Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: Cooh8d0U2OavFpZ9R4YsLlAUBiTjCkdePshz0zsB7aI=
Subject key identifier: 8F:66:63:09:5E:F6:C9:4B:A0:06:70:10:E4:3F:A9:FE:5E:05:68:A5
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 01A0C64B6E4CD49AD283E718FE437C0A90B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 23:27:07 +0000
Manifest this update: Mon 21 Sep 2026 23:27:07 +0000
Manifest next update: Tue 22 Sep 2026 23:27:07 +0000
Files and hashes: 1: XxU53iskn-ghQrysuCl7QV5EIVs.roa (hash: oqxXXhRu60oNNFxZKXkIA3Jy2yC1dlqRqHIbYUOutog=)
2: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: y0n2rRGnR0NTUUxS9XsIKtC/TEtMNTpzES7ra/WiII8=)
3: nneKuyGudgnv0PN8n2dZjphyBVE.roa (hash: KIC2+ZKN98r/9K20gCZWzWZI9OqGxcTSO8qEwBBgPA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:4b:6e:4c:d4:9a:d2:83:e7:18:fe:43:7c:0a:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Sep 21 23:27:07 2026 GMT
Not After : Sep 22 23:27:07 2026 GMT
Subject: CN=8f6663095ef6c94ba0067010e43fa9fe5e0568a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0c:35:ed:63:90:03:a7:45:23:97:4b:53:55:
cf:d7:5c:4a:a8:8c:f4:22:38:e7:38:a0:16:ff:94:
6c:46:5f:1f:bc:c4:1c:af:55:d3:23:bf:5c:8f:f2:
5b:dd:30:9f:c4:a8:88:f4:ca:6b:22:c1:1b:92:b9:
a9:2c:58:32:f0:99:f3:d5:2b:bf:a4:c8:e6:01:b4:
c0:d6:9d:bd:0c:d2:d1:ef:3f:d4:4b:66:17:69:3d:
19:b4:fb:20:24:72:c1:7f:24:00:b4:e8:ee:ad:09:
09:7c:b5:df:93:ea:da:65:91:27:5c:62:06:1f:b1:
d0:24:ee:85:ab:f2:7f:f3:9e:70:9e:69:4c:8d:05:
79:0e:3f:92:d8:8e:c7:a7:fd:4b:b1:cd:0f:d9:e5:
cf:38:a8:5f:b5:b1:a2:42:90:cd:75:a7:eb:0d:2c:
84:c4:3c:71:57:d0:58:d7:e2:89:08:78:a6:2b:4a:
ec:e1:e9:76:2a:4d:29:8b:7f:a5:f4:76:1b:91:50:
24:b0:0a:29:a7:68:5e:2c:96:62:3b:a2:c8:c3:31:
b3:b3:4c:ce:0f:0c:0f:e5:a7:d1:f7:36:b2:5d:d2:
b2:37:28:ef:f3:b2:64:b7:89:01:48:0b:0f:87:30:
06:2c:df:79:48:6c:0c:4f:78:b3:d9:8b:50:33:0a:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:63:09:5E:F6:C9:4B:A0:06:70:10:E4:3F:A9:FE:5E:05:68:A5
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:b1:5c:3c:69:a7:f2:17:ae:0f:97:84:e7:cf:88:b8:fb:
cd:a2:cb:6a:28:4f:f1:0d:5a:74:b7:b6:90:f0:a8:79:97:e2:
74:67:92:70:19:6a:1c:1e:df:ed:74:e9:f6:e7:1f:9b:8f:49:
b8:cb:0e:d0:0e:fd:78:9e:9c:85:83:f3:02:75:20:d8:3b:8c:
7c:0b:bd:05:3c:27:c2:59:b8:cf:61:45:da:19:6a:5f:4e:a9:
bc:35:8f:e4:ac:a6:f3:cf:c5:1d:b5:c8:05:d3:e4:62:b8:9b:
0b:dc:9f:f8:08:5f:52:b2:46:d3:6c:b7:b2:a2:6d:1b:20:f6:
f0:80:6c:18:44:96:fa:79:b6:4a:3d:e1:96:74:7b:9e:49:d7:
2f:d1:b2:53:f8:89:b8:b7:0e:0b:ca:89:20:18:ad:01:4b:9f:
5d:3a:5c:f1:21:f1:be:2c:3f:ec:ec:35:2b:6f:4a:b4:98:1c:
e5:b5:5b:47:0f:2c:ab:3e:da:4e:11:f3:1d:b1:da:4d:53:b0:
e6:9f:6d:c6:03:44:94:33:3a:b4:c0:42:2b:34:ab:e4:dd:57:
c3:41:6b:09:c7:5e:d2:e1:2a:a5:82:04:b6:d5:b9:16:50:0c:
0b:8b:0d:63:d3:93:e2:49:c8:0f:c5:cc:52:d5:8f:f4:c1:0f:
4b:0c:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:36:02 2026 by rpki-client