Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
File: nTHCM8vSZtsCYgud65DQjkFpLmc.mft (raw, json)
Hash identifier: byh9wWsvmjuMXDrGAJjAkqjDAZs8cT+bfhcQiHRSOtU=
Subject key identifier: 35:3E:CD:29:C7:E6:2D:F4:F8:2E:DA:C5:DC:ED:CF:83:4C:EB:94:87
Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67
Certificate serial: 01A0D8A8E83E0A407EDA561CBEDB25FDB51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
Manifest number: 1150
Signing time: Fri 25 Sep 2026 13:02:23 +0000
Manifest this update: Fri 25 Sep 2026 13:02:23 +0000
Manifest next update: Sat 26 Sep 2026 13:02:23 +0000
Files and hashes: 1: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (hash: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY=)
2: nTHCM8vSZtsCYgud65DQjkFpLmc.crl (hash: pSLZEJGHNYHe0KuEhLcCRRf/K/R4qVRSViuyiustz6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:e8:3e:0a:40:7e:da:56:1c:be:db:25:fd:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67
Validity
Not Before: Sep 25 13:02:23 2026 GMT
Not After : Sep 26 13:02:23 2026 GMT
Subject: CN=353ecd29c7e62df4f82edac5dcedcf834ceb9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:12:62:2c:08:84:3b:07:75:aa:5c:af:80:
1c:c3:91:75:e4:46:30:97:c1:e3:95:1e:00:06:75:
4a:1f:31:98:6a:d0:2d:da:29:dc:0d:67:15:21:c2:
b6:90:da:94:d8:6e:8b:22:82:5f:24:bd:83:ab:51:
6f:25:f1:79:6d:e6:47:65:e4:34:f4:ed:b1:dd:f9:
f0:15:7b:cd:19:d0:0f:8e:7a:16:67:8a:4e:be:92:
7e:b2:24:d1:05:e6:a3:22:93:4e:d3:0c:a0:00:76:
7d:14:4d:5a:d3:ad:33:79:d5:fb:6c:08:0a:ce:24:
06:01:61:89:59:19:df:bd:a7:12:80:56:70:cf:bc:
13:1e:cc:d3:e9:0e:3c:e8:06:b9:81:88:66:d8:68:
ca:de:ce:71:eb:1e:ec:d4:ca:ef:4c:1f:ce:06:d0:
6b:dc:cb:7d:85:24:4d:20:f3:8b:3a:fa:e9:03:16:
02:dd:b7:ad:8c:db:b7:fa:2d:a9:3b:63:63:c9:8b:
c7:ca:db:c6:84:f1:0d:e2:37:80:3d:63:a1:86:45:
00:06:71:6a:cd:1a:17:4b:da:60:17:18:db:f1:f9:
92:d7:bd:e7:e6:b5:6e:25:ca:f2:7d:cb:3b:08:3a:
32:95:32:96:f9:ba:21:a7:a5:6b:7f:89:0b:a9:9e:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:CD:29:C7:E6:2D:F4:F8:2E:DA:C5:DC:ED:CF:83:4C:EB:94:87
X509v3 Authority Key Identifier:
keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:87:53:74:24:d9:51:25:27:53:d6:11:5f:a5:bb:6d:a7:d6:
b3:d4:50:6a:2a:12:7d:e3:1b:bb:33:5c:4a:2b:a9:2c:af:da:
c9:77:94:d4:37:ae:1f:e2:de:38:4d:37:74:24:27:10:de:39:
80:81:bc:33:6f:a2:b0:1e:1e:fc:52:cd:8b:88:75:91:8d:2b:
36:89:3f:0f:80:fc:e1:5c:b4:cc:3f:bf:51:67:63:72:da:71:
31:4e:c6:0e:6c:03:dd:52:62:46:b9:dd:d3:d6:2d:ed:88:d0:
6e:e9:40:d9:27:db:13:1d:2f:c7:1a:90:f6:cf:70:1a:aa:48:
d0:c0:d1:27:24:06:e9:db:fb:cd:02:34:18:52:88:5c:51:bb:
78:6d:13:98:30:be:49:ca:8f:e0:50:50:d5:81:f0:0c:d6:fb:
8b:6c:06:c8:5d:af:39:df:ab:5e:69:d2:47:70:42:da:bd:2c:
a6:c2:b0:d5:c2:a0:b5:88:3e:ec:e1:e5:40:38:7a:52:69:6a:
3d:59:7b:1a:8a:ef:d7:9b:cc:c6:73:6f:73:3b:29:cf:a7:3d:
cf:ad:69:ef:e1:c8:39:f5:06:f7:96:04:83:d8:60:ea:77:2f:
bd:a1:cc:62:65:f0:9f:51:ca:5a:3b:cd:54:53:1f:e1:38:57:
5d:07:eb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:33:29 2026 by rpki-client