Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json)
Hash identifier: qxzIw1RaxZEMXcg2fPzBkmaraaPJnBK2udxlkvptf64=
Subject key identifier: 65:E6:F0:BE:3C:5E:33:7A:D5:44:9F:3A:C4:E0:9E:D2:87:2D:C3:B4
Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Certificate serial: 01A0E99B523C7CB33A60597A4D2C5ECB6BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 20:01:05 +0000
Manifest this update: Mon 28 Sep 2026 20:01:05 +0000
Manifest next update: Tue 29 Sep 2026 20:01:05 +0000
Files and hashes: 1: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: 6eK/tmg+yAVejoswGS+GZcT0y75TMwaij5h/lGuIyTY=)
2: vw7eBru87ahloA7D5EH6hOtMUII.roa (hash: 2mimZ134P7WFkHrXJ/TfKbuB976ftfTz/nzdDHlC6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:52:3c:7c:b3:3a:60:59:7a:4d:2c:5e:cb:6b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c
Validity
Not Before: Sep 28 20:01:05 2026 GMT
Not After : Sep 29 20:01:05 2026 GMT
Subject: CN=65e6f0be3c5e337ad5449f3ac4e09ed2872dc3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:ef:09:51:e1:37:f5:4b:38:21:5f:9f:60:
ac:e3:6b:22:f2:83:d3:c0:b7:3c:53:1a:c8:4f:27:
85:c9:36:a2:fc:cc:71:ab:ae:38:89:37:ba:bf:80:
10:ae:2b:8a:a5:25:4d:e9:b4:22:5d:99:5c:fe:14:
aa:7d:4b:db:68:a5:7d:ca:27:70:24:26:d2:11:76:
df:24:b6:cc:5d:f3:f9:e7:26:50:8e:51:01:04:44:
e2:d8:79:db:bf:33:37:68:fb:28:64:53:21:00:c5:
44:ca:f8:29:91:cd:ca:ac:a9:18:e0:c9:6c:84:0c:
93:e3:9f:c4:8e:e4:9d:a7:79:94:73:3a:02:43:72:
46:5f:56:25:60:70:43:f8:f4:46:5c:ae:1a:fa:f1:
df:da:4b:9e:9c:88:1d:0a:2e:bb:67:b1:1b:86:12:
85:a3:1c:02:ca:5b:ba:4f:ed:a6:21:8a:53:c8:78:
42:33:a9:96:5d:80:28:26:0a:6f:91:a7:4e:e3:c3:
83:54:6e:ae:7d:8f:a6:ee:04:8b:7f:d6:57:48:bc:
b9:43:0a:31:4a:d6:73:8f:05:d7:1f:a4:ed:73:ac:
7d:54:20:53:07:fd:ca:e4:be:f1:20:0f:9c:c0:6b:
b2:f4:2b:b9:cd:da:d2:08:0c:73:11:04:52:99:48:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:F0:BE:3C:5E:33:7A:D5:44:9F:3A:C4:E0:9E:D2:87:2D:C3:B4
X509v3 Authority Key Identifier:
keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f7:13:14:e0:67:51:3e:57:90:c6:e2:b0:f8:ba:65:2d:dd:
3a:42:0d:a7:e5:96:f9:1c:46:3e:1f:59:a7:ce:72:00:fd:68:
84:7e:84:4d:22:66:47:aa:d7:19:8e:3d:de:a5:75:f9:f9:41:
b0:45:0c:38:fc:75:c7:7d:a0:e6:26:25:7a:ce:d3:bd:5f:1b:
a9:e4:b7:18:76:cd:bd:fc:7e:8f:01:51:fb:5a:d2:fa:cf:59:
1c:54:92:05:df:48:21:02:02:b3:09:11:10:8c:b6:ff:ea:03:
8c:5a:76:cd:ef:06:a4:7d:dc:2d:24:b0:f9:94:ef:91:14:c8:
bf:26:e2:ef:c4:16:85:76:0a:a1:a4:d9:f0:b5:fa:ed:c3:ad:
a0:db:6d:80:21:42:2f:1a:47:de:bd:aa:d9:e7:d5:68:6b:26:
25:48:6b:e2:21:b2:e7:59:9b:76:bc:18:91:d3:5b:e4:f9:85:
30:f1:73:0e:ba:05:7d:37:3a:e3:ae:1a:2a:cf:1f:ef:0f:02:
88:81:66:6b:d6:61:96:51:52:73:51:b7:dc:4c:39:45:68:31:
8a:9f:22:51:2b:6f:1d:e0:eb:9b:0a:1c:91:95:3d:dc:8d:04:
e7:3f:c2:15:bb:db:1a:db:2d:04:da:8e:37:ea:24:d6:2f:0f:
e6:f9:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:20:26 2026 by rpki-client