Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: sIJ0pNbmiJgnkff6CmbI4VyNfpZ8iml53gRmvdobvH0=
Subject key identifier: 90:35:7E:A3:0C:69:74:CC:AF:F4:D4:40:9A:42:72:2F:BC:D6:68:AA
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 01A0EA40E5608340CE5DCFC866C6928FA605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 122A
Signing time: Mon 28 Sep 2026 23:01:56 +0000
Manifest this update: Mon 28 Sep 2026 23:01:56 +0000
Manifest next update: Tue 29 Sep 2026 23:01:56 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: 3mAOcgVx1tHI5f8DJNgSRxGDeLyiJBoFuoUlJbwlx/E=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:e5:60:83:40:ce:5d:cf:c8:66:c6:92:8f:a6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Sep 28 23:01:56 2026 GMT
Not After : Sep 29 23:01:56 2026 GMT
Subject: CN=90357ea30c6974ccaff4d4409a42722fbcd668aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:72:fb:55:45:2d:11:b0:a6:9d:0d:cc:fa:
74:93:4a:74:47:76:f8:97:67:78:fb:7f:9d:69:49:
a0:d9:47:98:28:36:ef:a0:0e:82:54:6b:f0:fc:7f:
91:4d:f4:2b:b7:65:e9:1f:bd:0c:f3:d0:51:6d:7a:
85:eb:55:26:94:25:4b:62:f2:0d:03:43:27:67:53:
3d:29:6a:a5:29:9d:91:12:9d:9a:6b:0c:bb:14:7d:
38:b8:f0:ca:c6:94:99:74:c5:0d:03:15:83:44:df:
ef:fb:f3:55:6a:74:69:65:2e:fc:4e:0c:06:16:1a:
63:61:0d:a1:49:ec:e1:4d:f5:99:c8:e1:ab:ca:23:
9e:a7:d3:22:41:33:01:45:18:b2:2a:f6:89:fc:9e:
58:c8:07:49:0d:68:92:8d:46:b9:a1:3c:ab:1d:99:
2d:c1:62:fe:44:f8:5c:f3:b7:18:c2:8f:7a:6e:2e:
0c:46:5b:34:7d:4f:b1:95:39:60:15:19:e6:4b:9d:
4f:c7:7f:6f:d6:ee:c9:fb:e8:65:20:d2:36:d0:44:
74:1f:8f:bb:ad:bb:8b:ed:24:20:51:66:99:7f:58:
de:6c:dc:3e:af:ce:02:93:a8:ae:3a:ae:10:a1:35:
0e:72:fb:7c:31:e1:1e:8c:97:58:42:d0:dd:e7:d6:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:7E:A3:0C:69:74:CC:AF:F4:D4:40:9A:42:72:2F:BC:D6:68:AA
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:4b:30:ff:27:c4:0d:51:f4:da:15:a1:7f:2f:e6:11:ad:
9f:2f:0f:20:5c:3c:38:d0:ca:36:83:ac:21:de:fc:71:0e:0f:
77:27:2c:75:ce:8d:35:01:33:86:91:63:69:22:f8:ee:e7:88:
de:c5:c6:ad:ff:cc:cc:1e:68:ec:9c:cc:61:6a:b9:18:53:26:
97:74:09:b8:5e:4d:1f:23:ab:36:89:eb:53:6d:b9:39:fa:dc:
65:4f:63:21:7b:85:06:1a:2a:60:36:be:c7:b7:ad:09:6a:14:
93:c6:bf:a8:c7:17:f2:85:f1:3e:f6:20:8f:65:e8:77:ce:92:
63:be:a2:da:a8:e7:34:40:05:72:3f:1c:d4:4e:88:cd:8c:c6:
13:73:53:69:7f:43:bf:b1:12:29:8d:6a:5e:01:b8:57:66:1f:
6f:97:06:0c:e3:c6:d3:7b:b8:00:12:87:19:37:10:41:24:6b:
68:74:5a:0b:88:3c:c8:77:13:48:5d:45:7b:89:7a:04:6e:c7:
4e:14:3d:03:19:7d:52:27:3d:ba:b9:f6:60:bb:12:b5:df:1d:
5e:c9:65:04:ca:bb:70:81:ab:0a:cb:fc:47:0f:92:48:ef:bd:
66:bb:05:95:37:f7:2c:4f:07:55:59:7d:1d:1a:d7:7e:02:b9:
d2:d6:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:43:37 2026 by rpki-client