Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: U5Gx6G55r23lhQ9X/TmJx/tzVNhi+awWxWSLhi2Vue0=
Subject key identifier: 47:A8:55:63:A7:CC:77:4E:E3:9D:9C:89:38:C3:45:C8:7F:CB:B1:DB
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 01A1DE7044862782D6233B9012C6D955C700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 1AD8
Signing time: Sun 15 Nov 2026 09:01:01 +0000
Manifest this update: Sun 15 Nov 2026 09:01:01 +0000
Manifest next update: Mon 16 Nov 2026 09:01:01 +0000
Files and hashes: 1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: IP3veVyx75j6AwgmTlF5mWmTMXsBxU3sJa6c16s+9vc=)
7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:44:86:27:82:d6:23:3b:90:12:c6:d9:55:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Nov 15 09:01:01 2026 GMT
Not After : Nov 16 09:01:01 2026 GMT
Subject: CN=47a85563a7cc774ee39d9c8938c345c87fcbb1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:9f:3f:20:fb:c9:2e:36:bd:4f:e7:8d:14:
41:6d:c8:2e:2c:e0:e6:14:45:00:9d:5c:2f:1f:61:
c8:c2:ec:50:95:25:c2:58:bd:02:a0:f6:48:a3:1c:
05:4b:0f:4a:5c:2c:59:96:31:5b:1f:bf:c9:1d:f3:
61:f0:ce:bd:f1:61:3a:b0:68:19:41:4b:7e:00:c6:
63:7a:60:35:dd:48:e7:8f:8a:bf:a8:e2:e8:e0:40:
54:e1:22:dd:a3:49:6f:2d:35:33:48:fe:be:9d:40:
65:f3:c0:dc:ff:67:21:77:6e:37:fa:7a:bd:14:11:
91:2c:5c:b7:e1:1e:b8:68:ee:2c:81:2a:e3:a7:a4:
30:73:a2:6f:4e:63:f7:b6:c6:c4:a5:1f:52:34:1f:
d4:12:d4:60:be:f9:81:9e:e6:da:74:e3:ad:a3:11:
01:c1:93:4b:a2:0c:fd:8c:b6:95:45:52:90:e1:8c:
48:5a:db:f7:1e:0b:a6:1b:74:9b:29:bd:48:02:cf:
45:8b:1d:94:49:5d:72:0e:95:5e:6d:91:80:2d:54:
7a:67:a0:b6:c5:2b:53:2b:8e:36:f4:11:f6:a2:7c:
15:be:f7:15:c2:f0:22:be:f6:19:61:ee:05:c2:db:
ca:b1:ed:66:cd:7d:aa:0a:9c:a7:43:18:06:af:a0:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:55:63:A7:CC:77:4E:E3:9D:9C:89:38:C3:45:C8:7F:CB:B1:DB
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:89:dd:4f:c4:d4:dc:c5:09:bd:b2:1f:51:41:83:5b:0a:25:
ff:0f:a5:b7:b5:3e:02:3f:c6:96:8b:90:e0:99:cb:da:82:4c:
ab:61:ba:f8:b1:40:6e:b6:7b:ec:68:44:6e:a9:5e:9a:88:49:
45:73:48:86:26:0f:fc:e4:7d:41:04:de:ef:28:43:b3:bc:77:
aa:ea:3d:3b:30:c4:89:2c:90:5e:ae:5c:99:2d:aa:1e:c1:25:
ba:cd:41:fe:f9:b9:9e:59:11:20:e0:d9:b3:e0:8c:c5:4c:ac:
26:51:4c:31:18:46:23:19:91:10:4c:bd:10:0d:76:7d:d4:3b:
20:4b:10:09:0d:1a:eb:50:4d:2a:0f:e7:54:58:20:e8:8a:69:
ca:ad:ea:27:23:b3:4b:70:97:89:95:9f:c3:a4:b8:db:c0:66:
1d:f8:25:d2:b3:f7:85:d1:87:29:7f:ff:fa:cb:db:33:47:23:
a6:e1:4b:b6:f2:b5:39:0e:36:43:07:c2:ae:69:09:7b:a4:9f:
11:3f:18:aa:e3:cb:28:40:c6:5b:3d:a7:24:0d:bd:71:37:db:
89:ad:70:4e:1e:ac:fd:d6:82:5f:e5:de:60:d9:de:9d:4c:ec:
e4:6b:3d:92:b0:51:d8:4d:bb:5f:95:78:d2:ed:a4:ea:bb:44:
a0:ed:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:21 2026 by rpki-client