Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
File: nclnU_9wnNfObmFE3JHd1fFPjyk.mft (raw, json)
Hash identifier: LJOO5fGo59BIUL1eVuUa/ALDmBmN1QIvnNA/Snv8h38=
Subject key identifier: ED:55:96:9B:12:6F:AA:B6:FD:CF:47:6D:56:AB:8B:14:53:01:74:6B
Authority key identifier: 9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
Certificate issuer: /CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Certificate serial: 01A0DFF3D88560DAE7AFBCC51604E13B7070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
Manifest number: 014A
Signing time: Sat 26 Sep 2026 23:01:34 +0000
Manifest this update: Sat 26 Sep 2026 23:01:34 +0000
Manifest next update: Sun 27 Sep 2026 23:01:34 +0000
Files and hashes: 1: 9ZSXfsCkvhTDn0EqG4hK9x_5r3g.asa (hash: mALm4aVa8zqz+s+k2m/N4xyapjQ6EaujIC/5UmS2erU=)
2: Ui1uE0sHytyZbyDmszprdZdlwyE.roa (hash: lNVsKk9WXzxSl6slMGypOFZQlfYFnIEcz17VGkNR2ZU=)
3: nclnU_9wnNfObmFE3JHd1fFPjyk.crl (hash: 7zcodm0p12dwccpI00BwhW+XbiYNrxsWBsLP7JEGvTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:d8:85:60:da:e7:af:bc:c5:16:04:e1:3b:70:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc96753ff709cd7ce6e6144dc91ddd5f14f8f29
Validity
Not Before: Sep 26 23:01:34 2026 GMT
Not After : Sep 27 23:01:34 2026 GMT
Subject: CN=ed55969b126faab6fdcf476d56ab8b145301746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:68:69:c6:dd:c9:28:46:1c:30:51:7f:b4:
20:d5:7e:6c:4e:d9:dd:98:57:d5:94:55:01:d7:4c:
3c:56:50:f1:23:54:2c:5e:e8:12:34:5a:01:25:27:
bf:3e:90:7a:62:ac:a2:d1:82:0f:5e:5f:d8:38:03:
4f:c3:b9:14:1b:36:09:1d:55:0f:12:0d:85:bf:f1:
2b:1a:d3:34:f2:fc:19:7d:dd:b8:f2:47:b0:b6:8d:
76:81:c9:e9:07:60:31:0e:e3:50:fa:d5:3a:5a:b7:
95:69:c9:c4:47:bb:03:58:9f:96:2d:53:a5:08:6c:
e7:29:ff:34:d5:38:76:2b:52:9f:0f:fe:48:9a:2f:
3e:7f:72:fc:ef:8f:61:26:f6:73:3c:1e:5e:9d:d9:
d1:13:35:1c:22:34:78:4c:63:e6:44:38:29:ba:51:
dd:b2:87:59:f0:44:a6:45:10:6d:9f:9e:9f:85:14:
dd:e5:e2:6e:aa:2b:94:7c:f4:1b:7c:6c:c5:87:60:
dd:01:6e:be:34:66:84:f1:25:0e:a5:13:7f:a7:39:
dd:a2:66:ad:62:4c:5b:64:f4:2c:9b:91:be:d5:0b:
d1:c5:68:da:a6:59:e4:6e:e4:3b:3d:ab:48:36:46:
80:d3:e7:5b:43:03:0e:8c:5b:56:10:36:fa:e0:41:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:96:9B:12:6F:AA:B6:FD:CF:47:6D:56:AB:8B:14:53:01:74:6B
X509v3 Authority Key Identifier:
keyid:9D:C9:67:53:FF:70:9C:D7:CE:6E:61:44:DC:91:DD:D5:F1:4F:8F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nclnU_9wnNfObmFE3JHd1fFPjyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55ad21-42b5-470c-a583-ad6883e0c302/1/nclnU_9wnNfObmFE3JHd1fFPjyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:59:3f:52:83:98:7f:bf:73:8f:d3:3a:16:06:60:90:c8:
85:56:22:69:e9:bc:4f:3f:3d:b7:ff:4f:59:f2:13:b5:6e:8b:
10:1b:eb:66:c0:51:98:cb:d5:31:35:7f:b2:18:46:43:01:85:
0a:d7:4b:50:95:d3:4e:ff:cd:8f:e8:bf:19:d7:50:b4:cd:66:
97:1b:7a:63:4f:f5:5a:a0:e3:dd:11:31:41:05:57:e5:cf:3e:
50:d6:2d:a2:48:9e:18:4c:95:34:c0:d0:a5:60:12:d0:54:4f:
f7:11:dc:e4:d2:c7:b5:d8:72:4a:c4:0a:0a:c9:3c:fa:21:75:
21:01:be:af:f4:ee:8a:e0:87:93:6c:e5:6e:05:a0:b4:a6:b7:
82:16:2b:f9:3a:97:15:61:10:38:4d:77:4d:a8:db:f8:0e:26:
1a:0b:5a:ec:33:9c:24:85:76:88:9c:eb:f8:36:36:2b:ca:a2:
60:e9:5b:74:8a:7a:54:63:4e:a7:85:07:58:28:53:79:99:a7:
1d:a5:af:0c:0a:a2:09:b2:d5:6e:27:4b:1c:8b:34:03:f3:64:
7e:f9:77:44:60:e0:56:2c:6e:0b:6c:82:11:1d:cf:dd:af:5a:
d4:da:8e:64:e5:08:23:b7:fb:4d:33:cb:f1:a9:9e:91:7f:fe:
4b:fa:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:47:04 2026 by rpki-client