C65084FF41D8BF940A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0DC7
Signing time: Sun 15 Nov 2026 11:01:03 +0000
Manifest this update: Sun 15 Nov 2026 11:01:03 +0000
Manifest next update: Mon 16 Nov 2026 11:01:03 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: D5pQp26cO6GeQgxfdzMpCpR71uplztSzeJaW94o0q4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:28:0d:2a:e1:76:c6:50:84:ff:41:d8:bf:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Nov 15 11:01:03 2026 GMT
Not After : Nov 16 11:01:03 2026 GMT
Subject: CN=35ff5d45f23034df537b39908e10af356a13d6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:f2:10:e6:fc:5b:e8:82:66:3c:a4:9b:2d:
45:4c:e9:6b:a8:30:54:3d:53:24:f2:d8:00:a0:28:
f4:25:97:6c:27:b1:a0:ce:7e:6c:15:75:c5:dd:90:
94:30:14:18:fc:a5:c6:17:53:88:8f:82:f4:54:1d:
e8:1e:20:a1:28:a8:98:7d:00:fb:a5:22:93:f8:4c:
68:62:8b:9d:85:bc:ea:03:98:9b:0a:e8:b9:e2:36:
d0:05:53:3e:b0:c8:50:64:c9:13:fb:84:08:b5:21:
8c:e7:7c:b5:e7:04:2f:a4:5e:2b:d4:dd:e0:8f:df:
22:50:15:38:a8:3e:e1:0a:84:16:0a:10:fc:45:33:
e6:4f:b4:3b:92:52:bd:5d:7f:a1:b6:24:c7:9f:55:
9a:0d:45:fb:1f:d8:31:34:db:66:9e:89:ed:22:95:
58:30:38:69:b1:46:0f:20:36:83:f4:fd:86:ce:15:
10:8b:31:e8:d5:ba:5f:8f:8f:db:3f:8b:f2:be:88:
21:d8:bf:22:cb:23:88:ee:7a:1b:25:b0:26:c1:6a:
ae:66:e4:a1:10:f3:af:78:56:21:38:32:ad:38:1a:
97:42:7e:48:5e:cc:11:b5:f1:5b:23:6e:04:04:d8:
73:29:e5:d5:8e:df:8a:09:b9:55:74:eb:07:75:23:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:5D:45:F2:30:34:DF:53:7B:39:90:8E:10:AF:35:6A:13:D6:DA
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:66:a8:75:e5:83:38:a6:85:4e:79:63:71:98:8b:41:34:
78:35:da:c6:a3:e6:ef:d6:93:13:7c:59:ce:4a:45:cb:28:2a:
46:91:42:b1:4d:5d:f5:6f:d2:a2:0a:2d:18:6b:f6:ad:b3:7c:
27:9b:88:36:81:49:c8:5c:75:4e:77:9e:4f:b7:a3:71:0a:e8:
90:87:14:bb:b8:1b:9d:cf:eb:eb:a5:57:82:42:84:c7:2f:78:
11:96:8b:1b:af:1e:58:2a:0d:bf:90:a7:df:f9:9f:00:8c:c5:
c4:ca:20:83:29:54:94:bf:dd:60:9b:5c:08:04:87:fd:a4:60:
5c:d1:84:fa:52:6b:7c:7b:73:dd:ec:74:77:1d:b1:5b:93:47:
6d:51:4c:6c:b6:ed:3b:ca:0f:12:7a:c5:d8:19:b4:48:2c:db:
08:1d:95:6d:89:65:ba:2b:78:45:bb:2e:ae:11:41:57:5e:55:
75:91:7b:a7:89:55:23:b9:bc:4c:66:56:65:8a:eb:13:3f:e7:
7b:c3:8a:43:2c:f6:b7:6b:e8:18:f0:8d:3e:89:9f:91:fc:69:
d5:58:20:2b:d6:67:c6:6b:19:9b:4c:66:15:10:57:bf:75:9c:
11:cb:40:58:f0:25:42:ca:e9:0a:b6:fe:f7:7a:63:27:d8:00:
b5:b6:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:59 2026 by rpki-client