Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
File: NLMfafzU7VExoTlBfOtyA1c7dHs.mft (raw, json)
Hash identifier: kUTF1G6ZAS8n3mTISQdGXdoCb4ETq/BRRdODuJzTsrQ=
Subject key identifier: 70:EF:33:46:D4:C9:17:48:72:9D:4D:18:55:44:1E:F1:CE:20:72:92
Authority key identifier: 34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
Certificate issuer: /CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Certificate serial: 01A0D7CD5F390BCD68C06DFB5B5625E67624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:02:35 +0000
Manifest this update: Fri 25 Sep 2026 09:02:35 +0000
Manifest next update: Sat 26 Sep 2026 09:02:35 +0000
Files and hashes: 1: J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa (hash: zkDVkJoPYShr6OXV8fPBb2NBPcUAp8SMVnGkrnquQLQ=)
2: KxVm34lNwlkrW5qrAU5Pjsony_E.roa (hash: Cv1CrCyZqmGqKdKvIPVNc1SNxI2ozAn85+sLNV8uOnE=)
3: NLMfafzU7VExoTlBfOtyA1c7dHs.crl (hash: HbMY0eQv33JHuEb3MoHuqHaxUbnzBb/7DhHF7seuDjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:5f:39:0b:cd:68:c0:6d:fb:5b:56:25:e6:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Validity
Not Before: Sep 25 09:02:35 2026 GMT
Not After : Sep 26 09:02:35 2026 GMT
Subject: CN=70ef3346d4c91748729d4d1855441ef1ce207292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:42:29:84:1d:27:86:7e:f5:28:a0:e0:38:
03:fb:09:62:3c:9b:70:22:b3:5b:af:cb:51:f4:cc:
f6:53:f8:7d:5e:09:9b:ce:76:e4:21:29:1b:62:44:
43:35:50:a1:cb:03:a6:53:31:13:41:39:3c:04:f5:
a4:2d:39:51:76:99:98:98:b4:dd:c7:0b:29:6d:23:
ae:8d:a2:00:ae:17:06:ca:7b:82:3e:06:f9:5a:b6:
6a:ba:c3:d9:a6:63:46:51:ed:7a:7e:a2:4a:99:57:
28:57:ea:f4:21:d8:2f:b6:19:f8:27:48:2c:85:4d:
33:63:c5:4f:91:51:77:55:53:a7:db:5c:8d:e0:2b:
f2:71:8f:87:41:35:55:49:53:1c:54:74:1f:63:d6:
95:91:48:46:48:16:75:4e:36:77:ed:05:90:f4:50:
bb:d9:a8:62:aa:01:11:b9:88:67:98:07:8d:b4:eb:
3d:a8:26:34:11:1a:bd:ae:9f:7e:dd:10:9f:98:37:
fd:4f:9a:b7:34:12:71:a5:70:13:da:fb:79:51:3e:
11:54:14:6f:2a:74:3c:b5:8f:39:02:19:f6:24:82:
b5:02:0a:8d:46:15:c8:30:40:dc:a7:18:da:0e:e0:
23:65:bf:a5:37:81:86:30:15:99:03:15:97:13:19:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:33:46:D4:C9:17:48:72:9D:4D:18:55:44:1E:F1:CE:20:72:92
X509v3 Authority Key Identifier:
keyid:34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:09:4b:78:f4:23:e2:27:cd:7c:30:d7:4e:5d:7e:64:b1:
5b:e5:6d:0d:10:d6:24:b9:17:4d:e3:d7:47:32:0f:a9:6d:ea:
95:1b:d2:a2:28:29:3c:3f:b8:73:94:35:01:0d:b8:c8:ba:be:
56:41:8c:7e:ef:1e:1f:99:21:03:64:bb:ea:15:2b:88:1c:b5:
d3:18:42:da:13:33:e8:e7:cb:3e:4c:75:f7:e8:25:2a:cf:fe:
aa:b0:bc:f5:6c:1d:f7:2f:49:04:ae:b7:45:ef:ac:7b:22:b8:
fe:59:68:82:0f:dc:de:dc:fe:64:8f:ad:a0:2d:eb:f9:f1:f1:
f6:a7:b1:49:27:c0:76:9d:ee:c0:d4:af:17:10:83:d2:c0:c0:
ec:84:e3:09:f6:ee:a4:df:af:7b:f8:19:1d:dd:21:9f:30:03:
10:29:68:24:58:b5:b5:4a:fd:9e:fd:9b:e6:5b:10:f6:63:60:
38:0d:2b:1c:be:da:cb:70:2c:d9:dc:22:fd:d7:d4:0f:20:0a:
6f:df:be:4b:b8:7c:b1:0c:d1:63:ab:51:a3:07:36:c0:f3:f1:
28:76:4f:5b:3d:e9:af:86:9c:2d:6f:99:85:b1:df:60:80:0f:
b1:64:3d:7a:14:80:89:ba:b9:78:53:b1:ca:2a:98:00:4e:3d:
38:b7:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:56:43 2026 by rpki-client