Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: mhlfyI5x4ClwPlfKMNVP01nr+uK42VgiXVJGWHJ3tgs=
Subject key identifier: 85:5A:FE:C0:6A:D5:F2:0F:3E:CD:15:C6:56:CD:F2:37:14:F6:86:38
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01A1DACAB8FACBEA0165CD35311186DE69C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 13BA
Signing time: Sat 14 Nov 2026 16:01:20 +0000
Manifest this update: Sat 14 Nov 2026 16:01:20 +0000
Manifest next update: Sun 15 Nov 2026 16:01:20 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: nBZIVNBIoTwMdwa6BPCjQ/InW1DLayjC0uChex0NKiI=)
3: VUpT56KVsmU47HgnJTmy6lm0l4I.roa (hash: UuMxeUlJVpgtH5rpmgJ72Wviicqz3824+c0tpGqdkbE=)
4: zH4N5JwFIli0uJJOjeEySRgy5Og.roa (hash: pvIgyK+aw40M5nn8XxcCEXBM7fvXIvRFkr8DOdiX1og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:b8:fa:cb:ea:01:65:cd:35:31:11:86:de:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Nov 14 16:01:20 2026 GMT
Not After : Nov 15 16:01:20 2026 GMT
Subject: CN=855afec06ad5f20f3ecd15c656cdf23714f68638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:be:ca:fc:cc:56:e4:08:65:d2:3e:8a:95:
18:3a:62:f5:4e:49:39:db:98:8d:0a:5e:91:4f:55:
a8:7c:02:47:a8:f9:18:58:d2:b8:c8:c0:91:c1:de:
5a:4d:e1:ac:7d:71:ca:b0:ee:c4:78:d1:d9:89:92:
9c:7d:64:41:8b:19:6c:8d:99:4b:cb:b2:65:07:c1:
70:6c:71:bd:23:9f:20:99:42:95:6d:9b:11:67:29:
16:51:9d:8d:e0:e0:c3:76:58:60:92:4c:9f:c2:40:
ae:c4:d4:e4:75:9b:42:20:15:f0:ab:f7:ad:09:96:
e7:33:2d:72:f0:05:01:03:31:71:17:f7:99:b2:a6:
ef:c2:cc:52:67:af:db:4c:8d:8d:37:f7:a1:73:83:
de:1e:31:a6:37:c3:2b:65:18:fa:cf:fb:ce:e4:98:
db:2c:6b:34:d7:00:38:38:a7:51:8f:d8:50:2b:07:
05:4d:6d:3c:b7:44:41:61:52:e3:b2:e5:d4:c9:a2:
cd:b3:81:e8:58:a8:7e:6c:3d:d4:58:5e:0d:b9:4a:
e7:91:b3:94:a2:9f:06:1a:49:87:6c:f3:1e:2a:24:
65:79:c0:89:20:cc:be:c6:fc:1a:c2:cf:93:f3:2d:
ad:e9:2e:42:df:83:b8:64:3d:c4:4e:23:17:11:92:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:FE:C0:6A:D5:F2:0F:3E:CD:15:C6:56:CD:F2:37:14:F6:86:38
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:f7:cd:6b:9b:7b:6a:ac:b8:e8:2e:53:96:55:20:ca:8c:
cf:b4:35:a2:8a:af:67:74:56:2e:79:1f:35:e0:5d:3a:77:63:
e6:44:54:7c:8e:f2:f8:48:e6:b6:98:02:df:ac:b6:67:b7:7d:
91:a7:e5:cb:cf:52:13:a6:f9:4e:cc:62:99:57:fd:43:a5:0f:
7b:37:30:f1:7a:09:7c:86:90:28:a0:0a:4f:05:46:48:37:76:
8c:6b:08:36:39:14:12:7d:94:c0:8b:1c:42:83:f1:06:fe:9d:
dc:40:62:43:cf:ee:ea:e4:2b:81:e4:96:4b:98:e3:19:3c:df:
65:94:fc:33:78:5d:a1:b2:e5:54:8a:c1:21:ad:ef:35:60:fd:
e3:33:77:42:fd:1f:66:75:89:6c:8c:ea:e9:10:c6:7f:78:de:
03:95:d0:08:e2:79:99:f3:34:3b:cb:d2:62:ea:69:2d:17:3d:
77:3e:8c:14:b9:a8:ad:83:9e:9c:02:6e:a6:4c:e7:43:f7:5b:
b2:33:0c:99:ca:2f:21:c0:b1:d9:11:62:4d:29:44:7d:d1:a0:
cc:d8:5b:0b:fb:8d:41:55:33:f2:77:7d:0d:42:0f:68:a8:c3:
e7:e1:9f:a9:00:29:7d:1b:05:58:25:26:b0:71:e4:b3:46:9e:
a4:68:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:53:38 2026 by rpki-client