Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier: T9D8DWH/mQXavmx1WlJUpDQgqjr326YmNvCJ+cV4cy8=
Subject key identifier: 06:AB:B9:70:3E:A4:50:CE:34:06:6C:BA:CA:C8:FA:33:9C:68:31:11
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 01A0DACCF98596EA94562DEB9F917E296AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number: 19A3
Signing time: Fri 25 Sep 2026 23:01:01 +0000
Manifest this update: Fri 25 Sep 2026 23:01:01 +0000
Manifest next update: Sat 26 Sep 2026 23:01:01 +0000
Files and hashes: 1: NF_ZJXamVG-MCa_q4NzRMxK6B08.roa (hash: BEU1FyfqqI6VaL+KOpo/X80Gj2W8UWl6HtfuD6fI7nE=)
2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: xo2DBAcQd4926++CIQgfmgniNmhPR36lJ8gDmEphqlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cc:f9:85:96:ea:94:56:2d:eb:9f:91:7e:29:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Sep 25 23:01:01 2026 GMT
Not After : Sep 26 23:01:01 2026 GMT
Subject: CN=06abb9703ea450ce34066cbacac8fa339c683111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:dc:b5:12:56:36:4f:93:26:86:dd:7f:69:
68:1f:27:25:b7:66:ab:e0:c9:7f:de:a6:50:e5:be:
89:97:9d:2d:9a:0e:80:79:ec:e2:04:54:ba:45:19:
84:80:56:fc:7c:91:d2:cc:f4:44:71:71:9b:38:64:
90:ee:99:14:47:fd:60:dc:5d:25:f4:a7:3e:df:25:
4d:3f:0d:2d:03:9f:28:6a:29:73:4e:3d:11:e1:3a:
b5:ea:d7:fc:28:e6:1e:a0:58:b8:ab:11:27:63:b4:
e9:f5:9e:d5:5a:6d:a4:bd:27:1b:b8:65:2d:c1:9a:
7f:61:5a:d2:db:52:c5:5f:b8:00:a6:90:09:b0:0a:
4e:61:b1:d5:fe:44:5a:01:5a:98:c7:f4:21:b5:c5:
4d:e0:85:6e:e3:02:a0:1a:bb:3e:94:12:96:7b:1b:
01:29:73:af:f4:e8:69:ed:2d:07:f7:b7:41:12:24:
97:d6:61:a2:a1:69:72:cb:9e:69:76:d4:b2:b2:8d:
51:bd:4b:02:ae:81:2b:85:b6:65:c0:08:83:3e:e9:
c4:3f:4c:3d:92:e0:e5:c6:fc:47:9e:88:e1:3f:65:
6a:c3:60:06:30:94:fe:01:60:be:74:90:b0:9a:99:
c6:f5:95:76:94:42:b9:4d:49:60:d8:b2:ca:93:ed:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:B9:70:3E:A4:50:CE:34:06:6C:BA:CA:C8:FA:33:9C:68:31:11
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dd:2e:41:e4:10:bf:8c:50:fc:ea:73:52:7a:7b:0c:d9:30:
d0:8f:fd:82:a2:4c:73:1c:86:88:7b:11:c3:f6:e0:7a:47:38:
68:0f:7d:02:b9:b1:60:29:cb:c6:1c:ee:3d:db:3d:63:8f:43:
47:01:9f:29:a0:65:5b:d6:1c:69:c4:c0:5a:5f:70:bf:24:37:
f3:1a:ff:69:39:3e:c3:05:04:42:2b:de:55:17:3d:75:61:4a:
0d:8a:b7:6d:cd:0f:1a:66:00:d0:64:d1:d5:de:3d:06:ea:fe:
10:b9:e5:d2:3a:2f:22:86:09:2e:25:5d:72:cb:82:bc:e6:2b:
78:13:35:cc:18:59:33:0e:50:06:df:5a:dd:17:09:c9:ac:98:
12:8d:07:21:7a:23:22:8c:b2:30:8e:d5:cb:f7:9c:bf:c8:14:
1e:a9:93:7b:a8:85:fe:09:67:d8:4e:34:94:1f:b4:28:d0:6e:
18:fe:86:b8:04:e4:99:d3:6f:41:77:12:4d:24:f3:32:b7:42:
bf:40:4e:84:d8:01:96:6d:d1:c5:b1:f6:92:33:85:da:96:ee:
00:fe:55:63:23:6d:39:9f:7c:ee:d1:f6:df:5f:bc:80:02:70:
66:b4:2b:c8:e0:8f:b9:54:f7:14:96:58:c5:97:98:6a:7c:39:
6f:20:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:48:22 2026 by rpki-client