Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
File: nJDYRR9QxPd5xDksMdCMGQPRcbM.mft (raw, json)
Hash identifier: S3bBoZ+Q1sNwYgdWLEyiUuJxinLCikaz1nhMtX1ETO4=
Subject key identifier: F3:75:F2:3C:AB:96:CE:D9:7F:E6:5E:D6:E8:C4:3E:D4:E8:E0:22:F7
Authority key identifier: 9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
Certificate issuer: /CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Certificate serial: 01A0D3B83ECF1267FAD57BBC312A84C4F70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
Manifest number: 0163
Signing time: Thu 24 Sep 2026 14:01:02 +0000
Manifest this update: Thu 24 Sep 2026 14:01:02 +0000
Manifest next update: Fri 25 Sep 2026 14:01:02 +0000
Files and hashes: 1: 0B6TTL2Ovm5IyyizUs5dyCiNfGY.roa (hash: iM7sj42gsr07BNC7So8eVXquELxcg4zLh2sPTtFgoK8=)
2: esZ-iHhVtgt-yXZBkyG2v_Khc1w.asa (hash: 1eCK8LrpSrRj8EFJVrIKYjfWX5NzAdlbGgvE1Hoh2DA=)
3: nJDYRR9QxPd5xDksMdCMGQPRcbM.crl (hash: 2X1Zz5RTQoEK9jt36U5xnpzKfjK5TBUWnaCmMoj08F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:3e:cf:12:67:fa:d5:7b:bc:31:2a:84:c4:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c90d8451f50c4f779c4392c31d08c1903d171b3
Validity
Not Before: Sep 24 14:01:02 2026 GMT
Not After : Sep 25 14:01:02 2026 GMT
Subject: CN=f375f23cab96ced97fe65ed6e8c43ed4e8e022f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:e5:61:ca:1d:cd:1b:53:9d:bd:01:b5:d3:
e4:cd:43:7e:19:c2:fc:5a:b8:f4:ff:33:59:2a:20:
71:a6:7b:8c:3d:f4:d6:91:2c:11:a2:1c:5d:10:26:
43:7f:2e:28:e5:dd:95:3a:db:ff:bd:56:4e:e8:6a:
7f:0b:2d:f4:b7:cb:31:2e:15:d9:e8:86:09:77:bc:
d2:ec:f8:5c:d8:3a:3f:1d:41:f1:4f:32:04:d6:8e:
47:5b:55:af:a4:09:00:20:da:43:b5:4c:54:d4:c7:
87:8d:26:d1:05:f2:f4:fc:d5:ae:63:59:5c:65:5e:
5e:d0:9c:2b:64:c4:c9:e7:da:2e:8c:17:45:9c:37:
cc:6e:5d:c7:0a:a8:1a:da:99:1b:10:df:10:ec:ce:
fa:82:29:d0:a9:6e:29:87:85:6e:28:a3:6f:43:5f:
02:cd:67:8f:93:58:cd:06:f6:db:8b:d2:27:97:ce:
2f:c7:c8:8c:d8:ad:e6:2d:2a:9d:00:ef:3e:1d:47:
1f:69:db:e2:91:dc:f2:53:24:37:e7:fb:1e:09:f1:
4b:2f:26:72:85:01:a7:a1:46:20:33:74:58:5c:4e:
df:df:ad:aa:93:d0:fc:90:9c:cf:9f:3f:ac:74:c7:
a9:d3:7d:20:6c:8b:32:6f:8f:db:25:d3:d7:fa:02:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:75:F2:3C:AB:96:CE:D9:7F:E6:5E:D6:E8:C4:3E:D4:E8:E0:22:F7
X509v3 Authority Key Identifier:
keyid:9C:90:D8:45:1F:50:C4:F7:79:C4:39:2C:31:D0:8C:19:03:D1:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJDYRR9QxPd5xDksMdCMGQPRcbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f5745-8a26-4f63-9e70-2b14be06e11a/1/nJDYRR9QxPd5xDksMdCMGQPRcbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3d:84:e3:4e:c5:11:11:71:85:42:66:e1:2b:9d:b2:09:94:
70:eb:ae:29:58:f0:b9:d3:7e:db:e4:6a:b3:88:d1:af:d2:62:
3b:3e:cb:07:b4:6a:04:f2:b7:81:5b:ae:11:b3:27:f5:51:ff:
be:75:43:8d:a4:55:2b:52:76:c8:ac:5c:de:59:72:37:da:29:
23:cc:fa:63:d3:31:e6:9c:d9:b5:67:1a:e7:b8:71:5e:54:77:
a2:b1:2e:cd:cc:00:37:c3:14:52:6f:00:e0:f0:f4:36:0e:b5:
0c:c5:d5:7c:e0:30:82:1b:a3:6d:f4:1f:2c:ef:96:d5:12:68:
b4:d6:7e:f8:3e:da:65:80:ef:90:9d:4b:7b:db:17:90:e8:39:
e4:c9:f8:38:3f:46:f2:62:65:4b:82:40:38:da:ad:fa:85:e8:
47:24:1b:41:5c:ca:c4:96:de:32:1c:3e:02:0d:fb:7c:66:2c:
f7:e1:5d:23:ec:6b:57:57:5e:28:9e:7b:9c:f2:65:09:f1:0a:
9e:75:e0:8e:99:b9:67:6b:e9:96:fb:c1:b6:5b:4d:54:51:f5:
cc:bb:aa:52:aa:c3:da:30:db:93:33:c5:6b:bb:14:38:72:51:
b7:b4:3a:e1:e0:f3:f1:e5:1e:a9:93:76:03:8c:94:a1:75:58:
56:eb:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:44 2026 by rpki-client