Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File: nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier: 6LUK0HgGrllJbflhS9L6K85fbCA2XOV+IzyEOpG1LoU=
Subject key identifier: A2:0A:52:B3:16:A1:60:0D:FA:34:12:28:46:E9:F8:70:B5:45:2C:B9
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial: 01A10CCC20EB3B8C1A92269B1E4ADBBB8EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number: 1202
Signing time: Mon 05 Oct 2026 16:01:06 +0000
Manifest this update: Mon 05 Oct 2026 16:01:06 +0000
Manifest next update: Tue 06 Oct 2026 16:01:06 +0000
Files and hashes: 1: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: MZGoes3YOrkMSwrjr9M5EnMfP6WdWnIjrC1V1kc2MG8=)
2: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (hash: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cc:20:eb:3b:8c:1a:92:26:9b:1e:4a:db:bb:8e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Validity
Not Before: Oct 5 16:01:06 2026 GMT
Not After : Oct 6 16:01:06 2026 GMT
Subject: CN=a20a52b316a1600dfa34122846e9f870b5452cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:75:73:6a:1f:27:e8:10:d9:4d:08:e1:b0:
fb:55:82:86:cb:ad:29:63:6a:00:92:ae:24:51:d9:
0a:81:ff:dd:e7:c9:94:b0:4b:21:4a:fe:0b:10:b8:
3e:24:fb:9a:42:c3:7e:b9:cc:06:0a:62:3e:f1:b9:
2b:a0:43:83:dc:09:8b:00:7b:e4:66:7e:e0:25:e5:
d5:b4:47:0b:22:84:17:3d:dd:e5:a2:7e:e1:b1:c2:
cf:d5:46:80:95:5f:1f:db:be:9b:18:d7:44:82:20:
ca:0d:a7:a3:36:b0:b5:fd:05:ad:32:01:92:83:c0:
d6:85:b4:ec:cf:d8:95:b0:1d:2c:4c:0e:b8:5c:73:
0e:34:fb:f5:d7:7b:fd:f3:01:aa:3c:eb:ca:da:0d:
e8:00:fa:88:13:5b:7d:7b:f0:f6:c6:aa:af:ba:82:
8b:e2:89:8a:05:8b:99:05:10:4f:3d:61:3e:3a:ef:
ed:5d:a9:fa:9e:0d:51:86:4e:e1:0d:71:5b:94:a8:
c5:0d:5e:b9:fe:68:ff:7c:e8:a7:ba:f8:c2:61:c9:
9a:d3:1b:27:4b:15:ab:4d:59:54:65:17:4d:c1:0e:
ff:19:88:90:b3:f5:40:28:f9:2c:24:1f:9e:c0:ae:
18:ba:22:de:f6:2c:93:81:b9:1a:0d:2c:24:57:37:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:52:B3:16:A1:60:0D:FA:34:12:28:46:E9:F8:70:B5:45:2C:B9
X509v3 Authority Key Identifier:
keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bb:2d:4a:be:d1:bd:e7:3c:a8:62:74:ab:27:bc:b7:29:27:
0c:8d:0c:45:ed:e0:fb:0d:40:3c:30:2e:03:6d:28:df:38:af:
09:fb:d9:18:2c:a6:75:44:ad:53:6c:b6:11:bd:9e:18:c8:2c:
94:f8:f3:70:69:6f:36:48:2e:03:19:33:02:1c:38:1f:7d:17:
37:f6:ca:ce:0f:5d:05:c3:56:4a:c8:c7:e7:47:4f:bc:a1:2f:
e5:c4:f4:7d:76:f5:5a:1f:d3:24:db:64:b6:93:00:52:55:c2:
1a:27:04:00:f0:c9:e8:d2:ee:19:9e:7c:c6:07:0b:58:3e:25:
7e:64:08:8d:6b:3c:66:d5:0d:06:54:05:c9:ee:55:a5:65:94:
73:23:38:a1:2f:cb:8c:27:a3:7e:4b:14:36:e3:82:39:6d:5e:
f2:3e:2b:8c:8d:cf:6f:54:da:9a:fc:ae:80:79:33:ee:cd:2f:
bc:d1:17:51:53:09:b4:8e:fe:9f:0c:4a:36:4e:ac:ef:03:06:
d7:17:61:68:30:72:e2:9f:1e:5b:48:41:bc:d5:60:0e:5f:2d:
6a:39:2b:d0:bd:43:b1:6f:96:80:83:2a:33:1b:40:ec:17:d1:
fe:5d:ab:a9:02:2d:af:da:b0:47:6f:cd:12:3a:df:13:f3:4f:
43:4d:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:44:53 2026 by rpki-client