Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier: yS4FGgCorF8x99WDxkF8NvMJcjz7W1m4Mmt5Py2DzT4=
Subject key identifier: B5:B3:80:F0:DA:80:84:9D:D2:2D:53:E7:36:B9:84:D5:5B:15:A7:36
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01A0FDC6C81D054763DC56ADC8091737F40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number: 144A
Signing time: Fri 02 Oct 2026 18:00:57 +0000
Manifest this update: Fri 02 Oct 2026 18:00:57 +0000
Manifest next update: Sat 03 Oct 2026 18:00:57 +0000
Files and hashes: 1: 7JcbUB6Sz9UngZBxWj3W_gq-LYs.roa (hash: tsA7T7uUKe961SLeTegki9U2n20iYLa4g8HfcIi+a4Q=)
2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: GaMcah7DPcQt/SklSFSshgicFQH2T6PIOmilodRzY3s=)
3: O4vFFK6LturH-tOvCL7dvJAVqgc.roa (hash: MtKHjo0OncbkpjKylbUKlu6dZVBHbPPJcw5CArd2U3U=)
4: nIqaEfepRP75O-FDqMsxRqrNlcw.roa (hash: c5Y7MFJKKPQL2NHxR/9fHChMoo5Om7veAWCfhGUpBLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:c6:c8:1d:05:47:63:dc:56:ad:c8:09:17:37:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Oct 2 18:00:57 2026 GMT
Not After : Oct 3 18:00:57 2026 GMT
Subject: CN=b5b380f0da80849dd22d53e736b984d55b15a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:1b:94:18:ee:bf:d0:63:06:9b:09:3d:d7:
89:08:8b:25:41:9e:d9:74:f6:88:61:65:f7:68:a3:
19:d7:ca:d8:6d:a8:cf:4c:bd:3b:c1:43:94:3a:d7:
70:11:1d:b8:d1:b4:af:f3:23:b6:fc:db:97:b9:4e:
c3:1c:5a:56:f2:3d:ff:20:bd:35:ac:b2:16:c8:96:
3c:05:0e:31:5c:dd:d6:c5:91:5b:c5:40:75:f4:b5:
64:ae:1f:8a:c3:2c:dc:0e:91:52:9c:3f:c6:9a:c1:
cc:15:a7:9b:5c:f4:aa:49:f8:1b:f2:31:f9:03:7f:
f3:98:e0:98:97:8e:37:b9:50:a1:30:4a:be:e8:cc:
5b:89:ef:72:3f:20:41:59:f5:35:7f:a2:fc:79:73:
ab:b7:1b:e3:8a:17:dd:2a:d4:6a:2d:f7:6e:4b:37:
23:36:13:af:21:3c:8b:cd:a1:c4:1d:3c:b2:fe:31:
d9:5c:5a:04:f7:dd:51:c4:e5:c7:d5:9a:b7:b0:95:
08:3b:eb:ff:40:43:88:d2:fc:c4:89:85:76:b2:3c:
a3:3c:66:85:86:8c:fa:80:44:25:27:eb:ff:d0:a2:
af:fe:a5:2b:15:d7:2f:9f:ee:f7:57:87:71:6d:45:
cc:17:5c:96:c2:e0:56:cc:6a:5f:8f:4f:2c:ac:65:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:80:F0:DA:80:84:9D:D2:2D:53:E7:36:B9:84:D5:5B:15:A7:36
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:94:04:e8:54:cf:4c:4a:4f:35:a4:bb:e4:95:76:c3:65:ab:
20:3e:19:30:6e:b6:cc:97:39:8b:9f:ed:88:e2:98:38:6b:06:
69:9c:73:40:f6:7e:59:e2:5e:cf:3a:c0:8d:5f:37:b0:33:81:
f6:8f:3c:2a:3c:08:e9:6c:b6:d3:3c:23:6e:ed:56:d3:e1:2a:
28:c0:db:aa:76:08:48:d5:11:90:e1:bf:16:dd:55:b3:5f:25:
e8:39:b5:aa:95:f1:23:7c:80:e2:4b:d4:99:24:6c:e3:05:62:
14:7b:51:d8:b3:05:b7:6f:34:79:d0:dd:8f:18:4d:54:74:fe:
b3:31:14:7c:be:7e:d9:c4:d2:fd:1c:23:73:fe:44:c4:4f:72:
e5:c9:45:08:5a:f1:7c:3d:00:f8:65:70:bc:98:59:47:07:8c:
da:2d:94:d8:86:70:3c:e4:00:d9:02:0e:e8:1e:34:2f:7a:6e:
0e:00:1c:e0:8a:b0:b8:ab:f2:49:5e:dd:6b:68:cf:a6:2d:b3:
6e:4e:2e:9d:f3:f9:02:56:1d:c8:e5:fc:fb:ad:65:31:74:52:
15:11:a5:8e:d4:ed:65:24:55:66:b7:cc:17:16:dd:40:c8:d6:
81:e3:95:78:1a:53:c4:32:e7:d3:34:8f:53:9e:ce:84:40:f9:
58:bf:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:23:42 2026 by rpki-client