Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: 8DdnOFjGRn5dd2ovL54G+jP/HuSpRW1Yh7gliqzn8y0=
Subject key identifier: DF:18:C0:27:FA:C7:18:77:3F:49:04:93:58:F5:E2:8A:52:A7:74:22
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A0D08020B6262F21F8DB93DE50B50B1C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0D9F
Signing time: Wed 23 Sep 2026 23:00:52 +0000
Manifest this update: Wed 23 Sep 2026 23:00:52 +0000
Manifest next update: Thu 24 Sep 2026 23:00:52 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: YagYGHUvJwNS6i69ObBZENnnKZPedJ4znocLlV5dYmI=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:20:b6:26:2f:21:f8:db:93:de:50:b5:0b:1c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Sep 23 23:00:52 2026 GMT
Not After : Sep 24 23:00:52 2026 GMT
Subject: CN=df18c027fac718773f49049358f5e28a52a77422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:13:b9:0a:98:8d:66:65:1a:35:b8:70:19:
31:3c:bf:7c:b0:76:fb:d9:88:b3:56:ed:db:ee:09:
b0:f1:a3:d1:0b:f7:5d:f0:56:23:4b:9e:9a:00:c8:
d7:36:45:69:f2:cc:1a:e4:a6:b6:04:90:f1:4c:06:
d2:12:06:ac:2b:89:ba:f0:c2:51:5d:30:76:1e:af:
c5:42:5a:c0:c0:26:02:6a:ab:54:05:c2:9c:d2:52:
ca:57:c5:f3:04:4a:de:c9:00:db:9e:cb:f9:a7:f1:
a5:da:68:eb:65:90:89:d7:fc:35:6b:8c:83:d9:75:
49:0c:43:80:45:5c:f5:2c:45:6f:c2:38:b4:f3:c2:
c5:47:0f:45:21:4d:36:c0:47:0d:b5:b8:16:df:36:
b6:16:bf:a7:99:e3:15:cc:54:aa:b4:4a:4f:24:50:
1a:79:f6:5d:f9:f2:05:84:43:51:cb:27:2f:ea:c2:
68:7a:bc:57:66:b2:c2:86:97:1b:6f:b2:40:8f:38:
af:9a:d4:94:4d:e7:9c:89:53:d4:37:3b:c9:f2:0e:
3c:5b:cc:1c:ba:f8:47:45:64:85:c5:24:7c:ae:ce:
32:a2:7e:b9:d9:c1:0b:0b:b5:0d:fd:02:27:42:39:
2f:49:22:fc:f3:75:37:21:d4:d4:20:b1:06:bc:81:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:18:C0:27:FA:C7:18:77:3F:49:04:93:58:F5:E2:8A:52:A7:74:22
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:da:21:76:32:eb:42:55:1f:fe:ed:31:e2:aa:bb:b8:2b:
3e:e6:0a:5f:c6:6a:db:db:02:fd:f9:19:91:c1:35:28:11:9e:
3f:cd:ee:ec:05:4e:5f:ff:61:ec:a2:2f:dc:cb:7e:75:5f:21:
14:87:5b:15:b4:56:4e:9a:aa:7d:09:1b:bb:2b:bc:86:63:82:
30:87:ad:f4:50:63:f3:66:be:54:18:4d:94:d5:63:72:df:77:
cb:79:8f:f7:4b:bb:5d:a7:2e:af:6b:cd:1c:ca:09:91:b8:5c:
51:22:a6:ce:ce:00:3e:78:4d:43:bc:51:a4:55:96:66:9e:c2:
6a:5e:c6:38:43:01:dc:3f:22:1e:83:27:90:c2:98:8b:53:a2:
3b:86:70:a8:cd:82:63:c7:d4:62:0d:4a:00:3c:28:29:5d:83:
33:37:72:0c:9b:1c:e6:17:63:49:d3:8b:9c:cb:aa:51:72:cd:
b7:47:41:6f:36:b6:ef:8c:7b:58:9d:ac:5c:cf:02:c5:1c:ec:
51:a2:57:88:40:ac:c1:70:d8:55:ce:f8:02:58:84:08:11:d7:
35:bb:63:6a:46:eb:7e:4a:0a:19:53:e7:fb:a1:d9:ce:03:c3:
56:4f:39:cd:16:a9:87:8b:c6:21:ce:9f:d2:53:6b:a0:0c:bc:
c4:2a:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:54:37 2026 by rpki-client