Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json)
Hash identifier: ucIBa3bQBBHthTPMYKv/OtXmpN2J5MKas359piEh3Ow=
Subject key identifier: BA:7C:C9:55:98:F5:38:71:E9:49:86:F8:6D:CD:19:A7:33:B9:1F:23
Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7
Certificate serial: 01A0DACD8A38CFCD925DD68F5FCBF88E6511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
Manifest number: 103D
Signing time: Fri 25 Sep 2026 23:01:38 +0000
Manifest this update: Fri 25 Sep 2026 23:01:38 +0000
Manifest next update: Sat 26 Sep 2026 23:01:38 +0000
Files and hashes: 1: 5RFARNnQP81iGTseWeUutxn3EXI.roa (hash: Nxourp9u5nBIWhDVwCVmI/AilNX0cSXhcM93qEhrhhU=)
2: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: HfXaKUwkkwBJn8oPQx6TfSE3PDPHHsA8XcuRsSfomoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:8a:38:cf:cd:92:5d:d6:8f:5f:cb:f8:8e:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7
Validity
Not Before: Sep 25 23:01:38 2026 GMT
Not After : Sep 26 23:01:38 2026 GMT
Subject: CN=ba7cc95598f53871e94986f86dcd19a733b91f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:df:4e:3f:31:89:c2:ad:7e:bf:f1:d9:aa:
36:13:ec:b9:69:f9:14:69:26:d3:f1:2d:e8:8c:46:
ec:f4:43:5d:fd:b5:17:89:2d:5d:12:87:3f:8d:e1:
78:30:37:51:4d:d3:a0:b3:4c:1e:46:65:82:68:dd:
18:47:0f:71:99:8b:a7:6d:6d:a1:1c:1a:0a:f2:d0:
23:5f:07:17:d8:8e:37:32:4b:95:10:39:03:ae:cd:
cd:ad:69:5f:50:61:2b:69:d2:0d:a0:17:1b:ed:c7:
80:69:95:d5:60:9b:be:7d:00:ec:38:ea:d2:c8:e7:
f8:62:24:84:9d:b6:20:df:c9:33:7c:8f:c3:9b:05:
00:f6:26:ab:b0:1b:18:23:4c:e2:5c:d2:56:0e:75:
f4:38:30:16:f4:11:8f:d4:4c:f1:cf:3d:27:23:d3:
df:8b:27:14:40:b9:11:27:24:3c:a1:53:2d:78:c7:
4d:1a:47:ec:f0:bc:57:b6:4d:8c:b4:e4:cd:32:30:
28:73:a2:21:d5:77:12:8c:73:2c:0b:7c:c7:7a:7d:
cd:6b:c2:cf:0b:22:e9:74:e2:10:7d:3b:ab:a0:2f:
2f:bf:a4:04:e0:29:bb:39:6b:5d:97:4d:cb:50:1e:
e1:ee:95:43:08:87:b4:6b:f3:dc:b1:73:0d:f9:3e:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:C9:55:98:F5:38:71:E9:49:86:F8:6D:CD:19:A7:33:B9:1F:23
X509v3 Authority Key Identifier:
keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:67:fb:8c:ac:06:f5:4c:85:96:80:d8:5b:90:c2:65:21:88:
17:f9:01:bb:ef:70:ae:cc:89:af:3c:f6:a2:a6:22:6e:3b:37:
07:67:da:d7:46:2a:30:14:9b:f8:16:1a:1e:9b:0f:ab:c0:73:
e4:42:9b:60:14:59:95:c3:96:3d:a0:24:31:3a:4d:c7:5e:99:
15:e6:15:17:48:51:52:13:b4:c0:fc:4c:e7:f1:e4:c4:cd:4c:
f6:76:e1:29:ed:e5:f5:2a:4a:36:af:5e:b7:da:11:db:ca:e7:
fd:ab:6e:8b:0b:54:86:d7:95:d4:27:a3:c9:52:be:c4:b7:99:
c1:31:fd:33:d9:20:93:39:d0:ba:bf:94:8d:7e:d0:b6:ef:73:
c7:75:39:c3:be:f0:f8:b4:82:c5:86:2d:c2:dc:42:c5:ae:75:
98:0e:fe:8f:f8:a6:2a:a1:11:01:8a:ca:66:02:5d:3f:40:8c:
30:ea:0d:57:10:96:24:4f:7b:71:03:c6:bd:6a:e7:77:26:00:
09:f9:9f:9d:b4:e6:70:e9:17:01:91:7e:19:f0:3a:f0:b6:30:
4d:64:15:c8:ef:c0:ce:32:0f:11:bc:cb:b1:b3:7d:c8:ee:cc:
61:49:4e:80:58:a6:48:38:94:72:bf:9f:a4:f0:79:00:68:5d:
8e:f8:2d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:59:50 2026 by rpki-client