Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: pVWH1xlWRcBERGef2lLiF1bCgvWnMvSkGlhh+E89PZI=
Subject key identifier: 60:53:96:FB:49:A5:3E:DC:CD:93:CA:F5:25:D5:9E:89:DE:14:0A:AD
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 01A0D8A81190F3D7EF9D5B97A780E4631B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 110C
Signing time: Fri 25 Sep 2026 13:01:28 +0000
Manifest this update: Fri 25 Sep 2026 13:01:28 +0000
Manifest next update: Sat 26 Sep 2026 13:01:28 +0000
Files and hashes: 1: Og8b6mn9T1akZjxc4TVcMnSz1As.roa (hash: MZENTXsLseNKZbHPbPVFQM4cXWctRVemJxC3RSLuLEk=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: EbnMaC2bhSjZcY5HiE79eAUtwydqv7LWdFrLyDH8RB4=)
3: qpf2jrPnGEdSelRtM1fGztVUn_M.asa (hash: T6+awxj1fPEBE6Cn0I06mdbSa3YDzKpDM/bjQAsbn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:11:90:f3:d7:ef:9d:5b:97:a7:80:e4:63:1b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Sep 25 13:01:28 2026 GMT
Not After : Sep 26 13:01:28 2026 GMT
Subject: CN=605396fb49a53edccd93caf525d59e89de140aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:c6:23:f0:49:05:be:40:5b:b2:0b:ca:46:
5e:9b:d9:c9:39:c8:df:86:74:ee:d4:72:46:35:80:
7d:2a:31:5f:e5:28:f1:e5:2a:a4:3c:70:c8:95:c7:
e8:06:e8:8e:e4:1e:67:78:96:0a:4f:31:01:85:d2:
6a:2a:42:31:7f:4c:7c:a7:c7:7f:d3:f9:61:4d:ae:
3f:4d:5b:e6:6c:3c:0a:2e:9f:94:f4:f8:fd:1a:d7:
58:00:6b:e3:eb:2e:93:b0:c0:de:df:75:57:4f:e1:
1e:85:27:99:85:34:4e:a5:54:68:28:cf:b6:93:0d:
8e:e1:67:ed:03:ed:be:45:16:55:16:12:91:c9:d8:
a6:19:81:c5:f4:9a:ec:bd:a8:6c:1f:0a:31:e6:d3:
c0:e8:6b:7f:51:11:09:7d:0e:e8:a8:b4:35:4e:5a:
4f:e2:10:26:0e:76:21:ed:5c:a6:28:5e:d1:e8:a4:
15:de:38:28:8f:07:d8:d9:07:46:18:41:6e:f9:88:
52:11:ce:45:c2:bd:de:24:d7:d3:b6:64:df:82:cd:
fa:df:f5:6f:f4:c9:b2:9f:f4:cb:65:f2:8e:85:52:
62:0d:5a:a6:b6:a2:f7:93:80:a2:55:3c:6a:8c:35:
d5:31:2a:b3:fa:ca:89:40:bd:ee:68:46:29:f8:d9:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:53:96:FB:49:A5:3E:DC:CD:93:CA:F5:25:D5:9E:89:DE:14:0A:AD
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:98:93:00:d0:69:54:19:e4:35:ae:db:75:4d:aa:fe:74:
34:9d:d8:ec:9e:9a:6c:d6:67:14:2b:32:14:d7:fc:df:76:4b:
39:9d:f2:89:c1:34:7a:4f:c8:a3:4e:67:97:c0:d2:0c:90:19:
bf:d5:e4:b5:71:e5:85:ef:13:a2:eb:3b:56:07:86:a3:1c:47:
70:f8:1a:a8:a8:c8:59:b9:9e:20:1c:18:cb:51:53:95:b1:e2:
88:0a:b5:13:ab:65:6c:d1:e4:68:33:5a:dc:a4:55:ab:08:e4:
0b:ff:a6:27:3a:e4:d3:9b:18:3d:4a:1c:bc:e9:ae:85:7f:cb:
c2:34:8c:66:f5:38:32:6d:d8:ab:0d:60:e9:08:82:44:78:ed:
d9:1d:b5:d0:54:81:36:7f:83:b8:5a:ce:11:57:b5:95:51:66:
47:13:66:57:b1:6c:a0:4f:e0:15:59:33:b4:b6:fc:78:49:a0:
27:ae:7e:e6:df:1a:ab:eb:d9:20:11:fc:04:c7:d0:ec:5a:bc:
a7:f5:eb:c2:f2:d2:eb:8b:52:4a:a0:12:ff:d1:25:30:51:7a:
4a:f1:4d:d3:da:1e:fc:19:d7:1a:e6:0d:ad:cc:09:68:6a:ba:
9f:f7:70:30:6c:60:3a:40:e5:9e:dc:8f:eb:cf:e9:24:8f:71:
8f:76:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:14 2026 by rpki-client