Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: dFJ8DaNfRSAyb248GgBSxO+WumZv9t9DPocOI3ySWSU=
Subject key identifier: 27:17:1C:BB:99:0B:DA:EE:A1:0A:15:E7:BF:1E:9E:31:2B:07:C8:B2
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 01A138C929AF191E2FA9281DA1E5188CB4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 1235
Signing time: Wed 14 Oct 2026 05:01:09 +0000
Manifest this update: Wed 14 Oct 2026 05:01:09 +0000
Manifest next update: Thu 15 Oct 2026 05:01:09 +0000
Files and hashes: 1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: slcoiOsNn/sR22F9YRBAR8Etbg4i8sCX+cOSVcVD1b8=)
2: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (hash: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:29:af:19:1e:2f:a9:28:1d:a1:e5:18:8c:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Oct 14 05:01:09 2026 GMT
Not After : Oct 15 05:01:09 2026 GMT
Subject: CN=27171cbb990bdaeea10a15e7bf1e9e312b07c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:fa:69:be:bd:29:a6:16:c8:3d:66:ff:85:
08:7d:48:f0:f7:a6:c2:12:4e:e0:d0:8d:89:70:59:
ab:b0:b3:01:c8:fe:c7:8c:bc:db:84:cb:3a:ae:dd:
3d:20:14:44:7e:ff:a8:db:7b:ad:b5:aa:73:51:23:
8c:f3:f2:2f:0c:77:47:33:d3:42:ae:a2:d1:c6:60:
f0:cb:b9:c7:14:1a:36:3a:ad:31:b9:5e:3c:e1:72:
01:1a:7c:7a:e7:51:c4:54:ec:dd:1c:06:47:2b:60:
ca:9c:df:5d:3f:17:2e:12:22:4c:72:b9:ec:b5:f0:
53:41:7e:05:d5:b3:86:94:70:c3:c4:7c:f7:b4:40:
19:8a:8b:6c:19:e9:e7:17:8f:93:01:32:89:c4:57:
0e:0f:4a:11:ab:4a:b5:52:84:f8:d1:7b:84:cd:02:
1d:18:9c:2b:a7:21:54:80:34:4e:df:84:f4:92:c5:
93:a6:bd:a3:ea:5b:09:4f:50:71:18:07:4f:65:1c:
30:54:c2:4e:f7:19:76:1f:e0:e8:8f:0e:33:97:a0:
b1:5c:06:25:88:99:61:74:91:1f:e6:52:b1:dd:31:
12:da:22:8f:a1:7d:3f:fc:24:32:db:3d:99:7f:27:
cf:d7:eb:de:19:45:6d:c7:85:c4:db:27:91:5d:14:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:1C:BB:99:0B:DA:EE:A1:0A:15:E7:BF:1E:9E:31:2B:07:C8:B2
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7a:b0:0f:d0:9e:e9:96:12:30:c4:50:ff:ac:dc:70:b9:df:
8a:95:42:d4:86:3e:57:5c:f8:dd:37:00:6f:f0:4c:dd:42:0d:
50:1a:eb:89:b7:3f:b1:54:59:c6:33:e0:bc:ca:6a:90:8f:20:
0e:13:2a:45:5d:fa:ba:0d:c3:04:f4:8a:10:7e:cc:05:a1:47:
0e:fc:c3:39:7b:f9:d5:3b:dd:a3:d5:cb:36:35:19:76:bf:15:
98:60:5a:78:69:40:f9:af:da:40:cb:68:57:9d:21:27:eb:22:
37:0b:6b:27:46:dd:24:25:b8:e3:58:6a:64:e3:25:5d:63:98:
47:ad:8d:04:18:c5:ad:c8:b9:63:79:23:c7:d7:80:9a:fd:a3:
11:fe:56:7f:b5:32:47:07:63:af:ba:e7:fc:c8:77:d4:68:f7:
d8:6c:f1:bf:78:17:ef:51:68:60:eb:45:3b:11:99:41:1c:98:
e1:04:77:33:78:ef:17:f1:12:fc:62:76:a4:21:df:58:87:f9:
1b:77:d3:53:de:18:e1:2b:53:cb:31:cd:ba:56:78:7e:dc:db:
c6:56:f3:55:f6:2b:18:66:80:bb:7e:fd:bf:1e:96:97:4e:a5:
82:61:fd:16:64:45:c0:aa:f2:63:02:3f:16:9f:8b:6c:61:d7:
b8:36:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:49:48 2026 by rpki-client