Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
File: nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft (raw, json)
Hash identifier: vzY1j2iR4VxB5wTxFvl96C0Ic+Ih4vhvlQG5+APk0mI=
Subject key identifier: 2A:B4:39:A1:84:64:09:22:A7:75:66:51:FE:98:80:1E:B7:0A:4F:DE
Authority key identifier: 9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
Certificate issuer: /CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Certificate serial: 01A1DD94BCF50A59A49033FA58E67A7B5E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
Manifest number: 0165
Signing time: Sun 15 Nov 2026 05:01:14 +0000
Manifest this update: Sun 15 Nov 2026 05:01:14 +0000
Manifest next update: Mon 16 Nov 2026 05:01:14 +0000
Files and hashes: 1: L0tuCjuCLhjPSF5HtdtxLxQpvLk.roa (hash: 9nbYmoJhoa2yk/1ARwX2HbvkSwOAKvIa7oZoUwwmhUA=)
2: nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl (hash: SgPy27VfDHfE+Ing6DQiuMRCd40Qp909oubhyKyhPYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:bc:f5:0a:59:a4:90:33:fa:58:e6:7a:7b:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46f7159dba87acb2f6991f6bf545f3e0d1dbf2
Validity
Not Before: Nov 15 05:01:14 2026 GMT
Not After : Nov 16 05:01:14 2026 GMT
Subject: CN=2ab439a184640922a7756651fe98801eb70a4fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:67:96:a7:1a:b7:fd:f4:e2:2a:8f:25:9b:c8:
a7:14:bd:dc:7d:74:bb:d4:9a:56:54:ad:5e:2e:e6:
d3:7e:7d:e7:8d:ae:10:45:74:7c:46:4c:84:22:2d:
ac:65:9d:93:08:ee:3e:e1:16:59:30:2a:4a:d3:37:
72:e8:2c:9c:a5:67:c9:ba:de:8d:c3:c7:f7:a7:dd:
f3:98:09:0e:e6:75:80:2a:9d:35:1e:12:3d:06:46:
2b:a6:f3:42:4d:18:2a:47:c8:a6:e2:70:2d:21:a9:
eb:44:8f:38:cf:05:2f:66:e2:0b:35:72:1a:d7:8f:
0a:a4:cb:7e:a2:98:0a:96:73:69:3b:6b:bb:f9:70:
22:59:82:e6:bb:2f:75:e4:58:99:48:f7:c7:dd:24:
70:17:78:93:1b:cc:3f:f9:86:fc:0f:d5:3f:3b:86:
71:64:89:06:cf:17:d2:6e:70:26:38:bd:dc:5c:58:
3d:95:f2:21:58:00:37:81:95:e0:76:70:39:7a:0e:
91:e7:cd:8b:02:ea:44:d6:9e:d5:91:c2:69:4b:65:
38:3b:98:d1:36:02:aa:c9:93:5f:fd:15:2b:6e:72:
fe:59:1e:54:90:69:da:15:0a:bc:69:90:ef:d5:23:
9a:e3:cf:87:d4:ce:8c:d5:39:de:f8:59:a4:0c:e2:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:39:A1:84:64:09:22:A7:75:66:51:FE:98:80:1E:B7:0A:4F:DE
X509v3 Authority Key Identifier:
keyid:9D:46:F7:15:9D:BA:87:AC:B2:F6:99:1F:6B:F5:45:F3:E0:D1:DB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUb3FZ26h6yy9pkfa_VF8-DR2_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b8d311-cacb-4cca-8c6d-6c918187f962/1/nUb3FZ26h6yy9pkfa_VF8-DR2_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:62:13:54:ad:81:7d:f6:23:42:81:8b:13:d3:2e:4a:59:51:
78:66:3f:ad:00:b8:3a:81:07:63:f7:cd:07:55:25:ab:d1:0e:
1d:a9:e2:9b:40:4f:b0:73:bc:65:ea:5e:8e:55:19:4b:8d:f1:
ca:ad:e9:f5:39:3e:e2:95:87:9b:64:ea:19:95:32:03:b6:94:
ce:67:35:09:d7:13:87:a7:eb:d0:1a:00:e1:3f:17:be:81:35:
a9:13:ae:54:a3:07:ba:a3:1e:8e:3b:71:92:93:7f:c7:d0:26:
23:30:ce:bd:d1:af:4e:a1:f0:c1:7e:05:a9:55:a2:da:8f:36:
67:0c:2b:23:61:bd:f6:31:9e:b7:5d:bd:3a:35:86:71:50:88:
b9:3d:bd:24:93:d2:dc:1f:22:2c:96:91:05:cf:73:6b:9c:17:
9c:48:56:2c:93:4b:35:74:40:a7:32:1d:6b:5d:9e:89:38:a6:
11:af:20:b1:29:1f:b7:f0:4a:9a:4f:9d:cc:72:a4:f1:02:73:
76:a6:51:c7:06:09:1d:b2:c9:26:62:1d:b5:7e:d0:5b:1c:42:
f7:46:23:c0:33:8e:fd:b2:0a:ab:11:48:36:92:8a:62:ec:4c:
39:bd:0a:90:62:7e:08:c1:58:ad:0c:ae:ce:e9:a8:0c:b3:14:
dc:d4:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:49 2026 by rpki-client