Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: /bOEiWbT3ub1GD8GG/KKZGSTCJdQnNb9MlnxnPPJnIU=
Subject key identifier: F9:CC:13:43:2B:D9:46:32:8A:64:AA:BC:BA:18:FE:37:24:7F:7C:AB
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 01A104A51F7E502D637FE597D1F38BF67D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 02:01:32 +0000
Manifest this update: Sun 04 Oct 2026 02:01:32 +0000
Manifest next update: Mon 05 Oct 2026 02:01:32 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: H9MjU7lIbp4i5U2g3zJoA9AHY1l5ET3vZNjiZ3+BDaM=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:a5:1f:7e:50:2d:63:7f:e5:97:d1:f3:8b:f6:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Oct 4 02:01:32 2026 GMT
Not After : Oct 5 02:01:32 2026 GMT
Subject: CN=f9cc13432bd946328a64aabcba18fe37247f7cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:9f:08:70:64:b3:7a:06:b0:31:23:a1:d2:
b1:7a:ff:63:aa:2f:77:98:7d:b8:3c:8f:4e:1c:87:
8a:32:a4:0e:61:d3:7c:cc:d1:97:ec:0a:b2:f0:d1:
dc:84:45:4e:bd:81:4c:91:ff:c6:c3:98:00:29:34:
04:bb:58:94:ba:6e:fa:12:4a:c6:c1:58:55:5a:7d:
22:0b:75:b1:3b:ec:7d:d8:fe:f7:64:e1:cb:92:66:
74:58:e3:f5:b0:52:6a:c6:1b:f4:b0:d3:b7:e0:a6:
8c:c2:a6:8f:1d:95:c2:43:0b:74:cd:e3:0b:01:bb:
88:ff:5c:85:80:ea:97:66:98:1d:42:c0:5e:9c:86:
de:0c:59:72:de:51:23:3b:7a:90:5d:2c:38:14:4b:
3a:89:7c:29:ab:b3:88:94:be:0c:07:b7:aa:41:84:
36:77:74:cc:56:46:e1:86:a2:89:ae:bf:27:5d:a2:
ad:07:cd:bf:3f:a0:d0:91:d6:20:82:c9:cb:29:27:
ff:78:f1:cc:7b:90:eb:fd:28:e1:ca:a4:24:01:83:
9d:b8:fb:43:4b:f0:40:21:b1:c3:33:65:5b:d7:4d:
f3:89:53:b0:5b:86:94:56:0c:f8:69:58:6a:50:9c:
a8:e6:f0:e3:bf:c7:42:d6:ff:0f:c1:50:0b:6c:07:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:13:43:2B:D9:46:32:8A:64:AA:BC:BA:18:FE:37:24:7F:7C:AB
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c2:97:84:76:42:d2:5c:93:59:6f:eb:64:3e:d5:92:fa:62:
1b:cd:5b:22:4b:4a:32:ac:47:87:ae:e5:95:d1:08:5c:3f:86:
1b:bc:d0:90:bf:84:a3:b0:ba:55:69:c0:70:6b:20:b7:ab:ff:
a3:c2:19:9f:7b:a2:91:54:c0:f5:16:2f:b3:e1:32:66:b6:09:
13:d6:34:dd:2d:d8:0c:04:be:c2:ab:b2:4c:ed:73:61:99:6e:
a0:54:b3:a1:01:6f:d2:67:19:f1:53:26:a8:04:f2:cc:45:76:
f4:ce:84:3b:35:2b:59:5c:c5:7e:18:50:92:a6:bb:d3:91:c3:
d6:12:ad:29:a1:62:ed:0d:7d:56:6a:c1:ee:4e:55:66:71:f2:
7d:31:7a:b8:60:af:50:cc:d5:c3:bc:c2:c7:e8:84:00:a0:73:
f0:f0:02:8b:e8:57:de:a7:f3:31:00:42:38:cf:f3:00:c5:18:
ea:a8:99:92:a4:0d:76:12:47:87:23:fb:cf:55:f1:f7:6e:56:
12:af:9b:c2:96:bd:f6:65:e7:fb:ca:f8:ad:1e:7f:73:6e:94:
fc:78:04:c7:84:1d:7e:16:6b:02:f4:49:16:a6:60:ae:71:20:
47:38:c1:f6:e6:dd:9b:1b:c9:c6:e6:20:18:c7:33:65:03:a7:
9f:dd:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:32 2026 by rpki-client