Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: 8tAmLLB+/Yhblj56S1B0FaPU5SmuJ26iVm4LF3y7Fhs=
Subject key identifier: BE:AC:0F:9C:9A:08:A3:D4:41:6F:42:93:D2:37:21:BB:D4:49:78:DE
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 01A0C58E92622716E1BE5EFAE59BA9734A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 01E2
Signing time: Mon 21 Sep 2026 20:00:50 +0000
Manifest this update: Mon 21 Sep 2026 20:00:50 +0000
Manifest next update: Tue 22 Sep 2026 20:00:50 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: Ni58rA9Yz5NNVSII5tYvLTHb0SLUpeDqrKal5333Rws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:92:62:27:16:e1:be:5e:fa:e5:9b:a9:73:4a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Sep 21 20:00:50 2026 GMT
Not After : Sep 22 20:00:50 2026 GMT
Subject: CN=beac0f9c9a08a3d4416f4293d23721bbd44978de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:56:18:4c:2d:51:b4:11:d6:9e:b0:2f:7b:
9d:1c:c0:46:d8:24:60:95:11:ba:a3:6e:80:b7:64:
56:fb:57:45:ab:4e:03:ff:b6:48:30:98:09:c3:b4:
3b:97:c6:03:d0:3c:b5:db:6f:86:ab:2d:e6:c2:a6:
64:db:3b:24:3f:e0:34:48:40:d3:cb:f6:00:56:38:
91:4f:ee:27:26:43:16:90:46:69:c3:f8:82:c6:22:
90:b6:c7:2e:b2:56:03:d4:65:6a:db:63:74:e0:86:
1e:8b:cd:02:aa:6e:52:d1:58:34:12:16:93:8f:2c:
e8:a2:96:e4:ab:04:b2:0c:86:41:d8:ef:43:0d:32:
71:a3:71:79:0f:03:72:15:7e:e8:d7:7f:4a:b9:de:
16:f3:b1:25:5b:fc:ec:a8:76:92:10:f7:86:7f:85:
ce:6c:a4:f5:af:a4:35:2d:76:f6:8e:48:52:ac:bd:
b9:6a:c1:e6:16:49:89:60:75:d2:97:91:b3:89:c5:
87:18:8c:a5:69:d3:34:8d:04:38:e8:3d:b3:d5:54:
f3:87:0c:b5:62:5b:ef:14:38:60:0f:fd:89:3e:25:
26:b3:5e:16:82:24:5d:ab:71:8a:8b:c7:bc:70:a3:
83:7b:f7:b2:c9:ed:5f:fd:66:67:29:6e:fe:1d:66:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:0F:9C:9A:08:A3:D4:41:6F:42:93:D2:37:21:BB:D4:49:78:DE
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:57:69:a2:e6:cc:e5:7f:f3:44:dd:54:8c:c6:34:65:64:b7:
53:cc:37:ea:79:41:ce:58:6e:cc:46:9c:aa:93:e4:7a:c1:c8:
82:dc:4f:5e:e9:c4:19:c8:66:c3:13:91:5a:09:15:72:85:bb:
6c:b3:32:f0:bb:e9:9c:95:c2:c5:ce:32:39:91:30:07:0a:77:
c9:3b:3b:33:b4:ac:e3:6b:35:2e:93:d7:9e:5c:80:6c:5a:b9:
3f:51:c3:20:75:6a:a2:00:cd:b1:d3:65:6f:8b:50:9a:1e:cb:
b1:16:53:52:53:22:64:b3:1c:a1:bd:e8:f6:a8:eb:f0:f9:ab:
3f:80:44:7c:ee:b0:69:1d:8f:a7:d0:2a:93:4a:51:68:82:ad:
8b:ea:fd:62:b2:01:a9:e8:a8:69:dc:09:89:4f:1e:b1:be:df:
22:f5:2a:67:f0:04:12:25:40:a1:e5:f3:26:2e:7b:0a:58:69:
b2:68:9c:9d:0e:b5:c2:50:82:90:b5:ad:eb:aa:ff:f2:eb:aa:
12:8a:40:3b:12:0e:89:54:18:74:c9:15:7e:45:df:1c:fe:58:
09:fd:98:bb:62:33:e3:bf:35:70:62:81:f5:6d:a3:95:57:65:
f7:ec:46:c6:f2:c1:5e:67:f8:af:d2:63:37:a3:7c:c4:e8:36:
05:97:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:35 2026 by rpki-client