Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: i0smToSLo0upRyi4jWsxDhMzEF6PHsUNDwQIx8LLxUI=
Subject key identifier: D6:48:3C:3E:B0:85:3D:22:97:60:20:BC:E6:E9:B3:58:95:53:D8:1D
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 01A0DB3AFE552984DD85DF0E33CC0425DAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 0929
Signing time: Sat 26 Sep 2026 01:01:11 +0000
Manifest this update: Sat 26 Sep 2026 01:01:11 +0000
Manifest next update: Sun 27 Sep 2026 01:01:11 +0000
Files and hashes: 1: 4n02TxuOf2ywJSAjKw6VPCZcn9E.asa (hash: OQDIVrvJye3nEoAmjwb/FmK9E09Wjl5aNHmQrS/hccM=)
2: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: dRnFgRED2PN6w+qCZ6ZQJLWW3FYZt14FByM3Zs5cOnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:fe:55:29:84:dd:85:df:0e:33:cc:04:25:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Sep 26 01:01:11 2026 GMT
Not After : Sep 27 01:01:11 2026 GMT
Subject: CN=d6483c3eb0853d22976020bce6e9b3589553d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:d0:08:c5:c9:e2:4f:3d:51:79:d1:c3:c0:
e4:13:eb:8e:c5:c1:92:73:0e:62:cf:90:c0:cf:0d:
9c:67:40:65:a6:be:13:37:b9:72:9e:00:fa:b8:d2:
51:c9:23:a7:aa:ac:73:03:5d:d4:63:83:31:f2:0c:
02:c7:1b:b5:28:ea:58:4b:a6:23:87:c8:40:70:e0:
12:92:bb:81:c6:03:22:aa:df:7a:91:ef:fd:24:23:
c4:18:c2:11:4e:9d:83:89:e6:c4:5f:54:d0:74:7a:
e5:fa:8f:d2:b2:4e:4f:bc:f8:ca:f0:d3:0e:7a:58:
e1:08:ba:4a:7d:0f:73:7a:d6:9a:44:9f:36:7d:4a:
3e:1a:a1:dd:83:2f:42:de:4b:9f:7a:a0:31:13:a6:
ce:f1:03:8e:02:7f:52:63:b2:f0:f8:b5:d7:9f:42:
10:2a:38:d7:5e:60:83:28:b0:c5:a0:92:ca:9b:e1:
5b:a9:36:9a:93:58:a5:8f:7c:b5:bc:0b:65:e3:12:
43:0a:bb:41:39:b1:6a:47:d2:85:19:65:2c:28:80:
23:7b:b8:ec:62:c0:4e:7f:78:72:72:e7:b8:68:ad:
20:fe:4e:6f:88:10:fe:b0:e4:06:d5:13:7f:2b:58:
eb:52:38:90:d2:bf:56:c1:10:ce:b5:09:41:09:20:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:48:3C:3E:B0:85:3D:22:97:60:20:BC:E6:E9:B3:58:95:53:D8:1D
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:57:df:bd:b3:9f:66:dc:bc:4d:63:aa:71:35:32:bc:2c:4f:
37:f6:8f:02:29:b4:a2:eb:b6:b9:4c:74:e4:93:22:c5:6f:f2:
97:3f:dc:6c:60:3d:31:b0:f8:0c:44:08:f3:a8:f5:75:87:8b:
1d:eb:dc:3a:00:bd:73:07:09:93:08:5d:d5:26:16:11:57:51:
88:b6:e7:81:0b:d9:39:e6:34:75:18:00:d8:67:ac:69:e5:97:
c4:26:d4:38:80:2a:d5:b8:c8:96:5b:5d:e8:38:c4:21:97:08:
d0:ca:71:78:f2:8c:4b:77:fc:01:61:58:a4:a1:ac:b5:59:92:
d6:4a:7c:d7:6b:d2:72:60:c7:28:88:4a:72:a8:f3:d7:3e:65:
52:1a:c1:c5:a7:60:82:b3:aa:16:5f:d0:c8:be:92:1b:70:61:
78:e2:ae:c7:67:c5:35:2f:13:10:c9:25:36:ab:dc:8e:8c:60:
22:94:0c:a2:ac:4e:42:3a:34:b0:ec:28:78:f5:4c:4f:17:bd:
ff:ee:49:c2:9d:b2:43:1d:7b:de:4d:64:5a:c6:50:0d:b2:d1:
45:24:bb:e1:03:a9:e1:10:01:7c:9f:bb:1b:1c:07:66:3f:1f:
48:e5:9e:bb:5f:83:b2:54:43:ef:ec:f7:a9:6a:f6:82:f2:73:
83:7d:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:29:50 2026 by rpki-client