Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: QBGhHPqsYbwmW2aYmLwt3NBozD8Qra4tPobl1BjvIGs=
Subject key identifier: B1:82:7B:76:DD:D7:6F:85:5F:B7:C0:2F:C3:02:E9:B5:A5:6A:AC:CA
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A1DDCC0F54E339C96CEC6BB992A47DD7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: 0246
Signing time: Sun 15 Nov 2026 06:01:40 +0000
Manifest this update: Sun 15 Nov 2026 06:01:40 +0000
Manifest next update: Mon 16 Nov 2026 06:01:40 +0000
Files and hashes: 1: 1XqCLc19Vg1-JoDQSxZyv6rSj5A.roa (hash: oXTclyJMCWamcGJ8+TRlIBRxn11pFcqD9DEREiS/bzw=)
2: 5Usz36CmKbFtCm4B1BqoYq4inVk.roa (hash: bK/JE++LlwMTK/apyLk8d0x70UMhmYLDd4W7NbjjySw=)
3: AmSIHyBV1dG41RsCsIKqIJFFqEU.roa (hash: 7wzXnnnuA5PhbYX0dhAhOPSQoJoekD6xhZVC1AoXN9k=)
4: IoID25YMHzy5rGEknb3wQAVRHUs.roa (hash: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=)
5: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: ktu5qKi9hi9JFqQ6dRzAf8dUv+2PD9oopg4M7xrP61M=)
6: bujSkN739cVx0DJAFCsFlXBvcGs.roa (hash: EnaDOXi2+w6yujurrNpAuRbunV4mXkAKnBOegobNcoE=)
7: nRBo528tP43KmAQk4RnVYbDzWU0.roa (hash: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=)
8: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:0f:54:e3:39:c9:6c:ec:6b:b9:92:a4:7d:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Nov 15 06:01:40 2026 GMT
Not After : Nov 16 06:01:40 2026 GMT
Subject: CN=b1827b76ddd76f855fb7c02fc302e9b5a56aacca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:da:69:f2:8c:d7:93:0f:ca:18:1d:03:99:
39:63:06:1e:ca:fe:ca:cd:2f:0f:5f:c0:f0:1d:1d:
e9:e5:70:07:5b:43:ce:37:9e:07:6e:d7:f4:33:9a:
7b:c0:bd:a1:7f:79:b7:8a:b9:52:ca:12:aa:cb:e2:
41:71:be:22:59:78:3b:69:61:df:7c:10:ff:ab:fb:
dc:20:fc:30:ad:15:4f:78:c5:49:31:ef:fb:38:ba:
46:88:b2:6a:88:ea:35:21:c9:b8:f5:0c:b7:bf:87:
99:ee:da:11:94:d7:a5:db:8f:dc:66:e5:12:13:3e:
e6:6e:5b:50:84:7b:e1:b6:a8:50:c4:c1:98:3c:cd:
40:f5:df:fb:d8:73:72:24:61:d7:06:88:1b:28:aa:
1d:f1:11:41:d2:c7:3c:8e:cc:89:07:2c:a6:11:91:
c7:03:a5:12:d5:1d:0b:47:d3:1c:cf:e2:9b:ae:3f:
2b:0e:14:e4:65:f3:a1:1b:da:59:96:69:c8:4d:ce:
fe:02:fd:ea:6d:18:52:c0:4d:eb:cf:f8:8d:46:ca:
66:7f:f2:ac:3a:ce:90:ec:52:77:28:38:f6:2f:6e:
10:30:09:b2:ee:1b:32:66:8f:ec:c4:8a:9b:e5:4b:
bf:95:ed:0d:b3:81:7d:87:94:4f:95:2d:c6:8a:73:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:7B:76:DD:D7:6F:85:5F:B7:C0:2F:C3:02:E9:B5:A5:6A:AC:CA
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2a:81:1a:f4:93:d0:49:87:2a:21:cf:7b:35:3a:47:35:2d:
58:d0:2c:49:90:0d:16:69:81:fe:f6:a3:e3:85:89:de:b3:f6:
8b:3c:0a:97:69:cf:3f:46:32:7e:b1:f1:84:68:dd:57:49:09:
fc:7f:94:56:f8:74:95:4b:ce:77:89:60:78:ce:d1:5a:ed:04:
70:fb:b0:84:59:e9:61:22:41:59:94:f0:4a:98:df:af:aa:2a:
79:0f:eb:d5:85:88:54:08:4d:d7:2c:eb:22:55:eb:9e:22:a2:
93:4a:3b:f2:da:df:28:c9:47:f8:a2:90:73:08:11:49:70:d0:
49:50:0c:a1:e8:4b:7a:5b:a8:ca:49:a0:75:ec:44:44:c2:6b:
c9:7d:0e:6f:4e:bc:5d:95:c4:cb:71:24:64:1b:13:0a:53:97:
4f:4f:eb:ce:ba:fb:f0:46:dc:21:ae:66:8c:c9:df:12:1f:ff:
4b:8a:a5:2b:93:20:25:95:08:db:a1:d0:cd:93:a5:1b:6f:15:
78:db:c6:94:ab:0d:f9:ec:d0:92:22:af:8a:7f:5f:76:ba:35:
21:25:13:79:66:5f:db:61:67:ea:fb:c9:29:57:56:6a:02:8c:
61:79:a2:96:d4:df:95:5d:dc:54:12:9c:95:e2:c4:6d:a2:99:
91:2e:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:05:35 2026 by rpki-client