Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: j9ur0k4AINrxCXbaGMNifYiq/45V7UKgdclLBeoxBoY=
Subject key identifier: 54:CE:DA:85:C8:DE:F9:0C:7B:99:53:93:27:4D:EA:E9:8E:AA:8F:5E
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 01A10E151A4B21C387E109335AC1E7D3C990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 01D3
Signing time: Mon 05 Oct 2026 22:00:26 +0000
Manifest this update: Mon 05 Oct 2026 22:00:26 +0000
Manifest next update: Tue 06 Oct 2026 22:00:26 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: 5y/tNCcsafP3t1/fKGOcz03rdh+j22aPSZyREMwH2Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:1a:4b:21:c3:87:e1:09:33:5a:c1:e7:d3:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Oct 5 22:00:26 2026 GMT
Not After : Oct 6 22:00:26 2026 GMT
Subject: CN=54ceda85c8def90c7b995393274deae98eaa8f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:6a:8c:39:53:dc:01:a4:6d:60:cb:a2:4d:
30:28:ca:1d:cc:0e:0b:97:82:c8:ee:ed:f8:c3:79:
70:44:23:2f:88:07:cd:d7:8e:2f:03:fa:a9:1b:ff:
fc:70:e7:23:4c:ed:a9:cf:e2:23:47:d7:09:4f:80:
67:f0:14:21:93:b0:f7:a3:12:c9:d6:d5:80:f9:e4:
36:22:d8:8f:74:c0:58:8b:6e:45:19:45:87:36:b3:
75:c4:76:4c:35:92:fc:52:40:8a:b8:fe:8e:27:47:
91:3b:07:02:2b:6b:32:ef:bf:dc:bf:0a:05:08:e8:
ab:b2:ea:34:a2:ea:00:21:0d:70:35:3b:92:4e:44:
bb:02:47:c0:ae:e0:5a:22:67:5a:f8:9b:e5:40:18:
49:6b:c7:5e:68:b4:5b:97:b2:87:89:9c:67:8a:37:
10:a0:a6:8d:80:4e:e8:44:e2:b3:cb:63:40:17:fd:
91:af:89:5f:2e:99:0b:af:21:71:cd:e5:24:f4:85:
14:e1:8c:98:5c:0a:3b:a3:4c:45:3a:fa:63:1f:27:
f1:fb:84:56:f8:d1:9d:79:96:96:18:6b:79:25:cd:
b9:1e:79:a0:4d:9c:85:a0:f4:ac:21:77:aa:af:1f:
6b:21:19:d1:bd:81:fd:0e:c2:20:30:a9:7e:e4:b0:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:DA:85:C8:DE:F9:0C:7B:99:53:93:27:4D:EA:E9:8E:AA:8F:5E
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:20:0a:75:60:3f:72:64:90:fa:c4:fa:40:11:f7:3f:5d:84:
bd:86:18:88:14:f2:35:e5:29:bf:45:56:fc:b8:64:36:c3:a0:
7b:b3:01:5d:cc:69:f3:45:33:a6:f6:fd:db:2e:6e:ec:d5:a6:
c4:21:4a:9c:35:03:8b:67:11:d5:fd:b4:0c:43:9d:bb:0d:9e:
1e:3b:dd:5f:9c:63:42:64:9c:94:fc:22:74:68:ac:58:ba:b3:
22:6b:93:b5:8f:27:2a:ec:ee:05:83:82:3f:1e:0b:b3:dc:e6:
ad:f9:f0:03:3b:7e:f4:40:c4:4a:ed:cd:72:77:57:13:9a:41:
c4:5a:45:1b:4d:68:b7:99:80:db:b2:05:88:30:a6:d7:3f:6f:
7e:a3:a2:f7:50:ad:6a:12:ca:95:54:75:68:f5:53:be:ec:a3:
cf:a7:4c:e0:33:af:75:cb:d8:18:ea:eb:7a:32:6b:bf:cf:41:
9e:ef:7b:2c:4b:4a:8c:83:ca:0a:fd:8d:5c:a9:25:80:d0:bd:
5f:cd:3b:cc:6c:3a:9e:1d:42:95:ca:6e:e5:ed:a8:b7:21:0a:
5a:c5:f5:44:4a:d5:da:ed:b4:f2:4e:43:d0:eb:7a:52:01:db:
73:39:e6:a1:26:d0:8d:b5:c1:79:d9:e2:27:ad:55:60:3b:00:
01:19:11:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:00:10 2026 by rpki-client