Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: BLVpNc6YhclXoTU0MCP0MGZZ5t4Zc3w+1ddU9xVtFxY=
Subject key identifier: 41:4C:6E:61:BA:C0:78:DF:3F:DF:BD:1B:30:3E:CE:6A:8D:91:11:60
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 01A0C6D7B879A106AE68739CD2728770D7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0D36
Signing time: Tue 22 Sep 2026 02:00:21 +0000
Manifest this update: Tue 22 Sep 2026 02:00:21 +0000
Manifest next update: Wed 23 Sep 2026 02:00:21 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: hTORrTx4VdnUKpvjN8ws5MhNwG6Ihx52BZYzQxeyABk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:b8:79:a1:06:ae:68:73:9c:d2:72:87:70:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: Sep 22 02:00:21 2026 GMT
Not After : Sep 23 02:00:21 2026 GMT
Subject: CN=414c6e61bac078df3fdfbd1b303ece6a8d911160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:f2:b6:66:60:9e:ad:72:97:46:f7:98:99:
aa:3a:a5:2e:53:ec:7b:a5:3f:08:02:37:e2:47:07:
e5:80:f9:5c:a4:6a:55:ee:c1:6f:55:7d:61:a9:e2:
cf:30:2d:16:85:4d:1c:b5:04:81:8e:6c:61:b9:2c:
22:44:65:b2:c2:50:ff:27:04:2c:b4:3c:c8:7b:d6:
0f:84:10:77:db:8e:59:0b:f5:0b:89:34:31:73:91:
4f:cc:ee:30:af:56:37:50:af:5a:54:e9:1d:a7:53:
ab:9c:59:ec:53:77:b9:e9:14:99:7c:35:0f:c9:e6:
fb:06:e7:f2:cb:49:c2:67:55:d2:26:3e:54:e6:e2:
bd:57:9c:d0:df:cf:09:51:7f:cd:20:03:c8:05:5c:
05:41:20:4d:96:dd:c2:a4:2c:e2:3d:c7:ea:9b:60:
3b:29:fe:12:5d:9d:3e:59:d3:d5:f1:44:91:00:b8:
23:0e:a2:da:17:a9:42:04:71:21:eb:60:d9:0b:93:
f6:42:68:b2:e0:4c:02:45:3a:9f:68:47:85:3d:db:
13:94:0c:cb:ca:e1:49:39:d9:04:0a:bf:41:ee:ba:
fd:69:99:97:b4:0c:a4:40:d5:39:31:31:d2:fb:9a:
7a:f8:48:de:e1:a7:08:64:36:f8:93:b0:59:b9:5a:
08:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4C:6E:61:BA:C0:78:DF:3F:DF:BD:1B:30:3E:CE:6A:8D:91:11:60
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:96:41:0a:23:01:dc:a3:2c:0b:28:bd:c4:d4:ff:db:0a:2d:
5c:97:14:d9:fa:b7:73:fc:8e:5d:84:6f:79:f8:86:64:d4:4b:
82:9f:10:fd:21:ad:0a:06:ab:da:8d:13:4c:7f:f2:e3:3f:98:
77:25:e6:3a:80:6f:eb:6e:49:8c:50:3f:fe:a9:74:99:58:02:
fd:dd:93:18:8b:1f:38:14:56:0b:4e:d3:8c:a2:6e:0f:f0:9e:
78:08:55:3b:ac:3b:c1:49:18:9d:f6:49:a6:45:cb:06:93:63:
d4:b0:c4:35:c9:e6:76:30:53:0e:f3:18:90:d4:82:12:46:81:
f4:b5:dd:1f:f1:93:44:dd:2a:84:a9:af:dd:6b:c6:5c:25:48:
50:b1:f7:9d:a1:f8:68:92:4f:76:79:ba:aa:b1:52:4d:c5:d0:
74:df:31:e8:f6:37:f9:d8:0e:6f:48:00:a0:76:d8:df:0f:28:
a5:5e:9f:35:7a:9b:8d:5a:8d:ac:67:97:5e:f2:7e:39:09:1f:
62:cb:d1:7a:a9:8c:5c:c8:05:df:18:48:57:cd:8b:d6:a9:9b:
90:ce:07:31:86:08:0b:f8:31:e8:bf:58:27:95:8c:c5:73:82:
4c:3d:db:a2:57:a3:e6:b7:5f:f5:30:f8:ca:86:e5:73:94:1d:
c3:00:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:18:29 2026 by rpki-client