Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: 7xAJZxSQBjup4KmErjGV8yZBHrOL0zIWLCvStGvoqxk=
Subject key identifier: 6B:66:F2:1C:0F:21:3B:81:87:0B:8F:D7:AC:9C:E2:CD:02:7A:39:DD
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 01A106CA83AB9CF71E50752FAEFEE503E8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0DA4
Signing time: Sun 04 Oct 2026 12:01:37 +0000
Manifest this update: Sun 04 Oct 2026 12:01:37 +0000
Manifest next update: Mon 05 Oct 2026 12:01:37 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: Sov1o6i4LmOS0kfjnOVg9w/PbTudE8W79+HdbNSeJms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:83:ab:9c:f7:1e:50:75:2f:ae:fe:e5:03:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Oct 4 12:01:37 2026 GMT
Not After : Oct 5 12:01:37 2026 GMT
Subject: CN=6b66f21c0f213b81870b8fd7ac9ce2cd027a39dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:57:83:c5:af:43:36:50:6c:5a:5d:47:93:
05:30:c1:ce:ba:8a:34:e1:44:bb:4e:a6:d3:af:b6:
fe:0e:55:33:68:53:8f:2c:e3:32:39:38:09:41:eb:
c5:ea:64:a8:c9:02:e0:19:aa:8e:5d:9e:40:a5:3c:
5e:c4:e7:a0:37:14:7e:94:1a:07:e8:1e:e4:8c:f3:
e8:c9:f2:b3:52:77:6c:4a:cd:87:80:ef:52:80:98:
15:36:fc:dd:b8:27:a1:40:33:00:0f:1e:6f:42:df:
d7:18:5f:61:af:1e:d9:58:5e:6d:d0:96:53:41:8d:
c7:16:b6:c8:99:18:ed:8a:40:29:7e:00:e1:31:08:
71:d8:8b:70:04:9c:9e:26:38:a3:42:4d:5b:48:e3:
a4:1f:61:1c:b9:63:46:60:75:f7:42:79:8b:29:9f:
c6:25:2d:e8:66:87:97:14:e6:8b:d3:22:6e:67:7d:
5d:95:54:5a:4d:4b:b6:4a:5f:5f:5b:7c:05:64:c1:
1e:35:52:2e:d4:e6:e1:e5:08:73:35:22:50:82:42:
91:8e:1c:75:e9:dc:fd:c1:c9:16:f2:3a:44:c7:27:
f3:b2:b8:b8:d1:3c:fd:48:a5:96:08:ff:a6:eb:69:
65:42:ed:da:14:e0:55:74:09:2c:b9:f6:2a:0e:69:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:F2:1C:0F:21:3B:81:87:0B:8F:D7:AC:9C:E2:CD:02:7A:39:DD
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d6:b3:0c:cd:dd:af:d3:19:a6:67:72:52:ce:d4:f8:be:83:
86:5f:54:77:ea:52:23:e1:23:54:34:fd:54:ed:9c:1e:2d:9b:
0b:1b:19:d9:a9:25:d4:29:34:4c:d6:c8:01:64:bc:56:44:28:
76:cd:94:f4:74:64:f9:d5:e0:53:8d:8b:d1:dc:ab:08:33:09:
d3:74:bd:cd:35:9e:ee:79:45:cb:69:c3:d2:eb:9c:5a:37:95:
8e:aa:95:4b:4d:58:26:ed:44:51:c8:7d:93:37:09:a6:35:34:
e1:ff:cc:dd:17:02:31:40:53:51:a7:89:40:18:08:8f:42:27:
05:03:8c:d9:d8:22:28:8e:9e:d3:0b:c6:32:04:42:25:c1:18:
52:fa:dd:c7:3e:73:e3:c7:0d:04:2b:6f:71:85:27:82:f0:f3:
a6:8d:cf:53:5f:a9:43:e8:ae:b0:f2:0f:83:e9:99:ab:e3:47:
35:5e:f9:4b:13:62:01:1a:75:7c:69:58:0a:d5:56:88:de:18:
c4:ad:04:80:ab:3f:ce:71:67:61:2b:1d:94:66:b5:9c:ca:f1:
19:2e:76:05:ba:52:6e:07:74:a9:94:ba:e9:45:31:79:b1:19:
02:30:c5:d4:9a:91:46:06:b1:37:3a:7e:eb:a7:b9:a0:e2:c8:
58:b8:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:19:54 2026 by rpki-client