Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: NONZQ0CxK3DIo8aDCeuxmCkmaDhPIFp83EvR5Uej6jQ=
Subject key identifier: C2:A1:9B:C6:D5:DD:3C:BA:6E:C3:73:FF:FF:31:C1:1C:A0:D5:B7:89
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 01A0CD10FC6D0978D1F0400B35F02C7CDC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 17EB
Signing time: Wed 23 Sep 2026 07:00:37 +0000
Manifest this update: Wed 23 Sep 2026 07:00:37 +0000
Manifest next update: Thu 24 Sep 2026 07:00:37 +0000
Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: z9Z9woUC/5AylIXBJBoi7Ng+PGV89yq5VsO1Z+A0sQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:fc:6d:09:78:d1:f0:40:0b:35:f0:2c:7c:dc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Sep 23 07:00:37 2026 GMT
Not After : Sep 24 07:00:37 2026 GMT
Subject: CN=c2a19bc6d5dd3cba6ec373ffff31c11ca0d5b789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:09:72:eb:7b:9c:0f:3c:14:d6:fe:8a:91:
5e:7c:15:ed:d8:4b:63:2e:10:92:d2:26:ee:21:55:
e3:86:2f:3f:df:73:b6:6d:28:db:b8:36:d0:3e:72:
56:d9:ae:fa:98:04:89:6e:67:52:a5:12:b4:b5:74:
ec:f6:cc:de:ce:f9:44:7c:6d:81:66:0e:24:c4:ad:
2c:2e:01:ae:71:b7:f2:d5:31:02:57:95:93:a8:03:
a9:a8:db:bc:16:68:34:ac:58:7c:1d:7d:ac:71:1f:
77:98:d6:b6:a9:d8:85:1a:49:3c:e1:d1:97:ab:c3:
05:02:a5:9b:cc:79:24:a8:e0:46:f1:6a:f7:f9:54:
05:44:a5:8d:0c:b4:13:e5:c2:63:cb:53:76:3d:50:
ad:8a:ee:0e:57:48:91:c1:6a:42:9f:32:68:a2:ff:
7f:63:e4:91:e1:59:fe:0b:44:59:ff:b2:55:95:0d:
91:94:06:6f:23:e4:e2:2b:c0:68:75:70:62:1f:1d:
86:8f:c5:10:75:ee:74:c0:55:1c:bd:2f:3f:b2:29:
1b:69:ca:28:fa:a3:c1:88:26:d6:11:05:60:e5:70:
df:51:ce:8c:01:49:2e:44:c5:be:43:0a:07:ee:2b:
2b:cb:9b:f0:52:38:db:80:4d:20:82:37:73:0e:75:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:9B:C6:D5:DD:3C:BA:6E:C3:73:FF:FF:31:C1:1C:A0:D5:B7:89
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bb:ee:92:92:9f:51:c0:82:1a:66:08:2d:e0:44:9c:1e:d4:
60:1b:09:c2:a0:a0:09:ec:e6:bb:cd:4b:75:2e:2e:76:3d:50:
26:60:1d:06:71:97:89:fa:9b:7a:72:19:c2:21:87:76:bb:9a:
6d:df:bb:c3:2b:76:b7:63:f2:b9:1f:59:60:a6:c3:b9:f4:89:
c6:31:d0:41:32:5c:bb:3d:93:b1:cb:86:58:83:20:f2:3f:34:
37:7b:02:26:5f:79:05:5e:2d:51:27:c6:18:ac:c7:cf:c8:ad:
c9:72:a7:38:5a:c4:69:5a:07:2e:24:e5:38:f2:3f:97:70:c9:
7b:6a:bb:56:58:80:a6:6d:44:f8:cd:f7:4b:83:09:1a:39:d0:
af:75:50:b5:8c:f8:42:61:36:a4:16:56:10:3b:da:79:18:8e:
38:de:a7:f8:60:09:b9:41:b4:a2:b7:70:3f:32:c5:5a:c1:ea:
3b:a7:1b:73:52:08:b6:c5:ae:ac:da:de:2e:b4:f7:fd:d0:e9:
05:4f:3d:d2:58:8b:4e:e8:58:1a:1a:92:02:14:d3:78:03:08:
36:6b:d3:8c:91:7a:6b:9f:1d:ce:e6:17:22:f4:37:a0:15:42:
b0:2d:82:61:5e:c8:10:80:1d:d4:3b:79:f9:fc:70:ec:39:c9:
d2:b7:c5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:25:48 2026 by rpki-client