Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: n+GgNDWJmDXVkf1tD6JUOLGwusn2X2v0Q++G3uE8eWc=
Subject key identifier: B7:17:05:8E:C3:A9:42:56:DA:59:E7:B6:E1:D5:C7:CC:B5:08:A0:4A
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01A0D94CFFE40B85E4A21415B1E3D64E2F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 16:01:37 +0000
Manifest this update: Fri 25 Sep 2026 16:01:37 +0000
Manifest next update: Sat 26 Sep 2026 16:01:37 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 2WKhFoYmVXOIBzRV1WRPXyUD2vhHKbKJBhJPiA1gCyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:ff:e4:0b:85:e4:a2:14:15:b1:e3:d6:4e:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Sep 25 16:01:37 2026 GMT
Not After : Sep 26 16:01:37 2026 GMT
Subject: CN=b717058ec3a94256da59e7b6e1d5c7ccb508a04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a3:94:15:c6:86:3e:3b:4b:f5:b1:05:45:6b:
c7:1d:76:b5:72:6f:0d:f4:c7:77:66:e7:41:9b:27:
10:02:80:94:40:eb:36:05:61:98:19:ca:ca:d4:2f:
24:d4:4f:ef:f5:02:3c:b9:31:5a:03:14:4f:fe:f3:
d9:f4:70:56:7e:a6:74:b3:3c:e5:f6:a3:27:27:54:
97:cd:4c:41:b1:48:0b:4f:4c:cc:79:52:d6:a6:71:
2a:ff:df:53:b3:1a:82:2b:fd:5e:26:96:e9:f9:32:
fb:51:f0:b4:5d:88:24:1e:e5:8a:40:e7:0f:32:39:
06:d2:be:a9:52:f5:fc:c7:85:11:bf:33:25:0e:d1:
03:8c:0d:55:84:b1:cc:2f:32:ab:fe:71:f7:ae:df:
7d:3a:97:e4:d4:9f:3b:a8:84:f5:64:c0:78:40:e1:
b5:f2:04:43:2d:b7:92:04:2a:cb:da:81:12:f6:6b:
5c:62:70:17:b3:ef:18:a6:6c:8a:96:5e:ba:fb:3a:
b8:41:c0:5a:76:d5:9b:4d:e7:51:08:0c:6b:e1:5d:
2c:90:d2:b9:72:76:7e:4d:51:d7:f5:28:aa:5c:3a:
4a:48:c6:af:c5:7c:0e:36:82:57:83:53:71:e9:3c:
03:d6:fe:3e:35:45:e1:23:77:d4:2b:1e:0b:b0:cd:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:05:8E:C3:A9:42:56:DA:59:E7:B6:E1:D5:C7:CC:B5:08:A0:4A
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:4a:63:12:23:5e:ff:ea:bc:4c:44:ab:5a:01:d6:40:9c:
b2:6f:b6:13:1d:fd:6d:76:3d:18:e7:fe:89:65:4d:e1:51:0c:
37:5a:dd:c5:02:f6:07:f7:8f:5b:f3:06:e0:e3:7b:9d:70:74:
2f:72:f1:65:44:7f:3e:4c:47:33:9e:37:28:10:57:eb:1b:9a:
d4:b5:0c:63:c2:1f:4e:26:b4:45:46:4d:9b:97:e9:67:a5:0c:
86:10:bf:eb:e4:94:a8:01:0a:3c:7c:b5:61:d9:79:1d:4e:8a:
40:c5:ae:f5:52:6f:6a:a7:75:d6:a3:34:09:87:22:bf:ac:58:
73:75:16:33:ce:80:61:7d:a7:28:16:c6:4b:7f:5f:16:b3:8f:
6a:1f:ac:2a:7d:5a:fa:6f:64:e3:3c:0f:3e:ec:5f:4a:c7:5b:
61:9f:2e:cc:42:1a:cf:73:b5:75:fe:aa:f1:29:5c:a6:f5:dc:
13:be:cb:7f:1c:5c:fe:bf:f9:bb:d0:cc:d6:7d:b7:86:f7:98:
40:31:75:ee:16:fe:74:7a:27:00:02:21:62:7c:3c:ac:07:83:
96:2c:16:8a:07:ab:3f:d9:e3:09:10:03:82:93:70:10:bd:4d:
17:74:60:40:6c:6f:08:74:df:cf:96:5e:31:db:d7:c6:50:a6:
34:f9:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:13:27 2026 by rpki-client