Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: tGasto9LFrUsGnSRbOX2DT7ILVUJo+BuMjaEPU+mAW0=
Subject key identifier: 0F:AB:89:10:B8:4F:4D:20:F8:91:40:3F:B5:81:AD:A4:B1:66:8F:B1
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 01A0E3D0CE40E6C2FF20F6C4890760B0C35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0BE8
Signing time: Sun 27 Sep 2026 17:01:47 +0000
Manifest this update: Sun 27 Sep 2026 17:01:47 +0000
Manifest next update: Mon 28 Sep 2026 17:01:47 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: SsEg7525yaO0PMgoezeNg0Id31RM+VlMOsGdpH/8upU=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:ce:40:e6:c2:ff:20:f6:c4:89:07:60:b0:c3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Sep 27 17:01:47 2026 GMT
Not After : Sep 28 17:01:47 2026 GMT
Subject: CN=0fab8910b84f4d20f891403fb581ada4b1668fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:a7:23:f3:f4:33:96:dd:9b:1a:f5:6d:e2:
b7:33:11:7e:d3:79:ca:1a:ec:6f:9f:85:c5:85:06:
bc:a3:21:e9:ff:5a:95:30:55:7f:2e:c4:9e:f5:fd:
b1:8e:83:64:bb:70:c8:04:50:6c:c4:61:bf:62:cd:
81:33:76:c0:6b:80:17:da:ce:c6:94:68:2d:8a:3a:
b2:89:b1:82:af:d0:aa:a4:80:79:2d:d3:d4:df:25:
7a:6a:e5:c4:cc:9c:c7:d3:5b:31:4a:76:02:8c:1a:
26:f9:f3:90:53:2d:83:3f:6e:dd:f6:88:19:15:80:
fb:a5:9c:94:4f:21:a8:a1:f2:b1:02:85:13:0e:ba:
b1:57:0c:b1:e3:59:c2:10:60:f0:a2:84:fd:a6:4d:
ed:4a:fa:d7:ea:6a:92:25:1d:9c:f0:3a:ee:af:f6:
a5:bf:10:40:a4:26:9e:2b:4d:08:d4:fe:44:dc:e6:
c9:5c:88:74:e8:bb:b1:9b:35:47:1f:89:8e:08:ec:
dd:c5:c7:57:f2:63:84:46:5b:5a:d4:bd:29:16:05:
eb:0e:0f:43:17:3c:5d:60:70:ad:8c:92:de:22:c5:
61:69:2f:2b:b7:d3:40:46:11:51:07:54:f4:61:0e:
9a:98:4e:b1:e4:3d:70:d8:c4:78:d7:b8:4e:72:6d:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:89:10:B8:4F:4D:20:F8:91:40:3F:B5:81:AD:A4:B1:66:8F:B1
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:8b:d9:54:70:6a:89:c6:04:76:6a:0e:d6:fc:23:29:43:
2d:8a:31:8d:f7:72:e3:e8:6d:88:e3:b0:b6:be:d3:4a:5b:30:
b4:36:fd:0f:8a:6d:c3:44:5e:9d:a4:ea:4e:fc:eb:42:35:97:
65:7f:9d:6a:05:cb:1a:f8:8f:dd:6e:37:0f:c3:6d:6a:71:df:
6e:13:c1:0a:37:e2:92:df:dd:bc:d5:50:d8:eb:e3:0e:c8:fd:
c9:fe:56:eb:63:68:f5:db:f1:9d:3c:ee:83:58:39:cf:f8:66:
83:c2:a2:69:8a:39:bf:1c:d5:94:b7:4f:9c:89:9d:16:0a:12:
22:55:29:eb:bf:30:3c:87:b3:37:31:ba:60:bf:83:70:a0:c2:
a6:c3:93:69:00:1f:b1:c2:c0:e0:a2:00:6f:cd:23:c8:db:c7:
42:b5:07:95:c9:d2:4a:64:2c:df:72:07:84:be:8c:1f:41:a0:
b9:72:04:c6:3b:92:4a:40:a6:3d:0f:bb:a9:14:a3:bf:9b:fb:
57:2c:80:59:76:56:93:d7:d2:69:ca:77:a6:30:84:b3:16:dd:
34:2b:1c:80:3a:1b:60:2c:12:17:00:81:b1:48:f4:71:93:a1:
a4:9e:41:4f:d9:cd:a3:2e:3f:33:e1:df:0f:f5:a5:3d:9b:41:
0a:68:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:14:36 2026 by rpki-client