Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: q4z3Wd6g75W7VpGxD60WZCUNu8sfR9WHfuUgGCKCu7g=
Subject key identifier: 37:4A:0F:2D:18:E9:62:58:CB:06:03:A7:10:84:FA:8B:B4:A6:CC:B4
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 01A10A70498222405E30EECAF5E1F0BCA98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 05AF
Signing time: Mon 05 Oct 2026 05:01:33 +0000
Manifest this update: Mon 05 Oct 2026 05:01:33 +0000
Manifest next update: Tue 06 Oct 2026 05:01:33 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: 5oJ6pwkFPY1JOPED5O+hawB5onT8QrB7BHVV0be/Fx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:49:82:22:40:5e:30:ee:ca:f5:e1:f0:bc:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Oct 5 05:01:33 2026 GMT
Not After : Oct 6 05:01:33 2026 GMT
Subject: CN=374a0f2d18e96258cb0603a71084fa8bb4a6ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:d7:99:a0:e3:57:54:2b:57:69:5d:37:12:
64:2b:26:b7:1f:07:71:30:4c:b7:df:44:11:00:0f:
c4:ae:49:97:6d:15:79:21:e8:aa:ff:e3:97:db:36:
e9:f1:77:65:88:dc:0b:05:aa:a7:b3:b5:f2:17:08:
92:54:6c:0d:fb:ca:b9:2f:92:e0:44:0d:33:c0:9d:
92:4c:ec:1d:8d:ca:52:c3:a4:6f:44:fd:c8:0e:e8:
e3:e7:ad:31:42:ae:f0:b1:fe:22:c0:ff:59:5d:f9:
ef:44:0b:fa:4c:fc:33:83:4b:e6:cb:e5:16:09:67:
39:84:f3:b1:59:08:1f:f7:81:38:c3:fb:12:64:cf:
57:6d:bd:6f:25:3d:b4:0c:40:3f:6f:80:3d:22:72:
3c:1f:7a:a7:8b:2f:1c:72:7a:f5:e1:e1:19:fd:d0:
8c:37:c7:7a:de:d1:4f:23:bd:fd:6a:fd:ec:52:21:
30:39:e7:c2:8e:3e:1c:ca:35:9d:02:15:42:3a:01:
cb:4c:27:3b:20:b8:b7:4f:43:58:b4:0c:c3:24:ec:
63:a1:d0:aa:47:44:5c:13:f6:50:45:53:14:e2:4c:
ed:4f:f9:52:02:7b:8d:5e:78:b1:fc:1b:1f:1f:a2:
8b:79:09:d6:13:f0:0b:08:72:a6:aa:c3:94:db:14:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:0F:2D:18:E9:62:58:CB:06:03:A7:10:84:FA:8B:B4:A6:CC:B4
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:f6:a1:32:98:e6:51:41:4d:3b:88:37:64:78:76:1b:a2:
73:83:47:e9:df:b8:32:8d:c1:53:3d:29:26:5a:54:e4:64:a1:
7e:da:d2:6c:25:0b:da:03:3f:c4:e7:ab:20:b8:d4:f2:cb:e4:
e3:0b:9f:79:0e:0f:e7:a7:a1:2c:07:eb:8e:4b:66:22:84:3d:
c4:72:45:f9:49:39:eb:5e:b3:74:39:e0:52:77:ef:30:6d:34:
da:54:f9:9d:e5:f8:bf:0f:8d:0e:62:40:42:92:41:ae:77:ec:
89:31:de:a8:d1:c9:3f:40:33:37:6a:11:5d:d0:6a:fc:8b:56:
6e:bb:07:cb:73:16:23:ea:14:64:d9:79:d3:e6:c3:a9:93:d4:
2c:8b:e9:ca:cb:a3:78:91:14:ae:f8:a0:2a:e4:d3:21:92:e2:
64:10:b0:d6:bc:4d:fc:9d:6f:0d:9e:42:c3:01:4e:7a:8c:7c:
70:00:e0:10:89:f9:fa:d1:aa:f0:0e:37:7e:ad:7d:bb:f6:6e:
e5:cc:4e:d0:33:56:e1:98:a8:b6:d0:4d:50:29:2c:0a:63:c1:
f0:4c:6d:f5:7e:7a:e1:1f:fa:b5:a2:18:41:00:61:0a:6a:25:
73:e6:ca:1a:57:08:d9:60:4f:e6:a6:0c:1b:d5:2d:cf:49:de:
cd:e3:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 12:34:38 2026 by rpki-client