Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: AYhFYBVOqSOFxNJyIOw8vI/DlvQNEmWOjs8YJzEPwwI=
Subject key identifier: F2:B3:70:B6:F0:61:F3:0C:79:3C:18:C3:03:4E:BB:97:28:7E:06:BF
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 01A0D9835280FCD7820545551F6711191DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 17:00:57 +0000
Manifest this update: Fri 25 Sep 2026 17:00:57 +0000
Manifest next update: Sat 26 Sep 2026 17:00:57 +0000
Files and hashes: 1: XxU53iskn-ghQrysuCl7QV5EIVs.roa (hash: oqxXXhRu60oNNFxZKXkIA3Jy2yC1dlqRqHIbYUOutog=)
2: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: FojgBb5RK5Zv6Ocmt2EGIgMKNVGRyKDhJUT2MzpfehU=)
3: nneKuyGudgnv0PN8n2dZjphyBVE.roa (hash: KIC2+ZKN98r/9K20gCZWzWZI9OqGxcTSO8qEwBBgPA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:52:80:fc:d7:82:05:45:55:1f:67:11:19:1d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Sep 25 17:00:57 2026 GMT
Not After : Sep 26 17:00:57 2026 GMT
Subject: CN=f2b370b6f061f30c793c18c3034ebb97287e06bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:1b:5b:c7:82:bc:9e:2f:67:a7:8f:04:bf:
88:36:9a:d7:f3:ba:90:38:a0:16:55:f5:6b:f4:19:
f9:01:29:5e:89:77:11:19:ba:81:6b:44:a9:68:e6:
ed:8a:73:1f:f8:41:6b:42:ba:5c:ec:66:72:95:3c:
e3:f6:c6:e8:f9:ec:3a:fc:15:cb:76:48:48:53:d5:
38:82:ca:11:79:12:18:d1:dd:45:7d:90:8a:5c:bb:
11:c7:f2:de:cb:67:cc:b3:38:6e:bc:a1:43:c1:73:
f6:a5:0b:c6:d0:5c:93:b4:ff:6b:04:4c:55:b9:b5:
d5:10:32:a9:df:9f:d8:da:97:dc:ee:b3:11:9a:39:
36:b3:29:1a:11:6c:27:b1:f1:4d:8f:62:27:cf:54:
d5:d1:b8:6c:53:10:a3:b4:e0:d4:93:22:50:b0:05:
fa:04:68:3e:30:6f:05:bb:78:4f:f4:b0:23:8f:5b:
31:82:4e:1c:ba:2b:ff:b3:af:24:1e:b0:24:43:d8:
39:33:a2:e0:1f:6e:b1:63:e7:3f:52:65:8e:b3:2d:
2d:12:f4:45:60:7d:7a:5c:df:55:15:36:65:7a:d6:
94:d4:c8:cb:09:74:b0:ef:99:cd:bd:a0:09:ac:c6:
f6:c9:ae:d3:7e:44:95:62:c1:ed:5c:cd:3d:b9:2b:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:70:B6:F0:61:F3:0C:79:3C:18:C3:03:4E:BB:97:28:7E:06:BF
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a3:77:92:c6:58:7a:86:3f:ea:96:eb:b7:23:7d:60:52:ab:
93:7a:71:5f:3a:bf:f1:e9:5d:2a:40:b2:df:4f:b3:7a:bd:32:
06:65:09:10:94:bf:a9:d6:3f:32:cf:52:09:c0:38:01:cf:e7:
15:df:d4:0f:d4:26:61:7b:fd:23:21:25:69:0c:a3:a2:50:92:
09:96:1d:96:10:33:09:19:06:74:08:da:28:cf:21:19:ac:a8:
7c:4a:d8:d5:26:67:61:23:bb:01:96:16:64:86:10:a9:c8:5f:
b1:ec:4d:8c:f8:47:83:52:6d:29:57:93:55:50:f8:83:2d:0a:
97:f5:ec:4a:79:68:eb:f2:8a:9f:d0:b2:b8:5d:0b:4d:44:f6:
e1:d3:ee:54:87:2f:af:2c:55:1f:be:43:0f:0c:fc:26:fa:f4:
8c:c1:49:50:aa:37:6b:d5:e4:c3:4c:40:d2:55:86:57:c7:1d:
bd:65:27:9c:6e:a9:5f:bd:72:83:2f:98:92:6e:1a:3e:f1:95:
56:6e:18:64:34:71:2b:ac:e0:94:aa:46:59:37:57:eb:1a:f5:
17:0f:65:7f:50:bc:40:0c:dc:ed:f2:2f:55:18:57:34:5f:60:
b6:90:16:3a:07:e4:ef:f0:ca:fd:1c:aa:21:e3:63:15:d0:09:
49:87:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:41:50 2026 by rpki-client