Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: fRPuDzLDIa51ubi04+WcuM/yhw0c0z6veCBZMG296Kk=
Subject key identifier: A2:1F:52:4F:1B:B4:57:28:5C:CA:83:37:7D:A1:7B:51:87:98:E2:0B
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 01A10926410E689EAA20431CDE03D3E895B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 0205
Signing time: Sun 04 Oct 2026 23:01:04 +0000
Manifest this update: Sun 04 Oct 2026 23:01:04 +0000
Manifest next update: Mon 05 Oct 2026 23:01:04 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: vg38GDVftkwHha4ANBD11kdXBYuzMp4H3RwDV0oL7iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:26:41:0e:68:9e:aa:20:43:1c:de:03:d3:e8:95:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Oct 4 23:01:04 2026 GMT
Not After : Oct 5 23:01:04 2026 GMT
Subject: CN=a21f524f1bb457285cca83377da17b518798e20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:aa:5d:be:0d:3f:da:c8:d1:4f:3d:84:7c:
08:89:0b:27:e4:89:ba:7a:f0:b2:94:08:c5:76:c8:
9c:a2:d8:92:b4:f4:3d:49:4a:a1:96:d2:d4:56:48:
15:38:06:ed:5e:b6:30:cf:81:5c:05:f5:93:0e:e9:
02:b4:f3:5c:5f:e0:eb:a9:d7:81:21:08:00:02:33:
13:8f:e5:3f:f8:f0:a3:0b:22:90:94:af:12:f1:11:
1e:8d:de:fd:b8:6a:fb:28:70:d2:37:62:b8:12:0e:
e7:b6:da:e0:3b:d4:38:3d:2d:26:59:d2:49:2d:37:
93:f4:80:3b:8c:c4:8c:20:ec:54:ec:49:0e:f6:da:
0c:02:cd:9e:87:b6:71:67:b7:d8:67:56:02:da:92:
cc:46:60:31:2c:d4:e3:51:f7:4b:45:00:70:04:fe:
3d:16:1c:f7:23:58:9c:ef:c2:3d:9d:46:0a:4f:69:
87:2a:0a:6d:79:a2:a0:23:28:a8:7f:c5:ea:e5:46:
4a:ec:09:2b:b4:60:b7:42:57:48:78:e6:0b:e4:99:
dd:30:6b:e2:f5:12:d2:1a:f2:63:cd:47:01:23:06:
46:35:89:05:51:d7:be:76:19:00:b2:92:0c:4c:cf:
4f:d5:91:68:f2:a3:85:4b:8a:19:18:e0:c3:34:8d:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:52:4F:1B:B4:57:28:5C:CA:83:37:7D:A1:7B:51:87:98:E2:0B
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f9:01:0d:43:f4:3b:75:a4:b6:b2:dc:02:6b:42:0f:2a:39:
d8:0b:59:2f:55:db:a6:9b:ea:ae:ab:9e:70:93:1b:84:e8:5f:
0b:c3:2c:2d:c0:f9:fe:e8:81:84:bd:02:20:5a:93:c5:04:00:
bd:71:b4:2d:34:36:16:e6:31:eb:c1:e2:41:b5:d1:82:a5:3d:
1e:4a:fb:20:2b:64:6f:50:f9:fb:5a:ba:5f:d1:cf:42:c2:01:
05:90:79:bf:1c:0b:b7:af:d5:0e:40:ba:b7:6c:bf:79:90:b7:
c1:03:72:07:15:c2:54:95:69:59:93:e7:25:3c:ac:f4:04:f7:
bb:1e:22:af:97:e0:97:bc:3a:93:67:89:ac:70:01:3d:77:4e:
45:b4:5b:df:46:8e:1a:44:ca:e8:d7:83:23:6d:34:ca:5f:8b:
ac:37:46:55:cf:62:13:99:82:d1:8d:c2:37:32:d5:9e:32:cd:
c1:f7:62:94:44:0a:5f:2c:61:25:0d:35:d0:77:af:e1:9c:f9:
14:40:d4:2d:75:01:00:92:69:0f:da:c3:3c:8a:56:38:ab:18:
7b:a6:5c:fa:99:f7:52:26:53:6c:ff:57:23:d1:c4:f1:5d:34:
80:24:81:fe:5a:3c:03:fc:fe:41:a6:a6:74:46:45:b6:d0:88:
15:b6:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:42:12 2026 by rpki-client