Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
File: NfJIyy_lWJzEbJo1M7d5lmGclpM.mft (raw, json)
Hash identifier: k3hXM6vyzFrlDpOEXs/fkpdS6esu4Ntn1W1hsrI4x/Q=
Subject key identifier: 46:A5:9D:BC:1A:9C:77:3C:F1:BC:24:DC:73:96:16:C2:27:6C:B6:3D
Authority key identifier: 35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
Certificate issuer: /CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Certificate serial: 01A0D7CC371FF43FF747D44E9D6E3286C409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:19 +0000
Manifest this update: Fri 25 Sep 2026 09:01:19 +0000
Manifest next update: Sat 26 Sep 2026 09:01:19 +0000
Files and hashes: 1: NfJIyy_lWJzEbJo1M7d5lmGclpM.crl (hash: HLWoaQaI2AXkQmRm7+yekVAmTmXKshtIgQV6mM7svrI=)
2: eojrh4FYJOqn2Ldzg006OCzOQCA.roa (hash: wx1jFfpx9zsFd3AkjedbstvGgcY2Qb3PIq4eLA6x+1M=)
3: h9Vxutjtfpi1EQcen3goCtrMe_g.roa (hash: +RNsc+f9Zpcxd9dc3ORPp5I+o9EaIxcXyvozD+Nd1qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:37:1f:f4:3f:f7:47:d4:4e:9d:6e:32:86:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f248cb2fe5589cc46c9a3533b77996619c9693
Validity
Not Before: Sep 25 09:01:19 2026 GMT
Not After : Sep 26 09:01:19 2026 GMT
Subject: CN=46a59dbc1a9c773cf1bc24dc739616c2276cb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:0f:eb:17:16:b1:22:77:0e:a3:17:22:3a:
c4:28:a6:2b:f4:6e:3f:21:c1:a6:bf:35:9f:63:bb:
32:33:84:cf:64:fa:57:2c:d1:79:a0:1b:6d:2a:89:
b1:83:6d:6f:d9:3a:97:35:fb:00:ef:50:d1:a7:6b:
60:f4:ac:44:a9:4a:15:0a:58:19:6e:eb:51:13:fd:
f3:81:87:b0:a5:cf:57:da:0b:1c:b5:0f:82:8f:cd:
73:38:2a:bc:47:cc:31:a2:86:39:e2:b5:c9:84:b4:
d5:4b:bb:29:6b:83:b5:d9:28:fc:e0:70:49:db:1d:
d3:22:6c:09:4f:a2:13:21:43:ea:c0:68:e8:81:ae:
72:35:0b:6d:6a:a5:6c:6f:d7:5e:17:d1:d3:04:ae:
e4:3d:de:aa:3a:03:09:29:11:53:cf:97:c0:1f:46:
19:d1:ea:2c:16:84:ce:58:9b:e9:31:cd:8e:27:35:
2e:dc:60:d5:42:35:4e:40:49:6b:3d:e7:39:d2:ed:
48:d2:e4:9b:c3:30:73:a3:7a:a3:f3:eb:79:01:de:
7b:b7:ed:08:ad:5c:95:20:ee:86:ca:a0:b6:bf:82:
9d:bd:b7:c1:ca:77:12:9f:02:8c:a1:06:ea:1d:1c:
a1:2b:14:a9:b2:04:80:b6:49:8a:e0:4e:63:60:17:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:9D:BC:1A:9C:77:3C:F1:BC:24:DC:73:96:16:C2:27:6C:B6:3D
X509v3 Authority Key Identifier:
keyid:35:F2:48:CB:2F:E5:58:9C:C4:6C:9A:35:33:B7:79:96:61:9C:96:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfJIyy_lWJzEbJo1M7d5lmGclpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NfJIyy_lWJzEbJo1M7d5lmGclpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:3e:00:c0:40:d4:04:0d:21:a9:5e:49:ac:bf:62:c5:a8:
7d:f4:90:65:3b:3c:ef:45:e8:28:4c:56:9d:7f:11:71:e6:29:
ab:52:af:2c:c9:73:50:00:c1:1c:9f:90:5b:d5:13:46:82:23:
ef:03:62:cc:33:61:0a:1e:02:0a:99:8d:57:85:40:61:6d:0d:
4d:c0:e4:b9:e7:f9:a0:5d:07:ae:c7:33:63:2e:72:e2:7c:a5:
6d:ff:f8:5c:c6:59:ff:8f:02:28:85:d1:28:8e:0d:1e:33:2f:
16:78:05:73:d5:c7:de:b9:5f:13:52:f6:ea:0e:bf:6b:7b:87:
6f:02:10:55:17:b1:11:fe:c1:9a:22:4d:d0:c2:94:1c:6d:45:
76:b3:7c:9f:f2:76:1d:51:c7:57:03:89:89:52:9a:29:97:dc:
f8:79:4b:1f:c8:54:0a:58:99:f9:05:8e:f7:22:cf:dc:80:85:
d3:09:16:5e:e5:56:4e:ef:65:ab:cd:e7:fa:01:7f:3b:dd:e4:
cc:c4:72:59:a5:c9:3a:f1:a0:44:1f:8c:56:59:01:26:92:c4:
2f:c0:11:01:67:94:5c:77:cb:52:19:66:e4:d5:8b:bf:fa:42:
8e:55:d5:2d:34:2f:7e:1d:f6:f9:35:46:42:b7:4d:8a:ac:5e:
ed:c1:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:20:32 2026 by rpki-client