Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: VOzQjP/RNBNkuW/61cy3uHqPm0ZdqFOTuEwFKq/YzFc=
Subject key identifier: E8:55:57:5F:5D:49:08:87:BF:FA:F7:3C:22:70:50:B1:51:57:7F:D9
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01A10549537E189BD8D010BDD4272C5C9BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 10BA
Signing time: Sun 04 Oct 2026 05:00:53 +0000
Manifest this update: Sun 04 Oct 2026 05:00:53 +0000
Manifest next update: Mon 05 Oct 2026 05:00:53 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: 0oxdhTeq7MCeppWi5HxyHeWEEFC9ntt907NahvR8upU=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:49:53:7e:18:9b:d8:d0:10:bd:d4:27:2c:5c:9b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Oct 4 05:00:53 2026 GMT
Not After : Oct 5 05:00:53 2026 GMT
Subject: CN=e855575f5d490887bffaf73c227050b151577fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:e7:b3:28:3f:42:8e:ea:a8:d1:5e:bc:3a:
d5:e1:bd:aa:87:77:95:23:59:fa:0e:08:ab:c5:e0:
c5:4f:2a:4e:ae:00:ba:43:13:9a:22:ca:c1:0d:8f:
7a:a8:63:88:a3:22:9d:ec:10:ed:bf:a2:20:59:65:
10:5c:d2:27:d6:1f:e4:ed:f7:a6:8b:dd:d4:05:9b:
ee:de:f7:7a:e7:6d:3f:32:46:9e:30:ea:eb:0b:f9:
0f:1a:f5:1d:dc:4c:cc:b9:82:f5:ba:a2:92:e6:c4:
71:ca:e7:27:4e:28:dd:96:4b:0f:23:7a:95:db:9f:
9a:a0:5a:6f:5b:9d:a9:1c:89:60:51:52:5c:8e:ef:
c4:3f:fe:77:ad:4e:20:67:44:8a:63:95:79:be:50:
6e:71:6b:58:df:15:85:b9:98:20:dc:33:2b:42:9a:
57:03:58:47:b1:91:e5:70:25:69:3c:dd:83:af:7d:
68:93:aa:6e:5a:11:2b:ae:f6:4f:9c:81:e5:db:ca:
8c:61:d0:a4:74:0c:eb:25:09:90:67:44:38:c5:f2:
ab:0a:1e:0e:bb:e5:eb:0a:9d:b5:0a:4e:41:26:a0:
0b:b8:56:2c:08:2e:88:b4:ef:fb:b2:db:79:02:47:
38:7f:7d:25:ec:28:4b:06:a9:71:1e:4b:48:e1:af:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:57:5F:5D:49:08:87:BF:FA:F7:3C:22:70:50:B1:51:57:7F:D9
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:1a:8b:1e:cf:c6:88:c5:b7:37:c3:31:d6:9e:e3:e4:84:
2c:0f:e0:f9:97:62:01:99:07:68:4f:75:64:de:c9:4d:17:bb:
87:18:a8:72:96:f8:3c:05:df:d1:5b:ed:9d:81:23:61:a9:62:
ac:94:62:2d:6c:b3:14:ec:78:1d:03:2d:65:2c:67:8d:f1:ff:
b6:c6:1f:d2:f7:ed:cc:02:79:0d:32:73:27:4a:96:e2:07:21:
d7:f6:f5:19:b4:d1:3b:0a:5c:45:28:78:e7:90:f8:d9:57:9e:
a9:c4:62:d5:78:af:ca:c2:9c:1a:f2:4d:19:68:64:5b:a8:76:
2b:18:17:40:17:84:82:4a:4b:28:54:5e:6e:6e:e8:99:64:de:
af:ae:90:fc:26:0c:60:90:16:80:5e:10:05:24:53:1a:9d:c7:
f3:7a:96:cb:3e:67:42:a3:ae:01:52:be:17:23:8e:a5:8f:4f:
2c:40:5f:66:3d:b4:9c:57:0b:67:9c:73:f5:8b:cc:e5:be:1d:
33:ff:19:b1:6b:8c:90:ce:6b:42:72:0a:4a:fe:97:b1:e9:94:
80:ea:e9:71:31:90:0c:50:69:4f:79:3e:95:3e:02:ef:34:fc:
07:67:d1:72:3f:e2:2d:d1:00:9a:75:a8:fb:f9:63:fd:7a:de:
f7:3d:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:58:06 2026 by rpki-client