Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: jhXRPggROr6CcA20LM+wyAwaAlxGjLHT4VCQrLXxJPY=
Subject key identifier: 2C:4F:4E:68:E1:76:CF:C6:16:B6:1E:38:65:06:B1:57:21:5F:FB:BB
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 01A0C88FB53E4BD6AA1DFBB6658EB84D1C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1A76
Signing time: Tue 22 Sep 2026 10:00:56 +0000
Manifest this update: Tue 22 Sep 2026 10:00:56 +0000
Manifest next update: Wed 23 Sep 2026 10:00:56 +0000
Files and hashes: 1: 3bVeZ4jtU_nod0fE248hvJ8HwmE.roa (hash: tZeUGg3uohbozp0AKzn9i/jwYgDahKq/WKKbSHnm6EE=)
2: FRI2m35e7-42Vlqf3b-Y2NKeZLQ.roa (hash: oaE/hCDrQO5MgjbWzRph6lVm2avGrrJhXBmUB4OGEJY=)
3: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: Bsry8qxzy/XK5Fm1/wNaP0KJPXQbKeW9BD+dzBGHgxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:b5:3e:4b:d6:aa:1d:fb:b6:65:8e:b8:4d:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Sep 22 10:00:56 2026 GMT
Not After : Sep 23 10:00:56 2026 GMT
Subject: CN=2c4f4e68e176cfc616b61e386506b157215ffbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:d7:83:2c:ad:2d:d2:a8:aa:02:5d:86:18:
38:31:02:3d:90:ad:93:f9:66:f9:93:30:0e:d4:ed:
3d:1f:7f:96:7b:7d:3b:4e:03:05:fe:f8:01:e6:a7:
22:37:26:c8:ce:a3:02:86:72:eb:1b:c2:12:5c:eb:
79:41:52:4a:e1:e8:6d:55:1a:14:d8:39:d7:80:cb:
4b:37:a8:f6:0e:15:ca:eb:64:30:a6:99:e7:ef:ac:
e3:8a:6b:59:83:6b:26:10:a7:ac:38:b6:8b:df:2e:
d8:2a:c8:b2:e6:ef:61:97:2a:04:1d:e4:c8:31:31:
13:bb:1d:00:98:75:c9:a3:9e:44:73:31:6e:12:a8:
f1:03:90:e9:d6:8c:c7:f9:af:20:58:45:d2:6c:bb:
d9:12:e0:be:55:63:e8:f1:c4:7e:0f:9f:12:1f:b7:
78:73:b2:56:c5:6e:a0:ec:4b:f4:c1:8a:cc:bc:0a:
9b:29:61:c0:ba:66:f4:d1:3c:a8:d6:fa:46:21:64:
a5:99:a8:f9:bf:f7:6c:45:7d:de:5e:19:a4:ca:87:
c3:88:1b:50:f7:80:d5:a8:14:9d:da:2a:2f:bd:1e:
55:24:b1:e7:4d:05:c8:e7:e4:55:b4:05:23:5d:30:
8b:70:2e:7a:1b:4c:f8:98:94:58:ff:c5:c5:1d:cb:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4F:4E:68:E1:76:CF:C6:16:B6:1E:38:65:06:B1:57:21:5F:FB:BB
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:dd:7d:e3:13:9b:f8:13:ac:ac:1e:e5:a8:7c:24:90:94:
a3:e8:da:11:7f:57:b0:1e:f1:a5:73:1f:25:79:4b:04:1a:7d:
90:6c:7c:e9:fa:d0:01:62:8f:e9:20:b0:3e:26:39:e9:2d:04:
12:18:1b:86:dd:dc:bd:c0:66:e1:2d:4a:0b:0e:93:26:86:ec:
ad:f6:18:73:a6:bd:16:a4:23:25:e8:ff:d2:35:ed:aa:09:07:
77:74:01:4e:bb:e5:8c:3a:c4:97:91:47:b2:f5:9e:f6:b6:b1:
59:ac:e1:e1:1c:e0:90:54:a8:e0:ff:f6:87:6e:c2:2f:99:93:
33:20:92:e8:49:23:57:d0:b0:4a:46:ed:10:40:bc:17:4b:f1:
dd:fd:a4:48:40:c4:53:07:2c:a3:82:26:fa:82:ce:00:b8:fc:
69:df:6b:ce:d3:37:80:93:3d:b0:4a:52:13:54:03:26:a7:1d:
70:62:eb:15:fc:99:0b:ae:35:95:26:0a:a4:35:13:cf:27:dd:
b1:ed:2d:25:8b:73:81:27:bb:ac:50:24:a8:c9:7d:be:96:d2:
a0:77:14:6d:7e:ed:93:7e:cc:df:66:87:f1:8c:60:db:3b:51:
03:37:04:21:ca:cd:95:20:e8:63:5e:6c:18:d7:2f:43:de:db:
61:40:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:40 2026 by rpki-client