Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: NkvB8l8mvSCAmVHYYI1bUvr6iB5uH9urMg3YHNtqp3k=
Subject key identifier: 6B:DB:56:D9:8B:F0:E4:DD:F3:0D:A2:98:86:18:33:A7:DF:CE:39:A1
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 01A0EAAE9F425FB81017E362C30587D336BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 082B
Signing time: Tue 29 Sep 2026 01:01:47 +0000
Manifest this update: Tue 29 Sep 2026 01:01:47 +0000
Manifest next update: Wed 30 Sep 2026 01:01:47 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: QEp1raYLR6Np+HENTTukAlAUJOahxJSut4m+EPO//JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:9f:42:5f:b8:10:17:e3:62:c3:05:87:d3:36:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Sep 29 01:01:47 2026 GMT
Not After : Sep 30 01:01:47 2026 GMT
Subject: CN=6bdb56d98bf0e4ddf30da298861833a7dfce39a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:4f:8b:48:1f:92:c1:e4:cf:db:44:4e:22:
1a:f0:1c:71:2e:d5:83:4e:08:0c:01:fc:18:08:d1:
3c:71:fa:54:ee:d4:3d:67:9d:81:88:0c:6a:5b:04:
3c:43:9b:d5:c4:e5:c5:01:c9:5f:80:19:0e:bc:d3:
b4:c4:e1:ea:f0:25:94:d8:7c:4e:d3:8c:6e:31:da:
69:2c:f0:60:1f:e2:2b:6d:7b:8e:8d:fb:78:2c:8d:
cc:f1:16:1c:bb:7b:5c:e5:2e:28:45:63:78:14:5e:
43:f5:72:f0:65:ca:08:65:cf:7b:06:5a:6a:54:de:
18:c7:97:57:56:d3:8f:d0:d7:a6:09:60:60:04:5f:
f8:5e:97:14:8e:c5:d8:de:87:0a:2a:8f:20:9e:ac:
78:ae:f6:ce:87:53:55:78:ee:9b:b1:d8:8d:5e:0b:
d4:f7:24:f4:6d:44:90:64:72:d5:26:c3:4e:03:46:
0f:33:07:26:27:71:53:5d:bd:d7:4b:f2:4b:a5:bd:
69:e0:44:51:6d:1d:dd:c1:99:ba:3c:58:b9:00:a3:
97:55:85:3d:d3:84:fc:12:a6:d5:b4:51:69:16:1e:
ec:ae:c3:0b:d4:47:42:73:fc:30:51:4f:9c:08:2c:
47:3d:c0:5c:a6:a4:64:5f:4c:8e:61:32:6c:71:55:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:56:D9:8B:F0:E4:DD:F3:0D:A2:98:86:18:33:A7:DF:CE:39:A1
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e6:e8:20:cd:c6:01:22:1a:66:0f:8d:9f:47:2a:b4:4e:25:
ec:fa:37:37:3a:73:88:96:15:92:6d:65:c1:af:9f:f1:a4:fa:
a0:51:df:2f:bc:c8:b6:aa:09:aa:80:a8:b2:84:39:28:f2:b2:
66:93:03:bc:58:88:ec:d8:34:ce:78:8f:79:84:a2:67:dc:51:
4a:cf:0e:08:53:c3:83:e7:f7:04:f1:09:0f:c0:74:78:8e:fd:
8b:ab:86:b2:8a:ce:3e:35:b1:1d:6b:e1:b6:46:c4:2a:0c:68:
ba:08:fb:0d:96:4c:04:eb:f5:00:52:03:f7:6a:5a:7e:1f:4f:
39:cc:29:5a:f8:69:50:c2:48:92:d9:dd:ab:0c:d9:f1:e6:12:
1d:87:66:ae:a9:5c:9c:15:c1:5f:02:97:fa:2a:8e:e3:1e:92:
5e:ec:47:f0:ec:9c:6f:18:d7:18:f6:4b:0a:52:35:6b:ac:33:
4f:c4:48:d7:69:b7:a2:f8:38:e0:79:ab:ae:dc:f1:fc:b4:38:
d5:e3:70:7c:8b:19:36:da:d4:06:46:41:90:37:2e:2e:82:fc:
74:cf:dc:8b:3e:16:4f:a3:ac:67:1a:2e:40:91:89:49:2f:c9:
77:8e:3d:a9:14:94:94:5f:d4:23:0a:15:f0:63:90:8b:03:c9:
d5:d6:dd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:58:57 2026 by rpki-client