Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: G/tqhVEtpqJ/XCDgGyNiffoDvh6N77px9/hVWhAf6iE=
Subject key identifier: 25:6E:20:0F:66:46:A3:AD:D8:6B:1B:BE:80:CB:B3:F4:BD:D2:95:25
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01A0D26EA31E495FDDEAB33E9F3BE2F97BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 19BB
Signing time: Thu 24 Sep 2026 08:01:01 +0000
Manifest this update: Thu 24 Sep 2026 08:01:01 +0000
Manifest next update: Fri 25 Sep 2026 08:01:01 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: AEvUulI8ypYkHDK12Z4mCjAdqUfEJsL6jRxmsy1yAgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:a3:1e:49:5f:dd:ea:b3:3e:9f:3b:e2:f9:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Sep 24 08:01:01 2026 GMT
Not After : Sep 25 08:01:01 2026 GMT
Subject: CN=256e200f6646a3add86b1bbe80cbb3f4bdd29525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:ce:6d:1d:a4:bd:82:bb:f1:73:92:00:6e:
8e:75:a6:be:10:76:a7:0f:30:be:79:f5:6d:51:99:
32:e7:70:3b:50:58:68:9e:c4:f7:4b:ff:cf:6c:dd:
f2:f8:81:c7:d6:aa:fd:a3:26:ba:a5:fb:24:07:c7:
bd:37:33:41:81:96:cf:2a:8f:bb:05:b9:97:b5:1e:
16:3b:b7:dc:bd:1f:a5:85:d2:0b:fb:dd:cd:f8:5e:
61:cb:4f:6d:15:13:58:f0:ea:3e:26:b0:a7:dd:1e:
14:9b:1a:37:b1:1b:42:89:0a:0f:ae:f2:60:bf:7e:
66:ab:0d:e9:0e:68:96:a2:fd:fd:98:25:10:0e:08:
26:4a:a7:5c:c9:02:c1:d8:6d:fd:02:2d:60:5c:39:
c6:d9:fd:dd:20:89:0e:c1:b8:91:31:9c:8a:ff:74:
7c:b8:21:8e:17:5a:8f:b2:bf:6b:5c:f7:5b:4b:f7:
90:b4:0a:c5:0d:20:e7:1c:54:64:7a:74:5c:4f:01:
b1:d7:99:9d:22:5c:9f:7d:9e:18:46:31:fd:95:a3:
3b:4f:9d:47:4c:e4:25:9f:47:ed:86:8a:14:32:1f:
19:20:ac:6a:0c:7b:3a:77:81:f1:1c:2b:a2:52:ce:
47:f4:ad:25:c9:94:31:49:f2:93:94:83:81:8b:fa:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:20:0F:66:46:A3:AD:D8:6B:1B:BE:80:CB:B3:F4:BD:D2:95:25
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:53:cb:92:07:20:f3:8a:7c:42:ae:eb:23:59:50:bc:6b:1c:
f4:f4:a8:ce:3b:1e:2b:cf:26:a8:45:1b:a5:5b:31:6f:5b:8c:
b7:45:fb:c7:9e:75:05:20:ea:ca:41:10:07:11:c0:56:4e:fd:
98:d3:81:b1:6e:ce:4f:66:b0:d6:52:bf:7c:dc:c2:1f:7e:7a:
1f:ac:61:e8:e3:d3:04:21:97:df:dc:75:62:53:57:7f:6a:57:
52:61:a9:12:bd:b9:ee:d5:f2:de:d8:d6:8a:45:0f:1f:95:64:
2d:c1:24:cf:d4:a0:1c:86:2c:50:b2:41:f4:58:2c:a7:db:e6:
79:8a:31:ee:96:7a:f1:cb:73:e3:19:84:db:ee:5e:e5:c0:2c:
9a:00:a0:1e:71:dc:d9:a8:d9:f6:de:39:24:29:70:5e:35:9e:
d6:4f:38:89:2c:86:16:30:e2:1e:a9:e0:3c:ad:04:0f:8f:d2:
87:24:6e:e8:1b:81:6f:a4:08:d8:f3:89:0f:a9:9d:67:04:2b:
fc:0b:71:ce:34:6f:42:82:29:31:3b:4b:a8:32:0f:e5:97:49:
0a:31:1e:cb:ef:92:d6:6e:30:9e:f8:dc:9b:26:05:f7:4b:99:
06:0e:2d:cb:90:b4:67:fc:64:09:dc:c1:21:c2:f9:65:6a:3f:
77:bc:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:19:22 2026 by rpki-client