Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: oxhOCrK7nx0VEvDhN+xKF1rB3zu2v355ul7y1ALwJGY=
Subject key identifier: 74:BA:53:49:54:2A:8D:BF:FC:80:4C:82:A3:AF:DD:C2:C3:44:60:2B
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 01A0D75FC1460A400BDFDB96F07D6D7E60D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 0927
Signing time: Fri 25 Sep 2026 07:02:51 +0000
Manifest this update: Fri 25 Sep 2026 07:02:51 +0000
Manifest next update: Sat 26 Sep 2026 07:02:51 +0000
Files and hashes: 1: 4n02TxuOf2ywJSAjKw6VPCZcn9E.asa (hash: OQDIVrvJye3nEoAmjwb/FmK9E09Wjl5aNHmQrS/hccM=)
2: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: YSl3QjYNaQDOTrU6K0+nNF5FtYtocOsPt+fo0ITCEmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:c1:46:0a:40:0b:df:db:96:f0:7d:6d:7e:60:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Sep 25 07:02:51 2026 GMT
Not After : Sep 26 07:02:51 2026 GMT
Subject: CN=74ba5349542a8dbffc804c82a3afddc2c344602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:3b:f5:e6:06:73:f4:68:ff:89:00:99:9e:
3d:ec:e1:ab:06:19:aa:3e:d1:f3:3a:56:ad:30:09:
82:c5:18:4d:30:4f:2d:9d:17:a3:6c:c0:0a:9e:bd:
82:23:fd:c0:00:3b:5b:03:09:74:27:c8:22:95:09:
1a:76:cb:7d:5c:e2:f7:1b:38:1c:87:df:51:08:ae:
7a:75:fb:45:c2:11:b5:3a:16:78:d8:19:cd:3f:7d:
b1:e2:bb:61:b5:e0:45:85:32:7f:10:9e:92:b5:f0:
7d:20:74:61:8f:35:21:66:18:da:f8:18:8b:63:e0:
34:4d:56:36:66:51:6a:c8:5f:7f:35:ac:3e:74:85:
6c:8b:aa:49:af:2d:e7:ba:43:e9:77:cf:5c:8b:f1:
ad:d1:5d:eb:7f:bf:3c:29:97:46:c8:50:82:89:b8:
21:60:fa:66:2f:04:02:5d:65:4c:6e:d0:8d:76:93:
ae:c1:a3:27:44:03:44:6e:42:c6:e6:0f:4f:07:4e:
9f:73:f7:f8:39:3c:93:8f:8c:80:5e:18:a7:22:40:
2e:7e:a6:f4:3a:f3:ab:6f:b7:4a:fa:35:17:18:d2:
c2:7c:03:ba:15:c6:11:b0:05:98:2d:89:25:ed:e0:
c0:2a:c4:42:96:54:8c:7e:62:f2:ed:d3:e8:40:4b:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:53:49:54:2A:8D:BF:FC:80:4C:82:A3:AF:DD:C2:C3:44:60:2B
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d8:c7:38:81:64:98:e1:32:31:36:67:6a:c3:50:5d:22:1e:
f7:ad:23:cb:12:b7:d0:93:03:a8:7d:5a:f4:23:c5:bd:08:ba:
05:ed:ac:a4:3e:32:83:49:77:d0:05:34:c8:f5:23:d4:20:8b:
27:a9:99:26:92:98:93:5c:23:95:a8:4a:23:81:98:3d:9b:a8:
08:f4:92:f4:01:c6:c2:84:22:6f:10:d5:68:ed:8e:68:07:5a:
81:c1:8e:89:e0:92:ad:18:d0:62:e2:72:01:d0:a5:cf:67:bd:
5b:9d:68:de:76:7f:5b:06:54:2a:ba:61:41:93:ef:7d:d0:b0:
03:2e:8f:58:d5:d3:17:97:83:4c:d4:34:c0:11:f8:3f:38:a2:
48:ad:55:8b:39:8d:2d:27:c2:e2:e4:59:51:05:57:e3:70:88:
15:f1:ad:08:81:d9:7b:9a:97:c8:3e:c1:a1:ea:0a:7c:dd:b5:
ff:a8:36:17:5c:60:27:49:18:fb:b7:a4:2b:06:ef:4d:bd:ba:
45:a5:51:a7:c4:d0:21:ef:0c:c6:95:0d:1e:47:54:56:dd:e9:
cb:0f:34:e8:97:f7:34:d6:08:6d:68:af:45:e4:ab:7c:9a:32:
52:06:81:40:b6:7f:ad:02:c4:d3:ce:04:ed:19:fd:3e:dd:8f:
b9:f0:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:41:31 2026 by rpki-client