
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: 8E938WySEQTzMa8FksJSLsj2mEw8HpNn5DqPX2sKDm0=
Subject key identifier: 1D:92:98:8A:69:05:F5:B5:9F:0A:B5:98:30:23:46:9E:A4:30:88:4B
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 01A114F3600438527C478D96833673A3748E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1A8B
Signing time: Wed 07 Oct 2026 06:00:56 +0000
Manifest this update: Wed 07 Oct 2026 06:00:56 +0000
Manifest next update: Thu 08 Oct 2026 06:00:56 +0000
Files and hashes: 1: 2Ii2CAhksIObnY9cdUDA1cuJZdo.roa (hash: ZugaVf2Cp4EBmlxQ0H1edkLbTqWn+CzcKcFRvVcmckM=)
2: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: uKPhBnd7lU+y6G7OB8MFZKNmVXKCqaUkB6JC9Y8Tais=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:60:04:38:52:7c:47:8d:96:83:36:73:a3:74:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Oct 7 06:00:56 2026 GMT
Not After : Oct 8 06:00:56 2026 GMT
Subject: CN=1d92988a6905f5b59f0ab5983023469ea430884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:e8:77:99:56:ca:e6:6f:5e:53:1b:88:56:
27:92:79:83:d3:76:6f:f4:61:c7:e9:5a:68:de:51:
53:9d:25:86:40:d1:93:91:c1:9d:98:65:46:11:26:
c3:d7:ab:a4:23:14:bb:cb:95:5f:e5:dc:92:63:04:
cf:d8:65:84:1d:e9:94:da:e6:6c:42:8f:c0:86:26:
6c:d5:6b:29:7b:37:ae:20:a9:24:35:a4:86:42:99:
10:c5:70:90:3f:b8:bf:fe:af:f9:c8:8d:2a:86:f8:
3d:bf:7a:96:0d:04:77:b3:2a:53:82:82:a8:dc:23:
d1:a7:c0:af:46:46:95:1d:ac:8f:dc:b7:55:04:8a:
06:a6:74:ed:63:7f:eb:84:96:9c:3d:df:aa:93:70:
89:3f:a8:64:e0:91:20:19:f7:a4:7c:6b:c0:74:69:
08:b1:37:78:55:32:6e:f5:13:55:7c:ce:53:1e:46:
9a:b8:39:6c:b0:2c:8b:38:a8:a8:ff:5d:32:3c:ab:
19:07:62:6a:cd:2d:93:35:1e:d7:2f:24:bf:5d:bd:
a8:86:9e:73:a8:51:8c:ba:58:3a:91:64:b1:d5:5c:
06:d7:39:85:c2:e8:7a:41:9b:c0:03:e7:4e:91:64:
30:bc:6a:e1:da:78:a3:da:8e:a2:a0:0a:91:e2:dd:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:98:8A:69:05:F5:B5:9F:0A:B5:98:30:23:46:9E:A4:30:88:4B
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:5d:19:ec:05:4b:72:77:9f:98:33:d4:b8:56:59:80:b9:
4d:63:fb:4a:4b:5e:ee:2b:dd:af:45:c6:9c:26:a6:e7:73:82:
e1:12:81:64:c8:b4:82:24:72:21:8c:7d:e7:04:71:ce:8e:ab:
02:91:96:b5:c2:a0:1b:85:d3:02:22:a8:ea:93:6b:ea:5d:bd:
88:96:f0:8f:a1:24:c6:d1:50:ee:6d:a2:e8:e2:5f:d6:d5:63:
22:6a:2c:17:87:14:94:48:c8:7f:39:af:27:e0:50:f5:48:93:
cf:16:49:b0:3b:9a:43:e7:68:37:fa:5e:2a:a9:2a:82:08:0a:
92:74:08:15:71:a2:3b:69:3b:ae:07:c5:bb:93:8d:37:e4:4b:
92:c7:3e:7a:97:4c:c5:82:2b:d5:a9:63:4f:87:ec:cf:2f:39:
1e:d0:1f:6e:22:4c:df:9e:9a:b0:15:f0:5a:3b:27:e8:c7:a3:
f5:a8:99:5d:0f:14:98:d0:e0:ce:cb:5a:c2:3b:a7:34:f7:cb:
29:93:05:9f:b1:72:2a:c4:a8:69:21:de:fa:44:93:9e:00:6b:
27:bf:f0:c0:aa:5b:30:c5:a7:68:36:a0:08:55:fc:b7:43:e8:
16:64:7d:a6:31:ab:10:ca:ba:4d:a2:4b:1e:63:2d:9b:0f:24:
01:89:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:21:08 2026 by rpki-client