
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: IUrWZW3FUlh8cFh+IrE1bZZZX2kyj+8CBkbdGOsnep8=
Subject key identifier: 33:79:85:F7:81:D6:CD:E2:E0:40:8A:E6:C0:A6:9F:BD:DB:70:B1:2E
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 01A0D1C90BEB2C0E951AFDA788098230DAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 1142
Signing time: Thu 24 Sep 2026 05:00:08 +0000
Manifest this update: Thu 24 Sep 2026 05:00:08 +0000
Manifest next update: Fri 25 Sep 2026 05:00:08 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: wIeUyjeecVPlERvRyO0PCxJBy9iiOAz52ZbOFC0cU+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:0b:eb:2c:0e:95:1a:fd:a7:88:09:82:30:da:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Sep 24 05:00:08 2026 GMT
Not After : Sep 25 05:00:08 2026 GMT
Subject: CN=337985f781d6cde2e0408ae6c0a69fbddb70b12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:c9:96:61:ac:20:87:09:fc:54:a3:e7:d2:
ba:d4:28:9a:da:ce:e5:31:28:13:5c:18:1f:b1:c3:
99:23:a4:a1:8b:60:d1:cc:02:b7:f1:16:19:8a:68:
76:52:5e:8c:3f:c9:3b:0f:9f:8e:04:c6:57:66:af:
f8:9e:5d:08:c0:ce:15:e4:b6:58:af:09:63:5a:d8:
aa:5c:25:2a:02:4e:41:65:85:8a:d0:9e:1f:14:a0:
5b:d7:90:fd:11:6f:68:6f:f5:da:bc:22:c1:c6:94:
88:7a:8d:56:12:9e:35:b3:a3:44:5f:6a:cd:ac:ec:
db:75:27:cc:cc:74:75:68:b6:6a:c0:c2:29:9a:df:
8c:71:1e:5e:63:8e:a5:14:45:1a:7c:93:38:d7:df:
5e:25:52:fa:ea:ad:93:e4:09:5a:3a:04:99:b6:ca:
12:38:6a:a0:47:7c:be:46:3a:a2:f9:80:fb:1e:15:
ac:c2:2f:7e:bf:b7:04:5d:30:5a:dc:a4:db:e0:f1:
6a:fd:2f:bb:e1:6e:4a:30:91:ac:37:6a:f1:1a:35:
29:df:8a:07:bd:dc:96:c0:7b:9b:7c:b2:51:1c:5e:
69:e5:f9:68:b4:29:df:ee:7e:2c:d0:2b:d5:96:ee:
14:77:56:fc:3b:04:23:1b:c7:88:ce:49:b1:f4:95:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:85:F7:81:D6:CD:E2:E0:40:8A:E6:C0:A6:9F:BD:DB:70:B1:2E
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c6:47:a1:46:13:88:04:4a:ff:4b:ed:92:8f:bf:47:4d:58:
7b:29:3f:f0:8b:0a:92:05:3d:e8:8d:6f:1f:02:40:56:bc:20:
b4:50:e5:61:1b:94:8c:8d:a3:64:88:29:3d:d0:61:ab:71:3e:
e0:66:6e:16:94:f9:a0:0e:ad:e4:2e:9f:73:e6:fe:f9:97:18:
36:83:21:1c:15:0b:14:87:2d:2f:e0:52:5d:6f:b7:52:ba:db:
b2:11:b8:07:e4:1f:45:c0:b7:26:09:fd:d8:46:ca:e7:e9:3b:
4a:9f:8f:f8:79:41:b2:d9:19:a6:ae:4a:0b:58:94:67:f3:b9:
89:76:6b:e5:76:b7:15:06:d8:0c:65:eb:f0:62:c0:74:7a:e1:
ae:4f:40:cc:12:37:cb:68:bb:01:5e:28:58:47:52:d9:27:c0:
3c:90:3c:38:48:39:eb:ec:56:ef:d6:0f:c1:f3:72:7d:78:b5:
2c:47:44:6d:90:f0:ad:0d:16:87:20:96:3f:72:e8:e4:31:4d:
86:b9:49:9d:e8:09:7e:50:46:ed:77:f9:9e:b3:fb:6d:7d:12:
40:49:31:c6:0a:c6:b2:7a:63:87:7f:4c:87:52:07:ba:bc:f2:
32:da:45:6b:ba:28:8c:0a:92:0b:c0:31:97:8a:90:a0:fe:2e:
13:4a:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:56:46 2026 by rpki-client