Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: G51lLODKnvSQi53f0qH2IlWUE3PoU2IOitgMxHVdEKk=
Subject key identifier: 7C:7A:5B:CD:58:F0:68:C4:7F:3B:86:51:C1:15:69:F3:FE:CC:0E:25
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01A110DFC80AA77CE17C2036C22053DDDC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 10C0
Signing time: Tue 06 Oct 2026 11:01:03 +0000
Manifest this update: Tue 06 Oct 2026 11:01:03 +0000
Manifest next update: Wed 07 Oct 2026 11:01:03 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: bRkdd76XQ+eK8UBck1x2dMufHlld1wLTUHKhIlwQFMA=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:df:c8:0a:a7:7c:e1:7c:20:36:c2:20:53:dd:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Oct 6 11:01:03 2026 GMT
Not After : Oct 7 11:01:03 2026 GMT
Subject: CN=7c7a5bcd58f068c47f3b8651c11569f3fecc0e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:07:22:47:9f:93:1a:a1:d5:44:a5:87:0d:
0b:a1:d4:f4:f5:fe:94:5c:d3:18:5e:b8:e1:cb:67:
4f:7c:59:54:8b:c8:6e:c0:01:3d:5c:4c:92:82:32:
e2:d6:9d:8d:ac:8a:1a:31:e5:44:be:a2:a4:87:05:
75:2e:3f:b4:b2:1e:45:56:9b:09:09:b5:2a:10:b3:
fd:ed:7e:b9:92:a6:79:df:e6:71:51:c5:68:f0:1f:
6f:fa:5e:c0:a9:03:dd:87:d5:30:93:60:68:7d:61:
2a:03:57:61:7b:a4:ac:da:c6:ee:47:39:36:7e:f8:
31:18:18:00:fb:2a:b7:d4:b7:70:0b:3f:ff:19:8a:
b9:98:c2:5f:65:47:c5:a5:55:db:39:0d:c6:45:6c:
9e:aa:d5:17:4f:41:4e:8e:b4:31:17:14:4d:6d:2b:
37:23:2b:ad:92:29:e6:6f:66:68:ba:84:96:8d:0a:
90:35:70:23:fe:20:3a:e2:31:1f:52:26:46:aa:8e:
66:19:ef:0d:3c:51:da:6d:15:ab:f3:d0:3c:a2:15:
00:1c:14:7b:8f:56:b7:f5:51:16:5f:52:80:f0:11:
a6:e4:a6:28:61:a8:68:8f:4d:3a:bc:95:f6:d0:f2:
7c:07:68:56:57:6d:26:db:bc:08:48:ac:ae:6c:2b:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7A:5B:CD:58:F0:68:C4:7F:3B:86:51:C1:15:69:F3:FE:CC:0E:25
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:21:4c:7f:a7:08:d8:8a:f0:30:12:67:8c:11:d3:10:c7:8a:
8f:21:49:d8:f0:32:fc:58:a6:88:5e:92:d6:2a:04:3b:b8:05:
c3:96:03:e1:3a:99:1e:eb:22:58:96:97:7d:79:d8:a3:5e:de:
41:50:ea:b1:80:51:6c:8b:c1:41:1f:20:18:e0:f8:ee:d6:e6:
6d:d8:86:36:5b:3e:b1:76:bf:85:24:04:87:2a:20:7f:f2:51:
92:67:24:34:d4:28:60:84:db:e7:f5:d4:a3:dd:07:9f:d1:87:
1c:29:03:b2:b0:e3:e2:26:a5:2f:eb:5b:ea:f0:f4:98:ce:89:
df:a7:96:bd:56:99:43:bb:27:50:83:c6:72:e8:12:59:74:21:
62:54:df:75:b8:65:2a:e8:84:d1:00:9f:dc:a2:04:f7:1b:83:
f5:89:f8:b2:95:16:09:7a:d8:c4:a7:16:52:82:70:af:eb:0f:
fa:ee:8d:17:2c:e0:17:67:5a:80:cf:04:ed:e9:40:95:54:6e:
1a:d9:16:27:2c:45:50:e7:41:73:c5:a9:c8:17:9d:7f:28:9c:
24:05:42:d4:67:9c:1e:dd:66:3f:ac:fe:bb:22:ec:fb:0c:56:
93:9c:56:67:1a:9d:fd:72:bf:78:8e:bc:8c:71:48:96:6e:77:
d4:7b:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:22:10 2026 by rpki-client