Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
File: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft (raw, json)
Hash identifier: cXqAWDn82qyyJqmAVKnKwJS7oQP41mK0ud1pEus7014=
Subject key identifier: FD:35:4D:44:79:DC:F5:5C:F3:98:FC:EE:90:D8:4C:0B:E4:3B:33:B1
Authority key identifier: 9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
Certificate issuer: /CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Certificate serial: 01A0CE5A564E7DE84AC803DF38FA880C61E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
Manifest number: 9B
Signing time: Wed 23 Sep 2026 13:00:21 +0000
Manifest this update: Wed 23 Sep 2026 13:00:21 +0000
Manifest next update: Thu 24 Sep 2026 13:00:21 +0000
Files and hashes: 1: DOzgdPzODjDX1Ql-hTykAK7psLs.roa (hash: mYengSshg8va1KT9JslIYiakS9Az+FP585Uc0+emJdk=)
2: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl (hash: uR52X9eN3+NzAfRJSJL9+hA6udfcGRkfyK2Xfaj3Tw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:56:4e:7d:e8:4a:c8:03:df:38:fa:88:0c:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Validity
Not Before: Sep 23 13:00:21 2026 GMT
Not After : Sep 24 13:00:21 2026 GMT
Subject: CN=fd354d4479dcf55cf398fcee90d84c0be43b33b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:43:43:f8:26:fd:eb:89:1b:ec:03:df:6f:
ca:9a:6a:5e:57:92:d9:06:79:73:6a:dc:63:71:79:
88:1c:50:22:78:65:32:96:0f:fe:a1:15:47:57:6b:
5b:c3:7a:8a:e9:a1:24:88:86:98:fc:12:cd:b0:4b:
c0:51:2a:c5:3f:23:01:ef:4a:d2:fa:9e:12:3c:03:
9a:9d:cc:ed:cf:93:0d:2a:14:cd:8c:11:d0:bb:ae:
32:ba:ad:1d:ff:01:4c:32:a0:98:15:d1:b8:70:ce:
c2:2e:01:2e:67:0c:ef:27:8b:a7:e7:cf:ad:83:79:
6e:5f:25:01:28:2a:17:cf:a8:c0:c1:20:53:7d:73:
81:64:8f:e4:29:0c:34:49:f5:b4:b5:70:7f:fe:e6:
ae:72:d2:40:84:6d:45:e4:09:e8:af:f7:58:9a:f1:
0a:4c:7f:b8:73:c0:e0:4f:48:b4:f1:6c:cc:9b:49:
57:3e:6e:71:72:6f:f9:3f:a6:39:3c:b1:66:cd:f4:
23:5c:71:06:cb:61:de:3e:a5:c1:aa:65:79:ce:db:
b5:de:ef:be:d4:ad:5a:ce:49:b0:a0:6d:7e:46:c0:
5e:40:e6:af:e7:df:b0:84:12:ba:76:fe:cd:10:16:
cf:da:7c:b1:0e:02:fc:af:de:46:c0:68:ab:04:62:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:35:4D:44:79:DC:F5:5C:F3:98:FC:EE:90:D8:4C:0B:E4:3B:33:B1
X509v3 Authority Key Identifier:
keyid:9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:42:4b:db:6b:1c:54:4a:61:54:6c:55:c8:aa:97:18:b7:
9e:2c:7d:5b:95:06:79:7a:c0:4c:1c:42:a0:48:2a:27:95:07:
62:f8:81:42:36:2c:02:32:0b:0d:7b:36:79:43:6e:34:c0:ac:
9f:be:23:0d:f9:d1:2f:dd:17:20:cf:e9:cc:b5:85:34:d1:f5:
4a:93:c0:d3:ba:6e:ed:0b:2b:7b:f3:06:9b:ea:c4:0c:96:22:
fb:d6:c0:ed:4a:d3:77:01:b9:dd:c0:e7:e5:94:64:2a:4d:5d:
d2:01:9d:66:d5:11:6c:34:99:b2:c1:01:7b:10:ca:72:29:5e:
84:f8:d3:d1:8a:85:d8:8e:6f:d1:b9:e4:5b:1f:22:1a:1f:f2:
ea:aa:9a:a0:62:96:77:73:e3:78:5e:3c:a3:ab:e4:29:bc:25:
d7:af:9b:e3:d0:bf:49:f6:3b:a7:99:1a:71:0b:b3:f0:50:1f:
7f:b3:bb:0f:f9:a3:50:aa:0e:f9:f8:39:b4:ab:78:1e:ce:e6:
60:cc:f5:5f:21:c8:2e:54:71:74:ec:89:99:1e:7c:8b:91:1f:
1a:d0:46:ac:20:20:3d:c9:6d:9a:d9:0a:ca:25:d4:42:b4:5e:
59:1f:05:e5:f6:72:27:a7:5c:5b:14:ac:b2:ec:14:86:c0:69:
8e:9e:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:49:07 2026 by rpki-client