Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: TnZ1OcWh9QCWxGQDTlHng6avAHrehGNpJT/I31oizZg=
Subject key identifier: 99:54:A0:4A:6D:AA:64:3B:F9:D5:DC:FD:C7:19:4F:2A:81:D0:AD:E7
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 01A0D34AEB9C12FD0A5F365F0056A445EBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 0670
Signing time: Thu 24 Sep 2026 12:01:37 +0000
Manifest this update: Thu 24 Sep 2026 12:01:37 +0000
Manifest next update: Fri 25 Sep 2026 12:01:37 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: umtwi5/0LGxyP7e5Iz8ghug7zpMtrZR5AchSX2BrchY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:eb:9c:12:fd:0a:5f:36:5f:00:56:a4:45:eb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Sep 24 12:01:37 2026 GMT
Not After : Sep 25 12:01:37 2026 GMT
Subject: CN=9954a04a6daa643bf9d5dcfdc7194f2a81d0ade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:2b:9a:e9:7b:d2:c8:a7:9e:dd:0a:b0:40:
32:ce:cd:49:91:19:63:a5:c6:6d:36:f5:92:13:01:
b6:00:b7:6b:bf:7a:dc:bc:f3:9d:16:1e:6e:b8:c4:
50:e2:34:1e:8b:63:13:7f:59:1d:f3:5f:5a:04:99:
19:e1:6e:03:c4:27:d4:0d:79:83:bb:f7:18:13:c5:
18:d8:92:62:99:61:8a:7d:0c:72:99:95:1d:48:1e:
d0:9f:23:47:5b:3f:bf:8f:79:ea:c8:69:22:0a:a8:
59:aa:d7:48:fe:6c:a3:c2:b2:d0:9a:12:61:ae:4e:
5a:00:46:12:71:e5:08:75:f5:2b:24:3b:1f:85:99:
06:85:ee:c2:78:64:2f:70:67:fe:92:3e:2b:14:38:
50:68:49:34:92:2c:9e:81:3a:e2:3c:9e:4d:4d:61:
b1:eb:fa:0f:bd:66:02:31:57:1e:4b:0a:3c:4e:45:
5b:4f:b6:10:98:32:09:89:53:07:df:2d:1c:15:24:
1e:bd:83:1b:32:47:65:67:f4:3e:60:e5:c3:24:75:
10:69:a0:00:45:0d:51:55:3c:8e:e1:e7:6f:e0:a6:
1c:ee:d4:0f:8e:da:5f:81:ef:8d:fc:83:0b:80:41:
76:48:c2:82:d1:bf:3a:0f:b3:e7:ee:e2:93:96:31:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:A0:4A:6D:AA:64:3B:F9:D5:DC:FD:C7:19:4F:2A:81:D0:AD:E7
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:17:df:a1:9f:a2:74:2c:aa:46:73:63:f7:f7:f1:ec:74:2e:
9a:9a:ec:bc:4f:d3:53:14:0e:57:bb:23:89:e3:22:8b:1d:64:
74:a9:19:2f:d9:dc:ac:25:e7:91:15:82:89:c7:32:3c:a2:5e:
6e:1c:d8:e3:79:6d:75:a2:6a:4b:d7:36:fd:26:93:6a:83:b8:
6e:d1:fd:b6:1a:4f:23:ff:a1:89:93:05:0f:fa:55:49:46:4a:
c3:53:ee:de:1e:bf:5d:16:99:9a:18:75:2e:00:f0:e7:4e:cb:
f6:09:d1:b1:6f:0c:c4:0e:1b:bc:a6:c1:b7:a0:a5:84:83:e5:
49:a2:c2:75:14:20:e5:02:da:74:e1:79:a7:f5:0c:06:11:22:
e1:4a:12:0b:83:3f:58:a9:1e:f5:48:33:00:da:08:51:ce:e4:
ad:31:d9:2a:17:3a:94:f2:56:e7:95:88:35:9d:8b:c5:b4:75:
7c:7f:5e:35:30:1d:16:4e:83:a4:79:a6:a4:ef:05:81:28:bf:
06:c8:ac:ec:34:80:5f:6d:ce:d5:a8:bf:6f:01:60:f6:d2:79:
71:a9:cb:92:1e:98:1a:fb:50:96:8f:65:14:68:fc:a8:10:74:
df:fd:5c:c2:0b:05:ab:71:37:43:57:55:b7:91:d3:6e:43:7c:
60:b5:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:30:13 2026 by rpki-client