Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: EPQxv75LHV7PoCisXi9cGPp/Rw8twlCHcNlntT//FBQ=
Subject key identifier: 01:5F:4D:F9:17:B5:58:AD:33:2C:06:22:83:B2:37:F3:E4:6D:37:0E
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01A10A6FE76D8C4D997166F3095C0280B23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1A47
Signing time: Mon 05 Oct 2026 05:01:08 +0000
Manifest this update: Mon 05 Oct 2026 05:01:08 +0000
Manifest next update: Tue 06 Oct 2026 05:01:08 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: qgK72Dz986LQglWGdaKRTSpfP5YAUE0qzIXK2dfrYjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:6f:e7:6d:8c:4d:99:71:66:f3:09:5c:02:80:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Oct 5 05:01:08 2026 GMT
Not After : Oct 6 05:01:08 2026 GMT
Subject: CN=015f4df917b558ad332c062283b237f3e46d370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:a3:23:a5:8b:38:43:d6:fc:52:6b:76:dc:
e9:b7:80:01:86:81:5a:87:5d:de:3c:1c:c9:56:2b:
8c:c8:83:af:63:b5:a1:ad:d7:4b:c2:f9:b3:35:98:
1e:0b:10:e2:27:f6:ad:a4:c8:0c:65:13:e4:63:79:
6d:1c:d7:4d:23:5c:32:7c:41:b7:e5:3c:49:68:be:
cd:84:e5:a5:eb:8a:39:41:2b:fc:b8:21:27:d9:f1:
56:0e:36:f1:ba:75:58:01:55:8c:94:ec:d7:d0:22:
3a:48:9d:6e:c7:08:87:53:d8:42:5f:59:f1:99:c8:
d7:35:00:1d:99:03:3a:3e:04:3d:ad:76:66:2e:66:
d9:17:8f:d4:bb:26:8f:ba:d5:b7:12:8e:b9:e3:b4:
69:10:01:f7:58:85:df:10:00:40:86:5e:10:50:09:
e7:22:6f:d9:8a:63:b3:db:a1:06:5f:4a:3c:e5:60:
bd:16:fb:0f:3e:e9:21:41:12:36:92:83:48:39:84:
7a:6a:e1:4e:9e:29:c2:c9:aa:61:ce:42:d4:4b:21:
0c:92:ee:b9:63:17:dc:a4:10:7f:d3:ee:9a:e8:55:
21:05:b1:4d:b8:30:8d:25:aa:a0:da:18:89:21:34:
fc:2f:4f:b5:51:7f:ae:1d:4f:49:cd:e0:b8:6e:f4:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:4D:F9:17:B5:58:AD:33:2C:06:22:83:B2:37:F3:E4:6D:37:0E
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:1a:f9:de:d5:8a:04:ef:5b:7b:bc:74:7e:40:6f:95:6d:
54:76:64:27:b4:ee:b4:1c:b8:0b:f4:68:b2:71:90:6e:81:03:
51:7b:f2:c3:6b:bc:91:77:9d:1c:5d:79:65:8b:24:40:bb:d0:
8d:17:77:12:4a:e7:dc:23:0d:ca:0e:14:bd:79:d1:98:52:99:
e4:31:cc:fb:bd:b7:07:e3:27:98:39:b4:5c:5a:b1:76:30:28:
53:36:1b:2e:77:14:8f:e7:36:94:97:10:03:5c:0e:23:64:ea:
6a:e0:40:8e:59:36:60:05:0a:b6:80:92:da:24:33:18:39:73:
08:e1:71:31:b5:00:dd:d2:17:21:51:4e:71:d5:c0:3c:19:c6:
3c:4b:ca:6c:29:60:42:a1:fd:11:ea:47:38:a7:80:6e:e8:bd:
e3:81:47:aa:3e:b4:74:c3:0a:09:67:90:a0:d8:49:f6:c1:e7:
a3:65:d2:ef:b7:c8:ce:89:32:db:6e:67:73:de:04:00:e6:66:
d8:e2:84:75:97:0d:2c:96:00:1d:92:a1:a4:71:00:48:54:e1:
88:54:28:31:bc:ab:95:cb:a5:1c:bf:b5:0a:94:af:07:ea:6f:
ce:77:5c:19:82:d9:a8:01:b6:6f:65:4d:43:75:69:19:51:24:
2a:a8:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:24:42 2026 by rpki-client