Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: FphR1IBhqjvglCmmPD15U4Y7eqDozdlFib+MQD9lQz4=
Subject key identifier: 92:54:2D:9F:A9:2B:E9:27:E8:C7:5F:77:A8:47:D6:35:E2:BA:5A:6A
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01A12B0D830F1022EE9211338580ACB772E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 13:01:08 +0000
Manifest this update: Sun 11 Oct 2026 13:01:08 +0000
Manifest next update: Mon 12 Oct 2026 13:01:08 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: Ck9KNV7+EXAMajlc8mpnFUBlowQw2I0OtNCMgKL/Is8=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:83:0f:10:22:ee:92:11:33:85:80:ac:b7:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Oct 11 13:01:08 2026 GMT
Not After : Oct 12 13:01:08 2026 GMT
Subject: CN=92542d9fa92be927e8c75f77a847d635e2ba5a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:02:ed:5d:78:1b:8a:e5:3d:34:11:0b:9f:
2c:50:0b:af:0e:51:49:46:b0:cd:f1:fc:d8:f2:72:
6d:8c:81:96:cf:71:61:22:e8:f0:15:cb:2d:20:0c:
8f:63:7d:7b:49:15:b4:df:e5:3e:42:72:a9:17:c8:
4c:58:1e:8c:73:8d:39:0a:67:72:fd:18:8c:50:7e:
14:31:0b:b9:37:27:35:b7:b3:ca:a2:00:3d:a3:78:
9b:07:fa:8f:85:d5:09:80:92:bd:d1:4e:cd:36:dc:
4b:0f:cc:89:de:1d:fe:fe:93:a6:f5:07:39:a1:0e:
b1:b8:ca:48:e5:6b:12:8c:9d:48:ae:c6:50:5e:3c:
75:2f:e5:41:64:2f:4a:d5:e4:c5:9b:aa:37:d9:b1:
e2:8a:fc:51:71:ab:2f:47:21:17:16:88:82:d2:77:
b6:06:ae:f2:ff:3b:8c:57:04:b8:2e:22:12:09:0d:
14:32:76:60:e2:b9:09:23:e3:d0:dd:14:0a:99:5f:
91:61:d7:79:5a:c9:32:9e:b8:3f:db:d6:2d:7a:04:
78:f7:1f:9c:f8:1d:11:ff:6d:cd:6c:0f:81:f4:82:
cb:db:fe:45:4d:60:ee:ba:cc:90:dc:56:85:72:76:
8b:d4:60:67:8b:f4:5d:db:f7:7e:89:fb:26:52:2e:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:2D:9F:A9:2B:E9:27:E8:C7:5F:77:A8:47:D6:35:E2:BA:5A:6A
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:58:9a:bc:5e:ac:b4:23:b4:bc:7e:d1:c2:f1:7c:36:20:d5:
bb:f2:13:17:eb:b3:89:52:44:7f:6a:2c:50:e1:6f:e9:61:15:
31:16:a5:23:c7:f3:5a:0e:e9:13:de:b5:34:b0:d9:03:2f:6b:
39:fd:83:f4:20:93:da:9e:40:5d:7f:41:c1:48:01:c1:e4:8f:
84:0d:1c:06:9e:e1:68:eb:7a:c9:82:fb:b4:01:6d:89:67:2c:
01:9a:2d:75:5d:5b:a4:d4:ba:f0:09:6d:15:9f:b5:05:5b:b2:
96:29:3b:5d:e6:3c:dd:fa:74:9a:e7:06:bb:73:15:81:ed:d5:
26:db:85:e9:c6:53:79:a0:a4:c7:74:7e:1d:6a:75:ca:1c:7f:
e7:9c:0c:35:1f:ad:dd:c6:bd:a1:ab:bd:e8:f3:c2:19:51:f4:
75:b4:d7:66:48:5d:ea:8e:1f:9b:7c:7a:6b:bc:b0:f3:7f:3f:
ca:f9:1a:a4:e4:24:48:11:e3:e4:aa:c5:ce:e4:49:59:ef:83:
47:ed:2a:7b:fe:91:70:71:0a:40:28:20:5a:60:9d:c1:eb:63:
97:f8:90:95:74:40:71:5b:ee:c3:18:63:a9:a9:54:61:5f:9b:
3d:7a:d5:ab:aa:e8:2b:49:52:93:5b:98:9a:c2:80:ac:ea:27:
45:80:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:42:59 2026 by rpki-client