Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: C7KV3IAdfeQAHZu8AMVkqz3GunfRsR0WQ7vjya8u+3c=
Subject key identifier: A5:71:4C:72:36:BB:C8:60:ED:D9:8B:5C:60:54:01:03:41:E2:72:FF
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A0D6B95F8ED3D15997E4E98A5BFD188626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: 01BA
Signing time: Fri 25 Sep 2026 04:01:07 +0000
Manifest this update: Fri 25 Sep 2026 04:01:07 +0000
Manifest next update: Sat 26 Sep 2026 04:01:07 +0000
Files and hashes: 1: IoID25YMHzy5rGEknb3wQAVRHUs.roa (hash: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=)
2: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
3: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: DhOrJX88ifqlbodavH1TaxlJb8x8Trocvs8F3L03q7E=)
4: QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa (hash: M69ZqcFPRJj+KBGgBu0O+FBYsQKc3GPhvLHPwKiBGjM=)
5: cLV16e4v7vV_S6eQOLOte7hxj18.roa (hash: +SlaR3Q3bjh0sZBb6PtJ7UqrBqBFULhBuOS6bf52Z+0=)
6: nRBo528tP43KmAQk4RnVYbDzWU0.roa (hash: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=)
7: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:5f:8e:d3:d1:59:97:e4:e9:8a:5b:fd:18:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Sep 25 04:01:07 2026 GMT
Not After : Sep 26 04:01:07 2026 GMT
Subject: CN=a5714c7236bbc860edd98b5c6054010341e272ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:69:f5:8b:ac:da:ac:01:1f:66:7d:02:f3:
2f:03:81:fa:f0:29:a4:fd:7b:6f:d3:e5:a6:a2:48:
43:73:3a:06:98:70:cd:26:a2:32:d0:a4:79:25:f1:
62:9a:60:49:eb:da:62:64:2f:e9:9f:09:aa:d8:b5:
0b:2d:08:da:a1:0c:e4:ec:a2:5d:40:76:e3:e4:99:
74:b4:e3:f4:54:32:d4:76:6f:26:c6:94:75:44:7b:
1d:c9:d4:c8:4d:86:04:9b:38:cd:7c:7b:f8:1a:21:
61:ef:6f:d7:b1:f7:cd:40:50:51:2d:46:72:ee:2d:
3b:91:86:c0:52:35:5c:a4:49:1f:44:02:49:29:50:
9f:bc:0f:5c:d5:6a:a1:61:21:b2:6d:94:cf:13:48:
a5:f7:4a:57:32:25:53:10:34:33:e6:15:87:51:00:
86:5f:2f:f8:1c:1f:ad:51:c3:41:70:7e:12:5b:bd:
09:cf:76:00:b1:a2:ef:d6:7d:86:4d:e5:09:aa:c8:
9b:60:ba:9a:e2:f1:ba:85:a4:05:23:50:76:46:04:
fd:b7:5d:71:8f:ce:48:0f:10:fa:f8:0b:f6:34:2a:
b0:be:e9:44:bb:0f:1d:0e:24:fe:81:4f:c8:f0:7b:
08:4e:41:69:21:da:4e:12:cb:56:6a:e8:63:54:4a:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:4C:72:36:BB:C8:60:ED:D9:8B:5C:60:54:01:03:41:E2:72:FF
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5f:a2:aa:54:d3:1c:a1:55:86:0c:50:04:00:2e:65:c6:35:
9c:84:c8:18:59:ee:44:b4:82:de:1e:6e:49:25:bf:66:35:06:
af:90:4a:39:1a:7a:74:b7:a6:ea:9d:05:38:37:dd:b6:e0:df:
b2:9c:6d:6f:37:0e:db:c6:75:84:5c:75:cf:42:95:6b:ba:fc:
07:dc:66:3f:f3:dd:cb:74:f8:05:9b:a0:a7:96:7f:3c:34:aa:
6d:ee:b5:4f:84:13:95:ab:5c:e7:a6:72:4d:8a:03:93:a9:c5:
39:65:19:7c:f6:c3:d9:68:9b:3f:19:51:5a:3d:5f:bb:74:68:
96:bd:f7:a4:19:4b:00:e8:ea:0f:a7:14:3d:ba:58:67:26:fc:
c5:da:87:ef:5b:03:da:42:12:26:57:a6:c7:6e:3f:cc:a4:6a:
f4:e1:c0:16:24:7c:63:e5:21:78:30:52:4b:0d:d3:2f:ab:73:
17:71:5d:45:25:9c:1d:0d:b4:99:5a:da:91:f0:67:a7:59:be:
bc:f8:e2:46:e8:d8:77:9e:77:9a:2a:93:c9:19:65:68:88:e3:
28:d8:7c:f9:31:ae:b5:7c:2c:69:51:c9:b9:9a:40:92:db:4e:
df:5f:21:07:28:45:51:3b:f0:f5:84:4e:c7:bf:ac:8e:9c:34:
a1:8c:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:22:19 2026 by rpki-client