Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier: LBX0oVRH1Ptb1hBMvysxAvy/H/Fciofuw1RLeNP1oB4=
Subject key identifier: 21:02:B2:68:6D:57:EE:9B:1F:CB:F2:DE:C9:64:56:43:26:33:0A:0B
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01A1DE393912434CE7EC13C65383982E4956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number: 15F3
Signing time: Sun 15 Nov 2026 08:00:54 +0000
Manifest this update: Sun 15 Nov 2026 08:00:54 +0000
Manifest next update: Mon 16 Nov 2026 08:00:54 +0000
Files and hashes: 1: 1zyWlwCVdN8MJ6qZjzYjBqnYAnw.roa (hash: toIU7uuVTY27+ajqkukCV0TuJOjX95XqjEeyJC7634I=)
2: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (hash: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM=)
3: GVceVduBArktwOU6Mf55EriDNYs.roa (hash: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0=)
4: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (hash: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w=)
5: TaOkTEEE00uDuFBt0oukno2-oJM.roa (hash: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw=)
6: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (hash: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic=)
7: iK4oje7PnSRo9xAmtm698XYmzcU.roa (hash: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y=)
8: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: n+z/uQK5OJRNO8VSoC4u8qYqSGYW6L/2YUVLbootN3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:39:12:43:4c:e7:ec:13:c6:53:83:98:2e:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Nov 15 08:00:54 2026 GMT
Not After : Nov 16 08:00:54 2026 GMT
Subject: CN=2102b2686d57ee9b1fcbf2dec964564326330a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:d5:ea:47:9c:91:1c:45:91:5f:06:f5:09:
27:5d:05:4f:36:cc:3b:d3:a3:ee:95:f5:28:d3:97:
c9:30:da:f6:98:9a:9e:ab:e6:47:8b:cf:16:c1:b8:
e6:ba:c3:70:bf:55:0e:e9:cf:53:52:22:6e:ac:82:
e2:24:ab:72:51:10:b9:1e:55:e2:27:ed:8b:5f:cd:
8f:05:b1:d6:09:8d:7e:a2:85:78:ea:a8:2f:03:6b:
31:6e:8d:79:e2:5e:bb:b8:8a:86:a0:25:98:48:a0:
43:1d:36:33:a1:ff:e1:f6:69:37:db:00:81:68:db:
64:39:2b:34:d0:71:71:31:5a:d1:97:81:9f:8e:27:
ec:31:6e:90:5e:71:9e:31:23:fb:f9:3c:21:76:18:
a3:6a:dc:21:0b:71:d2:95:10:40:ee:52:66:0d:7a:
c2:02:c0:ae:cd:81:60:12:e1:3f:68:df:cc:84:be:
25:d4:dd:ae:13:79:d5:85:85:57:b0:60:61:db:06:
be:25:e9:3e:a1:c8:c1:08:09:af:c9:aa:4c:52:a5:
f1:0d:52:4d:3c:fe:04:3e:0f:94:d0:59:97:4e:07:
73:8b:00:c4:86:9a:26:98:7d:70:5a:9b:11:2b:de:
53:c9:f4:a2:d5:bd:c6:dd:9f:06:a4:dc:f5:9a:01:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:B2:68:6D:57:EE:9B:1F:CB:F2:DE:C9:64:56:43:26:33:0A:0B
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:79:b2:54:03:fe:fa:10:a5:f1:52:35:1f:14:f2:c0:7e:
63:a2:f6:11:7f:55:c3:96:21:2b:ca:23:62:db:7d:32:57:81:
b3:6b:47:e3:7e:0f:bd:b1:fa:0f:2a:36:fb:bb:01:60:c9:af:
5a:fc:a0:5e:f0:63:22:00:d4:b7:b9:18:37:5c:3b:02:05:3c:
7e:76:a8:a3:08:7b:36:f6:a5:bf:21:22:6e:63:11:fd:55:05:
57:fa:fe:6c:dd:79:cb:40:03:d3:d0:e8:56:81:b0:64:c2:f8:
94:cc:55:49:6d:af:a7:2c:2f:e8:b0:f9:24:23:94:02:aa:56:
cc:08:67:40:6a:22:27:12:6f:4e:01:07:dc:d8:62:b8:cb:50:
b0:9c:9d:11:4a:3e:98:f2:2c:69:2c:96:61:6d:cd:b6:a8:55:
c1:65:5b:cd:04:1c:e1:f0:3a:22:35:d7:1f:87:4e:dc:5a:50:
74:32:46:ea:16:4f:05:5d:31:3a:65:96:e0:ed:1e:ab:7d:fa:
87:39:70:71:60:3b:82:41:ab:56:46:59:f9:6e:9b:3e:1e:28:
2c:f6:06:f0:80:d9:ed:3a:87:e8:9c:c8:b0:be:bf:4e:40:8a:
37:d8:2a:af:74:88:d6:0d:7d:4d:15:6a:e4:e5:89:ca:71:ba:
39:e3:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:12:21 2026 by rpki-client