Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
File: ncIAmtRoV1bPSFCSRpxi4JndoKI.mft (raw, json)
Hash identifier: W3sE0kICMCB0DgiO3wlgx5Ek12IH1yz9sXextAbx27M=
Subject key identifier: 6A:68:09:78:6C:2E:53:7C:6A:49:28:4A:40:D1:FB:23:C6:8E:32:A6
Authority key identifier: 9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
Certificate issuer: /CN=9dc2009ad4685756cf485092469c62e099dda0a2
Certificate serial: 01A0EA40A3DCBE1250ACE0286EB41D7AE2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
Manifest number: 012B
Signing time: Mon 28 Sep 2026 23:01:39 +0000
Manifest this update: Mon 28 Sep 2026 23:01:39 +0000
Manifest next update: Tue 29 Sep 2026 23:01:39 +0000
Files and hashes: 1: CxXRfkpXlTlPWJ2wjSqfFZc69Vw.roa (hash: 63orT1mBEvcBgphBmzMsfdldXxJLbPfrBInL5/2JLFc=)
2: ncIAmtRoV1bPSFCSRpxi4JndoKI.crl (hash: 1QAUh+9HyzKALzJ/URg/7LsITS0/KGu2kVEpkQ+pAVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:a3:dc:be:12:50:ac:e0:28:6e:b4:1d:7a:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc2009ad4685756cf485092469c62e099dda0a2
Validity
Not Before: Sep 28 23:01:39 2026 GMT
Not After : Sep 29 23:01:39 2026 GMT
Subject: CN=6a6809786c2e537c6a49284a40d1fb23c68e32a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:28:6f:ac:a7:0c:20:88:47:32:eb:46:90:d4:
3a:1b:9c:53:81:ba:1d:d0:de:56:46:f5:de:80:95:
57:5d:57:e9:b9:5a:37:49:af:db:8e:61:84:4e:6a:
06:ad:3b:2d:f7:b6:0d:6a:5a:33:68:2b:7e:de:d8:
09:44:9e:f9:60:06:34:56:95:0f:a9:0a:cc:5a:3e:
90:8e:68:13:4b:a6:b8:b3:70:5d:1d:fb:e4:63:51:
35:41:e6:0a:33:14:c3:97:dd:95:a6:03:9e:d3:16:
72:86:d1:6b:8b:20:9b:94:0d:f9:a4:a1:df:2e:86:
b0:3a:7b:7f:d3:c6:33:b0:06:64:c8:d8:2a:f2:58:
15:1d:6f:ca:e8:ab:40:37:88:01:54:9f:c9:a6:21:
98:4f:79:ed:28:a2:ed:6a:4a:ca:44:00:a0:58:58:
a2:f8:17:38:f5:1a:4b:80:e3:36:ac:0a:4c:65:c9:
72:91:35:5d:9a:0c:89:c5:74:84:28:cb:8e:89:81:
7a:a9:dd:2c:86:38:b3:c0:f9:06:1d:fa:02:65:4e:
62:4b:f7:6a:72:b3:c4:ef:39:7c:b4:ec:c2:6b:01:
a2:4c:c3:3c:c0:d1:79:33:0b:78:be:4a:09:7d:c7:
ea:b0:e3:f7:6f:c3:0e:0e:2e:b2:f8:23:88:6f:c2:
d2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:09:78:6C:2E:53:7C:6A:49:28:4A:40:D1:FB:23:C6:8E:32:A6
X509v3 Authority Key Identifier:
keyid:9D:C2:00:9A:D4:68:57:56:CF:48:50:92:46:9C:62:E0:99:DD:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncIAmtRoV1bPSFCSRpxi4JndoKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2dd335-49ac-41f9-b5c3-f8ec8bf15baa/1/ncIAmtRoV1bPSFCSRpxi4JndoKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:86:93:01:a5:9c:79:09:27:5a:ab:34:df:bd:4a:f7:46:
fb:fc:01:a4:c3:6d:84:38:c7:dc:1f:2d:e1:51:6d:e1:f2:a0:
af:17:74:a5:bb:91:a5:c8:de:a6:da:d8:3f:7b:70:5f:76:16:
ed:75:b8:b4:77:9f:1a:a1:dd:bf:68:fa:fa:94:e9:52:f0:5b:
65:68:fa:33:67:79:3e:e0:65:e9:39:0f:8a:6e:41:51:d0:c0:
fe:79:b3:43:30:5c:af:c3:a8:50:85:71:20:a4:f6:c1:05:35:
cf:06:08:0c:2c:23:ac:e4:03:da:97:f2:79:c5:c0:b9:c6:b3:
c4:e8:cd:68:b7:56:5b:34:7b:0e:56:85:92:45:1e:04:f3:a9:
27:40:ae:21:e8:f7:af:a3:ab:9b:43:6f:91:f5:26:dd:85:9c:
11:40:c5:30:34:2f:3f:5c:53:d0:4d:1e:d5:d1:92:cd:38:e8:
58:3e:fc:6c:3d:da:82:bb:e9:7c:1d:a2:63:05:e3:00:bf:c2:
71:66:47:b0:13:ec:a5:46:9f:f9:91:15:e8:78:a0:7d:7e:ee:
43:4d:38:e0:dc:08:31:8c:44:9d:29:66:72:e9:be:ff:91:a3:
11:7a:b1:86:a4:53:03:ec:59:a6:97:54:a3:02:c5:84:16:bb:
32:c1:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:51:24 2026 by rpki-client