Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: CyToeb8Dawy806nu3ARKRwh0Rj/1+TCT+DmdUa70BGY=
Subject key identifier: BF:D7:E0:97:D0:08:CB:E4:EC:9A:74:8D:00:D6:DA:12:9A:DC:BC:DB
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 01A0E098DD8B01E5DE478E451F9FDF214E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 1225
Signing time: Sun 27 Sep 2026 02:01:49 +0000
Manifest this update: Sun 27 Sep 2026 02:01:49 +0000
Manifest next update: Mon 28 Sep 2026 02:01:49 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: yrosOKltHFI5B88QnfSLaUtOC8w4PZQkX5Uxcd2FKGo=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:dd:8b:01:e5:de:47:8e:45:1f:9f:df:21:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Sep 27 02:01:49 2026 GMT
Not After : Sep 28 02:01:49 2026 GMT
Subject: CN=bfd7e097d008cbe4ec9a748d00d6da129adcbcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:3e:09:e7:90:71:06:6a:41:8a:56:28:b8:
45:f4:aa:ff:92:73:28:e7:75:fe:51:f7:ab:00:4d:
34:f1:a5:79:d3:98:a8:03:eb:29:61:57:2e:2b:5e:
79:0e:66:fc:a2:0e:e4:38:2c:09:1f:aa:88:2d:38:
9e:16:3a:17:5c:60:52:66:4f:e6:16:42:88:fa:ac:
8e:59:9c:7d:83:20:8f:c5:ec:00:9c:5d:75:c6:fe:
ec:f3:0e:0c:52:9e:74:3c:27:c8:9e:3d:65:fd:04:
52:66:1a:ed:e1:70:d1:69:d4:49:7f:c2:b1:25:02:
e2:00:f9:4c:e6:bc:69:4d:16:27:a0:bd:53:97:12:
4a:a3:d6:bc:f4:38:99:c5:6a:02:d1:b8:e8:ad:12:
86:eb:1d:f2:d2:b3:8c:c2:c6:dc:43:b9:3b:68:7c:
33:e1:8f:a7:6b:16:f2:53:2f:98:b9:e8:d5:ff:3e:
eb:aa:1c:ce:19:f1:0a:46:5f:57:dc:cc:59:3d:e2:
57:5c:4a:42:70:d1:03:d1:9a:6e:e6:e8:13:43:8f:
87:04:6a:52:19:31:80:f0:18:9e:35:f5:e3:17:43:
52:02:e7:ff:ed:c1:87:4b:e7:44:b9:69:2c:9d:5a:
52:1c:ec:77:a4:e0:32:1f:0a:97:07:0f:01:83:be:
94:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:E0:97:D0:08:CB:E4:EC:9A:74:8D:00:D6:DA:12:9A:DC:BC:DB
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:a0:d1:cf:1e:38:67:a5:ce:8b:a0:ca:1d:01:0f:24:c9:
55:dc:89:2c:f4:1b:44:bd:8f:e8:bc:b1:84:4a:39:51:55:9e:
30:e2:a4:80:07:94:27:56:c6:ec:63:b4:bb:0a:b2:49:d8:ba:
9e:68:57:bb:21:10:66:8c:39:4c:46:44:ee:c8:18:28:2a:7b:
d2:8b:5c:78:87:6e:90:ae:13:de:d4:5f:4a:ea:cb:3d:8a:07:
d7:24:e7:54:b4:cf:c3:8f:75:b3:e9:3b:e5:e4:66:93:5b:73:
28:96:22:75:da:05:d9:4b:ad:f0:2e:52:b1:ff:e5:4e:0f:9f:
fa:cc:17:1a:a1:56:11:32:83:fa:e7:dd:0c:68:3d:88:ab:57:
73:24:1a:3e:1f:20:81:13:14:9d:3b:9b:f8:e4:f1:d5:be:6d:
42:db:81:5a:8f:02:5c:7a:db:04:07:81:04:2d:23:f8:41:69:
00:5a:d2:3d:4d:fd:f2:85:e1:1d:d7:62:1c:07:eb:eb:61:7e:
5f:16:7c:cd:5f:b6:de:4e:dd:bb:e2:01:0f:06:2d:a9:ab:a0:
08:8a:46:ea:dc:cb:06:e3:8b:66:b8:d7:2a:4d:50:02:92:9b:
0e:46:46:87:46:3e:a6:b0:b4:c2:26:90:bf:c7:11:71:6f:b1:
e8:e0:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:55 2026 by rpki-client