Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: Y7hVEORmRkxVaMXAfQzo5AloqpsvMOIIqPGKQ7fag24=
Subject key identifier: 9E:A0:86:3A:BE:02:E5:D0:7E:D3:54:60:8B:ED:34:47:8C:4E:04:1B
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 01A0C28DCC2A290AA8B07997CD20E81D2A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 1A45
Signing time: Mon 21 Sep 2026 06:01:07 +0000
Manifest this update: Mon 21 Sep 2026 06:01:07 +0000
Manifest next update: Tue 22 Sep 2026 06:01:07 +0000
Files and hashes: 1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: Ix+DAmT642Wfe1P1DuFlgV9iXOTwhrw4/zYgfLbCL6g=)
7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:cc:2a:29:0a:a8:b0:79:97:cd:20:e8:1d:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Sep 21 06:01:07 2026 GMT
Not After : Sep 22 06:01:07 2026 GMT
Subject: CN=9ea0863abe02e5d07ed354608bed34478c4e041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:15:57:97:e5:36:1e:a3:8e:99:c1:f9:ad:
5d:8e:b0:4c:69:42:15:97:24:7c:17:af:cc:cf:b3:
39:b8:35:52:68:bd:1c:4b:ce:8d:04:64:7a:a6:fe:
27:16:f9:71:f7:53:8d:66:fc:19:8d:d3:62:25:e8:
e8:e8:57:ff:c9:b0:9d:89:46:6a:7e:d6:86:f7:bd:
33:f7:02:31:d6:4b:72:83:d9:75:24:5b:1e:41:dd:
ec:4b:88:1c:27:e9:8d:83:6c:b3:fe:c1:7e:58:64:
e5:9e:9a:48:29:42:13:a8:9d:89:72:9e:73:8c:3c:
32:c0:13:8a:cb:c2:95:08:9f:33:01:c0:72:b8:a6:
17:da:67:d1:96:88:8a:e7:89:16:59:38:6e:51:dc:
b1:5c:ac:a7:44:5f:30:85:12:e5:3f:03:41:c6:0e:
c2:49:55:b1:1f:53:66:f3:8b:19:71:42:1d:e9:84:
c3:4e:7b:06:c8:32:86:eb:ae:65:e8:d2:c9:fd:58:
28:ea:b0:72:72:53:df:7e:6e:de:a6:a9:07:b1:f0:
c2:5d:bc:e3:eb:a5:96:19:4e:72:98:38:3e:8a:1f:
9b:7d:ad:02:61:9d:4e:f6:4a:19:35:aa:6f:12:d8:
15:a7:a8:c4:e9:73:f1:a4:f8:48:e5:d4:92:3b:6e:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:86:3A:BE:02:E5:D0:7E:D3:54:60:8B:ED:34:47:8C:4E:04:1B
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e9:a4:f8:93:a1:bc:23:e3:4e:03:fc:52:6a:8f:9f:0b:7d:
fb:b5:cd:bb:0b:f2:9d:2c:e3:9c:23:03:85:68:22:39:ec:ad:
dd:e8:00:13:fd:8b:1e:19:ff:d6:6b:bf:d2:ab:c4:05:df:b9:
56:81:af:d0:0b:51:60:33:fb:e3:e3:d3:d9:b6:b6:4f:20:55:
75:30:69:8b:6b:38:c0:0a:f1:ab:6d:38:33:10:ff:fd:5e:50:
d6:ed:ba:51:4b:d4:bf:f4:88:ec:21:2c:0d:0e:1c:64:9c:5f:
0a:18:6f:a0:ed:ae:ff:ff:37:16:42:c8:51:49:9f:20:1d:18:
4c:58:ed:ca:c7:24:d2:b4:b5:c8:cc:d3:cc:7c:47:c1:51:3e:
73:8e:65:d1:aa:33:de:5f:c5:cf:e8:8f:ef:79:58:dc:97:3c:
fb:95:5e:6a:f1:d5:87:93:f0:8b:4a:8a:77:f4:0d:c7:73:00:
31:24:e5:fc:f5:bd:0d:b4:a6:66:32:63:d9:99:41:4d:09:20:
e9:00:ec:b5:cd:85:de:09:98:75:43:ab:f2:6b:f2:9a:60:10:
0b:07:22:f4:87:3f:51:06:9e:38:0d:c3:44:83:bc:fb:77:08:
17:aa:a3:70:a9:fa:a6:92:10:6d:1e:d1:3c:31:1b:3e:84:aa:
81:7d:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:45 2026 by rpki-client