Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: sFpQha2rc8P8TIgSGFp/PNHseEaf0Om3jIyiwhCnZf4=
Subject key identifier: 8E:6A:79:D9:E6:69:F1:99:76:19:C9:CA:F2:06:90:25:8B:64:3D:DD
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 01A0C858BE3C79C3AFB810A69772206665BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:54 +0000
Manifest this update: Tue 22 Sep 2026 09:00:54 +0000
Manifest next update: Wed 23 Sep 2026 09:00:54 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: scbdCRqzewSlm0yR0ntjec0d0ZqKY8Jv/quY2jJ8vBc=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:be:3c:79:c3:af:b8:10:a6:97:72:20:66:65:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Sep 22 09:00:54 2026 GMT
Not After : Sep 23 09:00:54 2026 GMT
Subject: CN=8e6a79d9e669f1997619c9caf20690258b643ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:7c:1f:6c:cc:83:8d:aa:54:cd:46:2b:f9:
29:64:51:f1:a4:9b:df:09:1e:f0:17:f1:05:46:6f:
dd:28:a8:4e:aa:82:9e:f6:8b:b9:c5:d3:92:11:2b:
22:4f:5d:d6:49:6d:53:a5:59:5f:04:80:b3:5f:9e:
2b:87:7d:f6:fb:b5:bd:1e:48:a5:07:f2:a2:bb:52:
09:31:38:eb:1e:14:6b:f5:4f:23:f2:0c:ab:77:09:
1f:a4:dd:c6:03:62:05:99:51:f8:9f:fb:a4:7e:0a:
8e:30:fd:d7:9b:6b:aa:55:1c:f0:61:51:44:5c:66:
e5:78:8f:52:ee:f7:bf:ec:f9:f1:8e:8b:50:5a:3a:
fc:e6:e8:65:83:78:a8:92:5f:ab:df:33:0a:4f:db:
a2:1d:51:4d:07:e7:03:b9:b8:5e:7c:19:aa:cc:72:
59:55:68:48:63:aa:94:27:68:9f:00:ff:0c:ae:a9:
3e:0a:5e:74:8d:1d:50:91:78:8f:d9:5f:49:c1:26:
b6:43:77:5e:33:fc:67:07:47:72:a2:a9:f7:a2:c3:
3d:21:3e:98:b6:6f:fe:08:ae:94:db:40:e1:6b:d8:
c1:f5:f1:2c:da:a5:2c:c1:09:5e:37:4b:5a:7b:65:
2c:f7:92:83:d2:83:77:1e:af:38:39:15:85:4d:85:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:79:D9:E6:69:F1:99:76:19:C9:CA:F2:06:90:25:8B:64:3D:DD
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:c7:d4:db:e6:c9:e5:6a:39:04:1d:58:d5:84:7a:b7:6d:
c6:99:6e:30:7d:1c:2b:05:d9:cc:b3:55:12:6c:2e:cd:34:87:
dd:95:12:8f:f6:f0:fd:fe:71:7a:46:9e:15:23:3a:91:4c:ba:
b0:c0:0c:31:3a:32:03:0f:21:35:37:19:f6:b4:be:f1:f5:49:
25:da:73:af:f6:d0:bc:f7:95:e8:ad:96:ad:f3:44:fe:b8:45:
f1:b5:28:f9:83:28:76:5c:b4:f4:51:d5:b4:1e:7c:d6:c5:0e:
2b:68:5c:19:22:d7:7b:58:a1:44:8a:7d:38:d9:54:ed:2d:1c:
67:c5:8f:1a:fd:20:fd:0e:a5:9b:71:3b:0d:02:49:ba:e2:ba:
aa:33:5c:ed:8e:d2:e4:0b:19:19:cd:8b:57:89:04:ab:04:eb:
56:9d:67:b0:ee:fa:4b:d3:dc:d5:36:f4:6c:06:cc:ee:65:af:
2e:42:e5:17:83:9a:23:29:76:97:77:c0:59:4c:dc:22:cc:68:
23:e2:f6:29:d8:d4:56:e1:49:30:69:df:38:b6:95:8f:1a:a2:
47:32:db:53:90:ee:ac:ec:f0:0a:2d:fb:6e:fe:0d:75:3e:b9:
ef:34:d5:78:1e:dc:80:33:5c:86:52:f8:f3:04:49:91:98:21:
bd:e6:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:22:39 2026 by rpki-client