Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
File: noHdqtiPcHFhLXw7dhjiTRpSM7s.mft (raw, json)
Hash identifier: Cf+dRMAGKkv/gD9fugj8GL9vcuRiml+XvLYZiRpDYK8=
Subject key identifier: B7:6F:AC:BB:CB:E8:41:27:42:49:B6:88:96:2E:CF:A3:D7:1E:FD:2C
Authority key identifier: 9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
Certificate issuer: /CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Certificate serial: 01A0DFF35F1E2932960585AC881F3CA47FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
Manifest number: 111F
Signing time: Sat 26 Sep 2026 23:01:03 +0000
Manifest this update: Sat 26 Sep 2026 23:01:03 +0000
Manifest next update: Sun 27 Sep 2026 23:01:03 +0000
Files and hashes: 1: WiXt3vLRsEbHO4V69Ernp9Pa3Dc.roa (hash: 5/0dAfxj8roSB2N+rzuNs50RghH7Q+7eLmnDrf3ejec=)
2: noHdqtiPcHFhLXw7dhjiTRpSM7s.crl (hash: SBKcwo42VQyI/IAKGnBz70eGo/qM19WEhgoI+2wmj20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:5f:1e:29:32:96:05:85:ac:88:1f:3c:a4:7f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e81ddaad88f7071612d7c3b7618e24d1a5233bb
Validity
Not Before: Sep 26 23:01:03 2026 GMT
Not After : Sep 27 23:01:03 2026 GMT
Subject: CN=b76facbbcbe841274249b688962ecfa3d71efd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:6c:35:5e:17:20:bf:1b:59:90:45:97:62:
94:ef:23:30:d9:7d:3a:02:61:14:93:a2:ec:88:0a:
9d:19:5f:36:be:d2:55:d9:56:6b:f3:05:48:97:a2:
ec:9e:c6:f3:2e:b2:99:4f:04:52:a9:cf:9d:e1:81:
9c:90:f3:b6:c0:16:f8:cb:73:ff:66:e8:ba:6a:88:
1d:c6:16:aa:ec:4a:ed:c0:ff:24:85:e2:2d:ae:1c:
bf:3a:df:29:24:8f:c5:34:1e:7f:0e:9e:15:85:bf:
3e:a1:1c:08:79:b7:71:7d:b1:df:3b:ce:0b:99:9f:
d8:96:b4:05:9c:3d:bf:3f:33:e4:48:ee:83:ad:6c:
06:7a:49:4b:83:78:2a:30:cd:9a:c8:75:ee:1e:18:
60:a4:c0:dc:25:8c:e0:25:c2:93:61:3e:98:03:66:
5d:f5:a7:24:6a:95:ea:88:75:e5:90:9d:75:6f:b2:
72:b8:b1:c9:5e:b0:3b:1d:17:e8:e5:37:95:97:b5:
ec:a6:c4:6d:32:00:5c:30:f4:69:1a:3d:8f:c0:68:
73:06:eb:3b:7e:5b:b4:89:7f:11:1c:7e:51:2d:84:
3b:63:f9:44:76:38:15:68:7a:74:57:cc:db:ab:90:
90:7c:4e:11:07:2c:9a:7a:cd:1f:5b:da:c5:00:57:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:AC:BB:CB:E8:41:27:42:49:B6:88:96:2E:CF:A3:D7:1E:FD:2C
X509v3 Authority Key Identifier:
keyid:9E:81:DD:AA:D8:8F:70:71:61:2D:7C:3B:76:18:E2:4D:1A:52:33:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noHdqtiPcHFhLXw7dhjiTRpSM7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e22dc2-f406-40c9-ba5f-bf69b12a6744/1/noHdqtiPcHFhLXw7dhjiTRpSM7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:9d:64:7f:30:f0:cb:09:e4:02:3f:a7:47:a7:3f:ec:8c:06:
fd:b3:14:17:c8:2f:a1:54:81:d1:40:78:db:7a:ee:9a:52:8d:
ef:cc:cd:e9:f8:bc:74:b5:3a:4a:f9:df:f1:47:a5:85:14:27:
2d:f2:c8:b2:1c:d5:93:7c:f0:cb:60:b5:e5:f3:3c:1c:da:92:
e8:86:e1:0e:8b:32:0d:04:65:15:ca:a2:a3:01:02:15:df:05:
bb:25:a2:d0:8e:2e:65:fa:95:e2:f8:c8:29:84:dc:00:b1:52:
43:a5:0b:28:b2:ca:ed:47:66:0e:84:b5:35:58:75:59:8c:08:
89:da:ee:0f:7f:a1:38:99:cf:38:6b:74:e1:91:2f:65:d9:7f:
75:83:e0:84:14:b9:5d:44:18:59:57:7a:13:9d:02:75:17:6a:
d7:b8:9b:4a:5f:b9:d7:53:40:49:3f:70:1a:31:4f:6b:93:e8:
bb:81:00:82:20:85:16:38:d7:ba:3a:c1:98:78:25:86:e8:02:
9e:45:b0:dd:30:24:3f:a3:81:ab:00:64:15:9f:14:df:0d:70:
7e:07:d2:9d:06:ee:a8:61:b5:21:d5:27:de:f1:a4:f9:22:11:
42:2b:bc:b7:d4:8f:97:7c:31:39:a7:63:d7:a3:39:39:79:62:
e2:62:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:42:19 2026 by rpki-client