Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
File: nxYQJZ1PXE_V109vJfcCYGbdyho.mft (raw, json)
Hash identifier: zUsYsegP5gusi3JaBbY8lEfZ6zVNfLadd6Zx3C75FF4=
Subject key identifier: C5:2A:00:B9:27:F3:B9:24:96:0E:54:E6:E8:D9:0E:72:45:FC:F9:3E
Authority key identifier: 9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
Certificate issuer: /CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Certificate serial: 01A0D3B8B71596BE1E018EB19C399782236D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
Manifest number: 74
Signing time: Thu 24 Sep 2026 14:01:32 +0000
Manifest this update: Thu 24 Sep 2026 14:01:32 +0000
Manifest next update: Fri 25 Sep 2026 14:01:32 +0000
Files and hashes: 1: nxYQJZ1PXE_V109vJfcCYGbdyho.crl (hash: kZHTuq8l/V6Hnw6oT8NDn84pubs669msyUOpXsEyQlc=)
2: oi4mpYSiovaK57ZfZlNO4DWYjA8.roa (hash: HIM928G3nU2O9SydmXSIdQ7slGUh1v0LGnhyHlXPxy4=)
3: pBBBsanOr4leF5bPPtl74nQxq2U.roa (hash: GThK88f+E0fIkwsyGb/Te2dstzqrMhLm3PX4PsqfIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:b7:15:96:be:1e:01:8e:b1:9c:39:97:82:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Validity
Not Before: Sep 24 14:01:32 2026 GMT
Not After : Sep 25 14:01:32 2026 GMT
Subject: CN=c52a00b927f3b924960e54e6e8d90e7245fcf93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:ac:d3:4c:d2:48:d5:1c:d4:93:17:55:a0:
a1:a3:87:34:d6:d7:23:11:93:be:79:a7:bc:f8:bd:
1e:3f:fa:fd:3b:fe:d2:6b:c3:7f:53:e7:d7:c7:9e:
e8:9d:0c:4e:a3:af:c9:6f:ef:61:7c:22:be:98:5e:
3b:54:d7:46:d9:a0:4a:f4:65:aa:a8:06:1c:2f:be:
b1:53:c2:89:3e:16:cf:71:2d:7e:8d:1b:8b:8c:e8:
91:9e:07:93:49:18:5f:01:67:aa:e9:ad:83:6d:9a:
e3:05:2c:a0:16:57:d4:77:8b:af:cb:af:05:fd:4d:
10:9f:ee:61:c7:42:fb:db:84:db:a7:54:7c:07:8c:
83:69:24:3a:95:b4:66:64:ac:a3:8e:0c:8d:a3:ce:
13:92:a4:0a:9b:25:fa:c4:5f:37:16:e6:3a:b1:f1:
5e:c7:96:97:8d:ee:71:db:54:8c:ba:1e:9e:6c:dd:
99:2b:f9:17:4d:09:1c:59:fc:2a:2f:68:fe:59:9d:
37:34:86:44:22:fb:cc:83:2a:b3:9c:cb:0e:53:e1:
5b:ad:d5:87:db:82:15:7b:d5:63:7d:82:72:c3:80:
41:41:6d:94:ca:55:29:7b:5f:67:9e:f1:aa:0e:6d:
1d:52:78:f7:5f:20:50:f5:21:8d:5a:dd:fa:d3:70:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:00:B9:27:F3:B9:24:96:0E:54:E6:E8:D9:0E:72:45:FC:F9:3E
X509v3 Authority Key Identifier:
keyid:9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:57:20:be:2f:ca:a0:4e:92:1d:a2:6c:63:0e:09:83:b7:
f7:b2:08:2e:d0:12:af:9a:8b:61:63:57:35:32:49:73:56:32:
4e:0d:ea:42:d3:9a:72:73:26:0e:16:dc:57:8c:7f:23:58:1d:
5a:fd:b4:41:21:eb:06:11:a4:3a:74:11:14:dd:3b:ca:73:77:
ee:33:20:99:62:d5:db:43:b0:45:8f:97:0d:ac:37:97:6a:16:
7f:19:6e:80:9c:6c:ce:a1:00:5b:1f:f8:9e:ce:2a:80:99:e0:
3e:4b:f1:ec:2c:32:c2:5d:4f:d6:a8:cc:10:10:82:e3:ca:c4:
e0:98:0f:ad:92:84:bd:6c:98:00:aa:2a:41:0b:18:6a:78:5a:
c3:98:cd:c2:cc:cb:a1:08:9f:65:0d:d0:fb:3a:91:8f:ca:ba:
58:01:24:92:9c:ac:fa:29:09:8b:05:24:91:b5:22:c9:4d:83:
9c:0a:d1:7b:f6:cb:70:23:6f:ef:eb:de:f2:89:34:85:5f:45:
9d:a5:1b:2b:a4:98:f2:2c:2f:41:94:51:83:72:5f:30:ec:02:
7b:96:69:e5:96:ee:1f:7d:44:48:dd:6b:84:fe:c5:b3:ed:92:
d5:3e:11:88:8a:34:ed:a7:c6:05:7b:3d:e1:ea:2e:76:0b:f0:
5f:ae:23:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:04 2026 by rpki-client