Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
File: nJDYRR9QxPd5xDksMdCMGQPRcbM.mft (raw, json)
Hash identifier: 8dmLKtZnCumVv1AyCIQw90LNz9jb3MoPEkCu9yps6xU=
Subject key identifier: 82:D6:F3:0E:6B:0F:F8:12:A7:E1:E9:9F:79:5D:F5:81:BF:55:CC:E2
Authority key identifier: 9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
Certificate issuer: /CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Certificate serial: 01A1DE39672F5E8F68CDC1D89E86CD81BCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
Manifest number: 01ED
Signing time: Sun 15 Nov 2026 08:01:06 +0000
Manifest this update: Sun 15 Nov 2026 08:01:06 +0000
Manifest next update: Mon 16 Nov 2026 08:01:06 +0000
Files and hashes: 1: 0B6TTL2Ovm5IyyizUs5dyCiNfGY.roa (hash: iM7sj42gsr07BNC7So8eVXquELxcg4zLh2sPTtFgoK8=)
2: esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa (hash: 1eCK8LrpSrRj8EFJVrIKYjfWX5NzAdlbGgvE1Hoh2DA=)
3: nJDYRR9QxPd5xDksMdCMGQPRcbM.crl (hash: 42HVEzCnBBmbV1Qq3YBwMxaihsnCqa3KY6qZ+NHaua8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:67:2f:5e:8f:68:cd:c1:d8:9e:86:cd:81:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Validity
Not Before: Nov 15 08:01:06 2026 GMT
Not After : Nov 16 08:01:06 2026 GMT
Subject: CN=82d6f30e6b0ff812a7e1e99f795df581bf55cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:31:57:a2:fd:16:bf:4e:dd:bc:79:ec:f7:
2d:6a:08:62:80:c2:d9:b1:e1:e9:91:49:dc:59:ec:
d4:9d:55:18:a6:a2:40:12:a3:e0:62:ee:12:ab:0f:
1e:67:b4:d1:67:bb:01:b3:df:2d:5d:f3:c5:f2:70:
b3:1a:8b:e4:c3:c3:32:f9:e4:90:87:90:b3:54:82:
3e:45:0c:63:2f:35:85:88:ec:3e:f0:2c:1b:40:d7:
fe:c0:3b:19:4c:03:b8:59:4b:59:9e:cf:71:88:cd:
b9:54:3a:94:59:5e:57:d8:23:b5:ad:45:d0:34:07:
06:d8:28:5c:1b:b4:2f:50:4a:0f:ea:0b:51:e4:86:
73:3f:16:00:3c:53:b5:9e:fb:c8:69:bd:cc:71:88:
b6:72:99:20:38:02:a0:cc:8e:ea:d1:3d:64:54:e9:
f8:53:83:51:3f:f5:57:41:20:51:ef:86:f0:05:91:
b3:7b:ef:94:b7:a7:a3:7f:cc:bb:0c:f4:c9:94:db:
4a:1d:8a:e0:9c:c4:79:9e:3c:35:fe:6c:ef:37:6f:
32:42:2b:c2:be:d5:af:bd:ee:22:ba:5d:74:26:51:
7e:ea:c3:f7:93:7c:9e:59:d2:1d:c7:5e:e8:78:92:
d1:e8:73:d5:30:af:5f:e3:18:4a:3c:b1:bd:2c:1a:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:F3:0E:6B:0F:F8:12:A7:E1:E9:9F:79:5D:F5:81:BF:55:CC:E2
X509v3 Authority Key Identifier:
keyid:9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:56:06:72:e9:df:ad:3d:1f:22:fb:1f:96:91:2c:14:e7:7e:
93:ee:f2:0c:47:51:81:e1:9c:37:69:ac:1d:06:83:6a:66:c0:
f9:b5:d0:1d:b5:82:48:5b:f2:bc:31:6e:62:a0:40:21:6c:9b:
86:4e:32:20:56:1b:b3:4b:2f:ad:28:42:10:e5:76:6a:7a:24:
fc:6f:07:ad:15:c4:70:1b:7d:59:42:ee:3f:f1:20:29:69:c2:
e2:01:e3:2d:1f:81:e6:ef:3d:89:8c:63:d2:99:df:4e:76:cd:
d5:04:af:b7:84:ab:cc:9c:9e:0d:0b:9a:63:eb:7e:45:a5:78:
7d:0c:39:f7:58:fd:58:87:c9:cd:99:3b:4c:e5:c9:52:3f:0b:
cb:1a:9c:aa:8b:88:fd:10:cb:20:9b:ab:eb:69:ca:56:bc:a0:
66:cd:42:6b:ac:27:25:44:1d:51:04:d5:24:00:4f:f3:77:28:
f0:08:d7:f1:7d:00:de:be:93:a5:a1:2c:b2:16:dc:7f:30:65:
25:dc:71:cc:da:13:74:da:c0:ee:d1:7f:d3:68:d2:b9:9e:c5:
e6:59:ea:91:81:3f:0c:e5:f5:54:f3:d6:01:5b:f3:8f:e0:5d:
25:3b:49:89:35:0d:fc:bc:ea:f0:42:55:17:20:00:16:36:23:
18:3f:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:41 2026 by rpki-client