Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: RsCfrVlzyVezhtLnCFOBQzPXJNUL5cJzDSyQ3sNmMX4=
Subject key identifier: 75:08:5A:28:32:0F:8E:5F:A7:4C:79:95:CA:C4:4C:D6:F1:08:B0:35
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 01A119E25A7D7EE2C27911545AD9F0AF3825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 0685
Signing time: Thu 08 Oct 2026 05:00:26 +0000
Manifest this update: Thu 08 Oct 2026 05:00:26 +0000
Manifest next update: Fri 09 Oct 2026 05:00:26 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: k93jL6Kim6Rcq-gwqx6Gkl2ZvG4.asa (hash: k4/W9s1RlCLwJuDp9QGRSuIAh2OWfth6OK19Yy0jxHI=)
3: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: pan0/MJyddu8sDwjj29Ab+40aLsMmMEZKyZCpYWnXtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:e2:5a:7d:7e:e2:c2:79:11:54:5a:d9:f0:af:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: Oct 8 05:00:26 2026 GMT
Not After : Oct 9 05:00:26 2026 GMT
Subject: CN=75085a28320f8e5fa74c7995cac44cd6f108b035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:5b:f3:75:51:26:06:18:58:a2:98:93:2a:
b5:cf:6b:d3:23:76:17:c9:76:f3:d2:76:47:b7:32:
ce:31:98:4f:06:5a:ba:f9:21:99:07:0d:64:dc:88:
b8:48:cb:f1:96:13:58:86:16:bf:5c:9a:e8:14:a7:
2d:56:11:34:a0:ea:db:34:05:f9:21:bc:44:d6:c6:
f0:60:46:a7:26:b8:09:28:63:97:74:7f:3f:b2:d9:
30:f7:18:2d:0d:be:71:6e:48:4d:7d:2a:42:99:0a:
c2:b8:46:34:ee:08:0b:3d:03:d1:33:2e:4d:55:a6:
1d:f4:03:61:c9:e5:a0:57:94:95:82:60:40:b2:2f:
e0:de:ec:8b:a0:f8:57:a4:53:42:e9:a0:60:f5:37:
e5:fd:e4:c2:34:53:dd:b5:a3:7a:20:b9:57:6f:67:
ef:07:07:06:d0:d4:a2:a7:c0:0e:be:b7:62:a9:9e:
2c:cc:0f:d0:91:ee:ab:b3:0b:ca:a3:77:7b:ce:7a:
42:bf:16:5d:f4:f0:c4:6e:5e:55:10:5c:86:1b:5f:
b1:2e:e6:86:e4:91:a7:23:70:f2:5f:07:2d:b3:28:
3a:01:a9:cc:1f:a4:8b:32:81:0b:52:d1:2b:db:5c:
03:a4:31:84:6c:fb:8b:3a:01:fd:35:57:ab:2f:68:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:5A:28:32:0F:8E:5F:A7:4C:79:95:CA:C4:4C:D6:F1:08:B0:35
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:a1:59:8b:a1:95:fc:b4:c0:c1:e9:85:07:43:b5:f6:71:
83:90:4c:82:54:87:5c:ee:75:c9:07:d1:66:ba:0a:23:cd:10:
68:8e:7b:e6:7e:af:4f:15:c0:c9:3b:34:62:0d:69:77:71:9c:
70:16:64:49:d5:18:30:e2:af:a9:5b:96:c6:8b:f1:51:8e:52:
7d:6b:34:03:84:00:4a:b0:7b:3e:fb:c3:38:96:6f:df:c4:25:
a5:76:5e:d8:5f:cf:6c:b3:ea:22:12:cf:1c:ed:f1:2d:8c:61:
4d:1f:9d:f9:93:71:2e:5b:5f:3f:6f:57:67:60:da:8d:ff:b4:
7c:6a:f6:91:fc:84:30:6a:f9:d2:fe:7c:da:0e:a7:04:2d:c1:
87:a8:4c:16:ab:a8:1a:b7:62:bf:ad:88:19:5e:e5:14:8f:23:
5d:59:a6:82:f0:3f:1d:2b:23:c3:23:83:b0:c2:72:6c:f3:6e:
be:2d:d1:43:f3:4f:d5:c4:da:2c:19:dd:de:80:13:62:60:7c:
4c:77:cd:e9:23:08:9a:a7:ed:ca:ff:0f:2d:ac:ee:af:c1:54:
d6:af:b5:42:e7:da:7a:22:8b:50:e7:57:ff:d1:68:52:e6:6e:
61:b0:62:c1:1d:1f:41:dd:56:2c:11:3d:3f:36:ec:47:b2:1d:
64:e9:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:21:10 2026 by rpki-client