Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
File: nncRwMuEMOE0dPm_gbJdfwUuT_A.mft (raw, json)
Hash identifier: EJE2LH9z6a37LfUFCwQKd44OxnA+el0PAyyW1MhcY+w=
Subject key identifier: 4A:34:39:AA:BC:6E:83:AD:3F:54:DE:F6:CF:EB:90:F9:1E:0A:1A:8A
Authority key identifier: 9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
Certificate issuer: /CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Certificate serial: 01A128E837027481D4AF4CD65276075986E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 03:01:09 +0000
Manifest this update: Sun 11 Oct 2026 03:01:09 +0000
Manifest next update: Mon 12 Oct 2026 03:01:09 +0000
Files and hashes: 1: 4yjYUDwNnuaLExwhvzKp-LsldJ0.roa (hash: nfHS2sRDSST7eY2ZA5COWYUi8JnRIRdyV6L1iv0tRQY=)
2: KqOfsddEjfHpBRwWxaN6oCqImDY.roa (hash: Iz5QREM96XCWDsjHdKJbuKUA89ccqxzoc6vrHN7WI4Q=)
3: nncRwMuEMOE0dPm_gbJdfwUuT_A.crl (hash: +3OVnrFlOvi8Pj38n0DRokV0VleimEq/ZooNEEkwYBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:37:02:74:81:d4:af:4c:d6:52:76:07:59:86:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7711c0cb8430e13474f9bf81b25d7f052e4ff0
Validity
Not Before: Oct 11 03:01:09 2026 GMT
Not After : Oct 12 03:01:09 2026 GMT
Subject: CN=4a3439aabc6e83ad3f54def6cfeb90f91e0a1a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:9d:e4:7b:d7:d6:72:3a:f2:42:a4:9a:ac:
1c:e5:0e:dd:69:35:3e:a4:fc:0f:b9:90:a5:0c:5c:
8c:4c:a5:df:e1:ce:a8:f6:53:52:86:f5:03:b4:21:
8c:27:50:d6:37:14:8f:8e:2d:4b:45:6a:c4:ef:0a:
44:be:9c:cc:b5:13:98:c3:a4:d1:3b:aa:01:36:9c:
64:da:d3:ac:08:07:60:9f:a5:21:ed:cd:7b:f3:8b:
b3:b9:76:8a:03:06:f7:74:9c:93:f4:a3:de:fd:e1:
f9:e5:3c:d8:00:ed:e4:a5:d4:15:8e:cc:e8:45:33:
66:22:1c:0e:d4:70:fa:a2:d6:d6:f0:a0:05:53:a5:
f8:6f:fa:25:34:8a:12:62:ef:b0:12:60:07:c3:fb:
81:0b:37:27:b9:fe:71:48:fc:48:61:e2:26:b1:84:
51:29:ee:83:9c:49:a2:d0:0f:03:9a:60:1c:30:b8:
d8:37:40:96:3f:95:74:33:75:4b:4b:4c:e3:a2:7e:
f1:1e:f7:12:83:71:95:9a:6e:9b:e0:52:d8:68:de:
71:82:ef:f8:e5:c3:ac:2d:90:91:b0:82:d7:4d:7b:
c3:97:78:6e:84:c5:e5:71:d1:6f:cc:fe:9e:13:ad:
6b:bc:b3:bc:ca:8f:69:b3:e1:59:d9:26:a6:a5:5a:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:39:AA:BC:6E:83:AD:3F:54:DE:F6:CF:EB:90:F9:1E:0A:1A:8A
X509v3 Authority Key Identifier:
keyid:9E:77:11:C0:CB:84:30:E1:34:74:F9:BF:81:B2:5D:7F:05:2E:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nncRwMuEMOE0dPm_gbJdfwUuT_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/nncRwMuEMOE0dPm_gbJdfwUuT_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f8:ee:2a:57:35:ca:7c:11:51:52:31:62:31:ff:a2:38:1d:
fb:46:04:72:2e:67:62:4d:00:ba:c9:d4:45:a4:e8:f8:f3:66:
e8:74:68:c1:09:60:55:c9:bc:8e:7b:3a:99:44:a6:c6:3f:03:
b2:19:e4:bc:c4:51:7e:75:56:4a:c0:8f:19:e9:05:0e:04:77:
88:d9:de:78:bd:53:bf:92:2b:6b:57:75:43:da:20:12:67:d4:
bf:a8:40:ce:0e:37:d2:b7:bb:8c:16:f9:26:85:d1:58:be:a0:
ce:5f:86:c1:ee:b1:59:7b:09:94:9c:06:86:4c:b2:0c:cb:7e:
48:f9:62:02:3e:0c:44:84:0d:1f:79:ad:fa:6f:be:df:93:1b:
53:6f:74:31:1c:e7:83:5e:cd:7a:81:be:73:88:88:63:45:c1:
66:9f:41:88:76:8d:e1:52:fb:03:b9:24:b1:ad:5c:20:d9:5b:
ed:90:57:31:b0:5e:25:92:ec:04:08:38:e8:39:f6:68:2c:3d:
6a:30:0b:19:42:87:d4:f6:ed:3f:3e:11:a3:36:5b:88:8b:d6:
d6:e1:d9:19:81:e4:1f:b9:c2:54:04:b0:de:5a:99:95:bb:41:
f8:e6:49:fb:f2:ec:68:6d:21:6f:71:41:a4:5e:86:e2:07:55:
98:45:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:40:57 2026 by rpki-client