Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
File: nTHCM8vSZtsCYgud65DQjkFpLmc.mft (raw, json)
Hash identifier: whePl1kInv5LOb9oD9yCSeog92UwExLdoerdWNRe1DI=
Subject key identifier: 3C:BF:99:A8:92:B9:3E:D6:9C:E2:CF:E3:FE:3D:F4:C0:FC:26:B3:44
Authority key identifier: 9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
Certificate issuer: /CN=9d31c233cbd266db02620b9deb90d08e41692e67
Certificate serial: 01A0D4CB01DBD879552020F6FE3E1DB30DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
Manifest number: 114E
Signing time: Thu 24 Sep 2026 19:01:09 +0000
Manifest this update: Thu 24 Sep 2026 19:01:09 +0000
Manifest next update: Fri 25 Sep 2026 19:01:09 +0000
Files and hashes: 1: 3kSbU0e5h99O_Tm79lGnT_Tp5Hc.roa (hash: RwQ/Qy1kKylc45gWPZOazTOGnIJ82QduJgu3sQQqwXY=)
2: nTHCM8vSZtsCYgud65DQjkFpLmc.crl (hash: iRHqpimAAstpYe6DLDhe3mfXFEW8jP6avOZ4956kxH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:01:db:d8:79:55:20:20:f6:fe:3e:1d:b3:0d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d31c233cbd266db02620b9deb90d08e41692e67
Validity
Not Before: Sep 24 19:01:09 2026 GMT
Not After : Sep 25 19:01:09 2026 GMT
Subject: CN=3cbf99a892b93ed69ce2cfe3fe3df4c0fc26b344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:e9:d5:f7:56:00:ec:f8:11:5a:1e:69:15:
75:b5:87:29:ef:03:10:ef:1f:36:73:ef:5a:c8:68:
69:67:eb:62:bb:c4:2a:ed:43:c5:ad:44:cd:13:84:
e5:a4:44:f0:66:1f:e6:68:f5:61:94:42:d9:86:18:
f0:22:d8:c0:bb:c0:24:47:42:40:0c:79:e3:1f:f1:
41:a3:58:f4:5f:cf:6e:27:5f:db:f4:92:b2:2c:1b:
07:a8:31:64:df:d2:d5:67:6a:2e:32:5e:09:5d:44:
5a:c3:5c:ff:95:50:f4:a2:a6:67:d5:ab:32:e3:04:
da:78:b2:89:8b:ac:02:05:df:f5:e3:22:16:e6:3f:
1b:fe:18:69:dc:ff:79:37:f3:87:d1:98:0c:35:de:
5d:6d:fe:21:21:ed:28:85:1f:9a:2c:38:90:f0:61:
8f:2a:c4:cc:8c:7a:41:54:ab:57:24:b8:06:5e:9c:
3f:98:75:87:1b:cd:71:c3:d2:6d:9b:f9:0b:d0:d1:
51:31:5b:f6:03:f2:f0:f7:53:bb:58:b3:e0:60:aa:
47:a8:45:a5:59:e5:0a:45:ea:12:a5:8b:6f:2f:8c:
47:c2:04:9f:af:0e:b3:4d:cc:e9:27:e2:db:bf:99:
48:9d:77:5a:d1:b3:a4:97:e1:ba:87:31:1b:60:8c:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:99:A8:92:B9:3E:D6:9C:E2:CF:E3:FE:3D:F4:C0:FC:26:B3:44
X509v3 Authority Key Identifier:
keyid:9D:31:C2:33:CB:D2:66:DB:02:62:0B:9D:EB:90:D0:8E:41:69:2E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTHCM8vSZtsCYgud65DQjkFpLmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/34223a-e77e-4544-a207-fa1725034491/1/nTHCM8vSZtsCYgud65DQjkFpLmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:de:a0:27:01:fd:f4:ea:9e:44:5f:a6:dd:d1:77:8d:7c:0c:
bb:4a:32:9a:1c:97:a8:9b:1c:09:7d:36:95:33:93:2d:01:39:
b0:e4:a0:ab:67:cb:1f:54:4c:c5:52:08:98:ab:44:1c:86:c1:
30:c9:69:95:3d:cc:af:2e:f4:bf:85:1f:6c:9e:5a:76:67:5b:
22:d8:4d:8d:6c:0a:5b:aa:7c:fd:98:e7:77:81:2f:9e:d2:49:
10:da:77:ee:6a:ae:96:3a:c4:1e:15:63:65:06:cb:74:2a:1d:
41:70:f0:e6:47:e3:ec:9f:26:0e:43:aa:8b:3f:59:51:42:ec:
a7:92:08:01:c2:92:5b:f8:0a:47:54:bf:0b:22:ed:9d:7e:96:
d8:f8:28:2a:fb:d2:5c:35:0e:1e:7a:60:1b:02:94:8f:60:2c:
9d:a2:fd:af:0e:e4:c9:43:7e:ae:d4:21:8f:e9:94:2c:66:2e:
1e:13:48:ec:9c:20:d4:0b:09:28:ca:8b:e2:4a:63:b1:95:f9:
8d:de:0b:24:2a:84:17:4c:c7:d5:28:05:9f:ac:10:3a:64:2b:
86:89:dd:b7:34:4b:a7:df:97:ec:08:f2:6c:01:24:bd:b8:d6:
a0:cc:fd:b7:ca:9a:20:6d:43:96:2b:b6:f7:7b:9b:5e:fe:6d:
0d:cf:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:35 2026 by rpki-client